Privacy Policy

Junior Chamber International Mandaue (JCI Mandaue) Chapter, Inc. ("JCI Mandaue," "we," "us," or "our") respects your privacy. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It covers both the JCI Mandaue website at jcimandaue.org (the "Site") and our member mobile app, Merry Mobile (the "App").

JCI Mandaue is the data controller (Personal Information Controller). For any privacy question or request, contact us at eric@jcimandaue.org. We handle your data in line with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission (NPC).

Merry Mobile app

Merry Mobile is the member app for JCI Mandaue. Here is exactly what it does with your data — in plain terms.

What we collect (and why)

• Name, email, and member ID — for passwordless login (we email you a one-time code) and to manage your membership.
• Phone and address / city (optional — you add these) — for your member profile.
• Photos you upload — your profile photo, activity-gallery photos, and expense receipts (for chairpersons).
• Messages, photos, files and voice notes (including direct messages and group chats) you send in the in-app Chat, which is powered by Stream (GetStream.io) as our messaging processor.
• App activity — your personal notes, to-dos, and game scores.
• Device push token — so we can send you notifications.

We do not collect your location — check-in works by scanning a QR code with the camera, not GPS. We do not process payments; membership dues are shown for reference only.

How we use it

To run the App and your membership — sign-in, member profiles, activities, photo galleries, in-app messaging, notifications, and member communications.

Service providers

We use trusted providers that process data on our behalf. We do not sell your data or let them use it for their own purposes:

• OrgBase (orgbasehq.com) — our backend and member system.
• Stream (GetStream.io) — powers the in-app Chat (messages, photos, files and voice notes).
• Google Workspace / Drive — stores activity photos in our organization's Drive.
• Google FCM and Apple Push Notification service — deliver notifications.
• Cloudflare — infrastructure.
• Expo — manages push tokens.

Your data is encrypted in transit (HTTPS/TLS).

Sharing

We don't sell your personal data or share it with third parties for their own purposes. Content you post — such as activity photos and chat messages — is visible to other members, because that is how the App's shared features work.

Retention & deletion

We keep your data while you're a member. You can request deletion anytime from the App (Profile → Request account deletion) or by emailing eric@jcimandaue.org. We will remove your data, except for records we must keep for legitimate or legal reasons.

Children

The App is intended for JCI Mandaue members (adults) and is not directed to children under 13.

Your choices

• Edit your profile anytime in the App.
• Turn notifications on or off in your device settings.
• Request access to, or deletion of, your data via eric@jcimandaue.org.

Website (jcimandaue.org)

Information we collect

Information you provide directly

• Contact form: your name, email address, phone number (optional), subject, and message.
• Membership application: your full name, email, phone, and optionally birthdate, occupation, company, address, your reasons for joining, and who referred you.

Information collected automatically

• Technical data such as IP address, browser and device type, and pages visited, via standard server logs and our hosting/security provider (Cloudflare), used for security and to keep the Site running.
• Privacy-friendly, cookieless visit counts (via counter.dev) — aggregate page views with no personal profiles.
• Essential cookies set by Cloudflare for security and performance (see "Cookies" below).

How we use this information

• To respond to your inquiries and messages;
• To review, process, and follow up on membership applications;
• To communicate about our projects, events, and activities you have expressed interest in;
• To operate, secure, maintain, and improve the Site;
• To comply with legal obligations.

Cookies and embedded content

We use only essential cookies necessary for security and basic functionality (provided by Cloudflare). We do not use advertising cookies. Pages that display our social feeds may load content from third-party platforms (e.g., Facebook), which may set their own cookies governed by their respective privacy policies. You can control cookies through your browser settings.

Sharing and disclosure

We do not sell or rent your personal data. We may share it only:

• With trusted service providers who help us operate the Site (e.g., Cloudflare for hosting, content delivery, and security), bound to protect your data;
• With JCI Philippines where reasonably necessary for membership-related purposes;
• When required by law, legal process, or a lawful request by public authorities.

Data retention

We keep personal data only for as long as necessary to fulfill the purposes described above — for example, to respond to your inquiry or to administer your membership — and as required by law, after which it is securely deleted or anonymized.

Both the website and app

Legal basis

We process your personal data based on your consent (which you give by submitting our forms or by using the App), our legitimate interests as a civic organization in operating and promoting our advocacies, and, where applicable, compliance with legal obligations.

Data security

We implement reasonable organizational, physical, and technical safeguards to protect your data, including encryption in transit (HTTPS/TLS) and restricted access. No method of transmission or storage is completely secure, but we work to protect your information.

Your rights under the Data Privacy Act

As a data subject, you have the right to:

• be informed about the processing of your personal data;
• access the personal data we hold about you;
• object to or withdraw consent to processing;
• have inaccurate data corrected (rectification);
• request erasure or blocking of your data, subject to legal limits;
• data portability; and
• be indemnified for damages and to lodge a complaint with the National Privacy Commission (NPC).

International transfers

Some of our service providers operate global networks, so data may be processed on servers located outside the Philippines. Where this occurs, we take steps to ensure your data remains protected consistent with this Policy and applicable law.

Changes to this Policy

We may update this Policy from time to time. Updates take effect when posted here, with a new effective date.

Contact us

For privacy questions, requests, or concerns — including data access or deletion — contact us at eric@jcimandaue.org, or write to Junior Chamber International Mandaue (JCI Mandaue) Chapter, Inc., Z3-783 Catalino Ouano St., Looc, Mandaue City, Cebu, Philippines. You also have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph).