Privacy Policy

This Privacy Policy describes how Manuel C. Sumalpong III, operating as SUMA ("we," "us," or "our"), collects, uses, and protects your personal information when you use SUMA (sumacards.com) and the SUMA Android application (collectively, the "Service").

By using the Service, you consent to the practices described in this policy.

1. Information We Collect

Account Information: When you register, we collect your email address, a display name (any name you choose — your real name is not required), and your hashed password.

Study Session Data: Your session progress and study state are saved to our servers to allow you to resume sessions across devices.

Usage Data: We may collect anonymized data about how you interact with the Service to improve the platform. This data is not linked to personally identifiable information.

Local Storage: The Service uses your device's local storage to save your theme preference (light/dark mode) and temporary study settings. This data stays on your device and is not transmitted to our servers.

Payment Verification: Payment for access codes is processed externally through GCash or other methods communicated through our official channels. We do not collect or store payment card or financial account details through the Service.

2. How We Use Your Information

We use collected information to create and manage your account, verify access code eligibility, save and restore your study session progress, provide and improve the Service, and respond to your inquiries. We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored on servers located in Singapore, managed through:

• Render — application hosting
• Supabase — database storage, including account information and study session data

Both services implement industry-standard security measures. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

4. Data Retention

We retain your account and study data for as long as your account is active. To request deletion of your account and associated data, contact us through our official communication channels. We will process deletion requests within a reasonable timeframe.

5. Third-Party Services

The Service may use third-party analytics tools to collect anonymized usage data. The Service is also distributed through the Google Play Store — Google's privacy policy applies to data collected through the Play Store.

6. Children's Privacy

The Service does not contain harmful content and is available to users of all ages. We do not knowingly collect personal information from children in a manner that would require special protections under applicable law. If you believe a child has provided personal information without parental consent, contact us and we will promptly address the situation.

7. Your Rights Under the Philippine Data Privacy Act (RA 10173)

As a user in the Philippines, you have the right to be informed of how your data is used, access and correct your personal data, request deletion of your personal data, object to processing of your personal data, and lodge a complaint with the National Privacy Commission (NPC).

To exercise any of these rights, contact us at manuelsumalpongiii@gmail.com.

8. Cross-Border Data Transfer

Your personal data is stored and processed in Singapore. By using the Service, you consent to the transfer of your data outside the Philippines in accordance with the Data Privacy Act of 2012 (RA 10173).

9. Communication

We may contact you via your registered email address for account-related matters. Our primary communication channels are:

• Email: manuelsumalpongiii@gmail.com
• Facebook: facebook.com/sumacards
• Discord: Link shared after payment confirmation via Facebook

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the effective date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.