At MyPurse ("we", "us", or "our"), your privacy is not just a legal obligation — it is a core part of how we build and operate our product. This Privacy Policy explains what information we collect, how we use it, and the measures we take to protect it.
By using MyPurse at mypurse.app or through our mobile application, you agree to the practices described in this policy.
1. Information We Collect
Account Information
When you create an account, we collect:
- Your name
- Your email address
- Your password (stored as a one-way hash — we cannot recover it)
🔒 Important — Encrypted Personal Data: Your name and email address are stored using strong encryption. This means that even we — the MyPurse team — cannot read, view, or access your name or email in plain text. These values are encrypted at rest and can only be used for authentication purposes through secure, controlled processes.
Financial Data
To provide our core features, we store financial information you voluntarily enter, including:
- Wallet and bank account names and balances
- Budget envelopes and spending categories
- Bills, installments, and due dates
- Income sources and amounts
- Savings goals and transactions
This data is stored securely in our database and is only accessible to you through your authenticated account.
Usage Data
We may collect non-personal technical data such as browser type, device type, pages visited, and app interactions to help us improve the product experience.
Contact Form Submissions
If you contact us through our website form, your name, email, and message are processed by Formspree and forwarded to our team. Please review Formspree's Privacy Policy for how they handle this data.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Provide and improve MyPurse features
- Send important notifications about your finances (due dates, alerts)
- Respond to support requests or inquiries
- Detect and prevent fraud or unauthorized access
- Comply with legal obligations
We do not use your financial data for advertising, profiling, or any purpose other than providing you the MyPurse service.
3. How We Protect Your Data
We take data security seriously. Here is how we protect your information:
- Name & Email — Field-level Encryption: Your name and email are encrypted using strong cryptographic algorithms before being stored. No one on our team can read these values in plain text.
- Passwords: Passwords are hashed using a one-way algorithm. We never store your password in plain text and cannot recover it.
- Data in Transit: All data is transmitted over HTTPS (TLS encryption) between your device and our servers.
- Database Security: Our database is hosted on secured infrastructure with restricted access, firewall protections, and regular security reviews.
- Authentication: We use secure JWT (JSON Web Tokens) for session management with expiration controls.
4. Data Sharing and Third Parties
We do not sell, rent, or trade your personal information to any third party.
We work with a limited number of trusted service providers who help us operate MyPurse:
- Firebase — used for authentication and push notifications
- Formspree — used to process contact form submissions
- SendGrid — used to send transactional emails (e.g. reminders, alerts)
Each of these providers is bound by their own privacy policies and data protection agreements. We only share the minimum data necessary for them to perform their function.
We may disclose your information if required by law or to protect the rights, property, or safety of MyPurse, our users, or the public.
5. Data Retention
We retain your data for as long as your account is active. If you request account deletion, we will permanently delete your personal and financial data within 30 days, except where retention is required by law.
6. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you
- Correction — update or correct inaccurate information
- Deletion — request that we delete your account and all associated data
- Portability — request your data in a portable format
- Withdraw Consent — opt out of non-essential communications at any time
To exercise any of these rights, contact us at info@mypurse.app.
7. Cookies
MyPurse uses minimal cookies necessary for authentication and session management. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, though this may affect some features of the app.
8. Children's Privacy
MyPurse is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at info@mypurse.app.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify users via email if the changes are material. Your continued use of MyPurse after any changes constitutes your acceptance of the updated policy.
10. Lawful Basis for Processing (RA 10173)
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), we process your personal data on the following lawful bases:
- Contractual Necessity — Processing your name, email, and financial data is necessary to provide the MyPurse service you signed up for.
- Legitimate Interest — We process usage data to improve our product and ensure security of the platform.
- Consent — Where required, we obtain your explicit consent before processing your data, such as for marketing communications.
- Legal Obligation — We may process data to comply with applicable laws and regulations.
11. Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act, you have the following rights:
- Right to Be Informed — You have the right to know how your personal data is being collected, processed, and used.
- Right to Access — You may request a copy of your personal data that we hold at any time.
- Right to Correction — You may request correction of any inaccurate or incomplete personal data.
- Right to Erasure or Blocking — You may request deletion or blocking of your personal data if it is no longer necessary for the purpose it was collected, or if you withdraw consent.
- Right to Object — You may object to the processing of your personal data for certain purposes, including direct marketing.
- Right to Data Portability — You may request your personal data in a structured, commonly used, and machine-readable format.
- Right to Lodge a Complaint — You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
To file a complaint with the NPC, visit: www.privacy.gov.ph or email complaints@privacy.gov.ph
To exercise any of your rights, contact our Data Protection Officer at info@mypurse.app. We will respond within 15 business days from receipt of your request.
12. Data Protection Officer (DPO)
In compliance with the Data Privacy Act of 2012 and NPC Circular 17-01, MyPurse has designated a Data Protection Officer responsible for overseeing compliance with data privacy laws and handling data subject requests.
- Name: AA Coyco
- Role: Data Protection Officer
- Email: info@mypurse.app
- Website: mypurse.app
Our DPO is responsible for ensuring that personal data is processed lawfully, transparently, and in accordance with RA 10173 and its Implementing Rules and Regulations (IRR).
13. Data Breach Notification
In the event of a personal data breach that poses a real risk to the rights and freedoms of data subjects, MyPurse will:
- Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach
- Notify affected users without undue delay via email
- Provide details of the nature of the breach, data affected, likely consequences, and measures taken
We maintain an internal breach response plan and conduct regular security assessments to minimize the risk of data breaches.
14. Privacy Settings
You can manage your privacy preferences directly within the MyPurse application or by visiting our Privacy Settings page. From there you can:
- Manage notification and communication preferences
- Request data export or account deletion
- Withdraw consent for non-essential data processing
For any privacy-related requests that cannot be completed within the app, contact us at info@mypurse.app.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: info@mypurse.app
- Website: mypurse.app
© 2026 MyPurse. All rights reserved.