Privacy Policy

Last updated: August 21, 2026

CSU Bike Share ("we", "us", or "our") is the official bike-sharing platform for Caraga State University. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application and related services (the "Service"), in compliance with the laws of the Philippines, particularly the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC). By registering for or using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information

When you register, we collect your official CSU email address, name, contact number, and student/employee ID to verify your affiliation with the university.

Location Data

While a ride is active, we collect real-time GPS location data from your device to display bike positions on the map, enforce our campus geofence, and calculate ride routes and duration.

Payment Information

Rental fees are processed through your in-app wallet and third-party payment providers (e.g., GCash). We do not store your full payment credentials on our servers; transaction references are retained for verification purposes.

Usage Data

We automatically collect ride history, bike unlock/return timestamps, device information, and app diagnostics to help us maintain and improve the Service.

2. How We Use Your Information

  • To create and manage your account and verify university affiliation.
  • To operate core features such as bike unlocking, ride tracking, and geofence enforcement.
  • To process payments and calculate fees, overtime charges, and penalties.
  • To detect, investigate, and prevent lost or stolen bikes and other misuse of the Service.
  • To communicate with you about your rides, account status, and service updates.
  • To generate anonymized, aggregate statistics (e.g., total rides, CO2 avoided) for campus sustainability reporting.

3. Sharing of Information

We do not sell your personal information. We may share limited information with:

  • University Offices — including the office administering student clearance, where a bike is reported lost or stolen under your rental ID.
  • Payment Processors — to facilitate wallet top-ups and rental payments.
  • Service Providers — who help us host data, operate the app, and provide technical support, under confidentiality obligations.
  • Legal Authorities — where required by law or to protect the rights, property, or safety of CSU Bike Share, our users, or the public.

4. Data Retention

We retain account and ride history data for as long as your account is active and for a reasonable period afterward to comply with university and legal requirements, resolve disputes, and enforce our agreements. When data is no longer necessary, we securely delete, anonymize, or dispose of it in accordance with NPC guidelines. You may request deletion of your account as described in Section 9.

5. Data Security

We implement reasonable organizational, physical, and technical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. Access to personal data is limited to authorized personnel with a legitimate need to know. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Location & Geofence Enforcement

Location tracking is used to keep bikes within the CSU campus geofence. Taking a bike outside the designated area may trigger account restrictions, as described in our Fees & Penalties policy. Location data is only actively collected while a ride is in progress.

7. Third-Party Services

The Service relies on the following third-party providers to function, each governed by its own privacy policy:

  • Supabase — database hosting and authentication for account, ride, and story data.
  • GCash / Payment Partners — processing of in-app wallet top-ups and rental payments.
  • Mapping & Location Providers — displaying bike locations and enforcing the campus geofence.

8. International Data Transfers

Because the Service uses cloud-based infrastructure, some personal data may be processed or stored on servers located outside the Philippines. Where this occurs, we implement reasonable measures to ensure that such processing follows security safeguards consistent with Philippine data privacy regulations.

9. Your Rights Under Philippine Data Privacy Laws

Under the Data Privacy Act of 2012, you have the right to:

  • Access, correct, or update your personal information.
  • Withdraw consent or request deletion of your account and associated data — you can submit this directly through our Data Deletion Request form.
  • Object to certain types of processing, where applicable.
  • File a complaint with the National Privacy Commission.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 11.

10. Children's Privacy

The Service is intended for use by CSU students, faculty, and staff and is not directed at children. We do not knowingly collect personal information from individuals who do not hold a valid CSU affiliation.

11. Contact Us

If you have any questions, requests, or wish to exercise your rights under the Data Privacy Act, please contact our Data Protection Officer (DPO):

Organization: CSU Bike Share Project

Email: techbai.web@gmail.com

Want to delete your account instead? Use our Data Deletion Request form.

If you believe your privacy rights have been violated, you may also contact the National Privacy Commission of the Philippines.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect service improvements or legal changes. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.