Privacy Policy

KONEK is run by Jiandre Cezar B. Odoño. Contact: hello.konekhq@gmail.com or m.me/konekhq.

The short version

• We collect what we need to run your KONEK profile, take your order and deliver your card.
• If someone shares their details through a profile, those details go to the profile owner. We store them for the owner and don't use them for our own purposes.
• Your phone number is not shown on your public profile page. If you add one, it is included when someone taps Save Contact, so anyone who saves your contact receives it.
• Anything you publish on your profile, including your photo and bio, is public.
• We never ask for your bank or wallet password, PIN or card number. You pay in your own app.
• We don't sell your personal information.
• You can ask us to show, correct or delete your information.

What we collect

Your account. Your email address and password, used to sign in. We email you a link to confirm your address. Each card comes with a private code. When you sign up with it, we link that code to your email address, so that tapping your card opens your profile.

Your profile. What you choose to add: username, display name, page type (Personal or Business), profile photo, banner image, bio, phone number and up to 20 links. Only the username, display name and page type are required.

Your order. When you place an order on our website: your name, email, mobile number, delivery address, the cards you choose (including color, texture or finish, and quantity) and any notes you add, and the discount code if you use one. We also keep a hashed (scrambled) version of your IP address to limit spam orders. Our Track page shows an order's status and tracking number to anyone who has both its order reference and the email used at checkout, so keep your order reference to yourself. After you place an order, you send it to us on Facebook Messenger to confirm it and arrange payment. For design cards, we also keep the files, text or artwork you send us. Messenger is run by Meta and is covered by Meta's own privacy terms.

Team and company orders. If you ask for a quote for a team, you send us your company name, a contact person's name, email, phone and delivery address, and a list of the people who will get a card (each person's name and, if you add it, job title). We use that list only to quote, make and label the cards. By sending it you confirm you are allowed to share those people's names with us and that they know about it. We keep a request, and the order it becomes, as long as we keep order records (see "How long we keep it"). A person on the list can ask us to delete their entry.

Payment confirmation. We keep the payment screenshot or reference you send us so we can confirm your order.

Taps and visits. When someone opens a profile or clicks a link on it, we record which page, which link (for clicks), whether it was a view or a click, a random visitor ID, a hashed (scrambled) version of the visitor's IP address, and the time. We do not store the visitor's browser details, the page they came from, or their location. We do not store the raw IP address. A hashed IP address is still personal information, not anonymous. Profile owners see the total as their Konek Count.

Details people share through a profile. A profile can have a button for visitors to share their details. By default it says Share my details, and the owner can choose other wording. When someone uses it, we collect the name, phone number and/or email, and optional note they type in, plus a hashed version of their IP address that we use to limit spam. These details are visible to the profile owner, who can add notes, set a follow-up date, export them to a spreadsheet or delete them. See "Details shared through a profile" below.

Cookies and browser storage. We use only what the service needs:

• konek_vid: a random visitor ID set when someone views a profile. It lasts one year and is used to count visits.
• Sign-in cookies: set when you log in or use your dashboard.
• A short-lived cookie during sign-up that remembers your email address.
• Your cart: the items you add on our shop (product, choices and quantity, no personal details) are kept in your browser's local storage so they are still there if you leave and come back. They are cleared when you place an order.

We don't use advertising or analytics trackers.

Our own staff records. When our team confirms a payment, edits an order or uses our admin tools, the action is logged with the staff member's email and the time, so we can keep the service secure.

Your phone number

Your phone number is not shown on your public profile page. If you add one, it is included in the contact file that downloads when someone taps Save Contact. The same file carries the other details you put on your profile: your name, job title and company (if you add them), your bio, your photo and your links. Anyone who opens your profile and saves your contact receives it. Only add a number you are comfortable sharing this way. The phone number is optional.

Details shared through a profile

When you use Share my details on someone's KONEK profile, your name, your phone number and/or email, and your note are sent to the owner of that profile. The profile owner decides how to use them, so the owner is responsible for how they handle your details. We store them for the owner and don't use them for our own purposes. You can ask the profile owner to delete your details. You can also email hello.konekhq@gmail.com and we will help. Profile owners can delete the details they receive at any time, and the details are deleted when the profile is deleted.

If you add the Share my details button to your own profile, you can turn it off at any time under Settings when you edit your page.

Why we use your information

• To run your profile, Save Contact, links and tap count.
• To take your website order, confirm payment, make your card and deliver it.
• To pass details that someone shares through a profile to the profile owner.
• To answer questions and handle replacements and complaints.
• To keep the service secure and meet legal obligations.

We use your details only for these reasons.

Who receives your information

• Supabase: stores accounts, profile data, photos, orders, details shared through profiles and tap records. Its servers are in Singapore.
• Netlify: hosts our website and sees visitors' IP addresses in its server logs.
• Google (Gmail and Google Drive): Gmail sends our sign-up emails. Google Drive holds our private backup copies (see "Backups" below).
• Meta (Messenger): where you chat with us and place orders.
• J&T Express: your name, delivery address and mobile number, so they can deliver your card.
• Outside production partners: if your card needs outside production or engraving, only the text or artwork needed to make it.
• GCash, Maya or your bank: they process your payment under their own policies.

We don't share your information with anyone else unless the law requires it. Some of these providers may store data outside the Philippines.

How long we keep it

• Profile and account: while your account is active. You can ask us to delete your profile at any time.
• Order and payment records: as long as we need them for delivery, support and our records.
• Details shared through a profile: until the profile owner deletes them or the profile is deleted.
• Tap records: they stay until we delete them. You can ask us to delete the tap records for your profile.
• Messenger chats, design files and proofs: as long as needed to complete and support your order.

Backups

So we can restore the service if something goes wrong, we keep backup copies of our data: accounts (without passwords), profiles, orders, details shared through profiles, tap records and uploaded images. Backups are stored privately on the founder's computer and in a private Google Drive folder protected by two-step verification. When we delete something at your request, it can remain in older backups until those backups are replaced.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, stop using it, or give you a copy. Email hello.konekhq@gmail.com. We may need to confirm who you are first. We will reply as soon as we can. If you are unhappy with how we handle your information, you can complain to the National Privacy Commission under the Data Privacy Act of 2012.

Security

We use established providers for hosting, sign-in and storage, and we take reasonable steps to protect your information. No system is completely secure. If a breach affects you, we will tell you and report it as the law requires.

Children

KONEK is not meant for children. If you think a child has given us their details, tell us and we will delete them.

Changes

We may update this policy. The new version will be posted here with its date.