Last updated: October 28, 2026
Resiboo (“we”) is a small app for keeping goals with a circle of friends. This policy explains what personal information we collect and what we do with it, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines.
What we collect
- Your account: username, display name, and a password (stored only as a one-way hash), unless you sign up with Google.
- If you sign in with Google (or link it in Profile): Google tells us your Google account ID and your email address, and whether Google has verified it. We store the account ID to recognise you. If the email is verified, we use it to link to an account with the same confirmed email, or save it as the email of a new account, or of an existing account that has no confirmed email when you link Google. We don't ask Google for your name or profile photo, and don't store either.
- Your email, only if you add one in Profile. We use it only to confirm that it's yours, to send password reset links, and to tell your old address if it's changed. We don't send newsletters or marketing, and other members never see it.
- What you post: proof photos, captions, goals, stakes, your votes on other members' proofs, comments on proofs that got a Sus vote, and the messages, photos and reactions you send in circle chats.
- Nudges: when you nudge a circle-mate who hasn't posted yet, we record who nudged whom and when, so we can limit repeats. They get a push notification (if on) with your display name.
- Chat activity: the newest message you've seen in each circle chat, for read receipts and unread badges.
- Circle details: circle names and logos.
- Notification settings: if you turn on push notifications, the address your browser gives us to deliver them.
- Security data: your IP address (and, for password reset requests, the email entered), used only to limit repeated login, signup, Google sign-in and reset attempts and deleted within 24 hours. Email confirmation and reset links are single-use, expire (24 hours and 1 hour), and are deleted a day after they expire.
We don't collect your phone number, contacts or location, or your email unless you add it. We don't use ads or third-party analytics or tracking. Photos are re-encoded when uploaded, which strips location and camera data. We use only one cookie to keep you signed in. Signing in with Google also sets short-lived cookies (deleted after 15 minutes at most) that protect the sign-in from tampering. Your browser also remembers, on your device only, which daily recaps you've dismissed and whether you chose a light or dark appearance, the latest What's New entry you've opened, and whether you've finished the app tour; it's never sent to us.
Why we use it
We use it only to run the app: to sign you in, show your proofs to your circle, count votes, and send the reminders you asked for. By creating an account you consent to this processing. You can withdraw that consent at any time by deleting your account.
Who can see it
- Members of your circles see your display name, goal, stake, proofs, captions, votes and proof comments, and everything you post in that circle's chat. While you type in a chat, they see that you're typing; we don't store that. They also see which messages you've read. The circle owner can hide past proofs, so other members only see today's.
- Service providers process data for us: Cloudinary stores photos, a hosting provider runs the app and database, an email delivery (SMTP) provider sends confirmation and reset emails, Google provides “Continue with Google” sign-in if you use it (its own privacy policy covers your Google account), and your browser's push service (such as Google, Apple or Mozilla) delivers notifications. Chat and proof-comment notifications include the start of the message, encrypted so only your device can read it. If someone @mentions you in a circle chat, you get a notification with their display name and the start of the message, even if you've muted that circle. Some of them store data outside the Philippines. They may use it only to provide their service to us.
- We never sell your data. We disclose it only when the law requires us to.
How long we keep it
We keep your data while your account exists. If you delete a chat message, we delete the message and its photo; if you edit one, the old text is replaced. When you leave a circle, we delete your proofs, photos, nudges, proof comments, chat messages, chat photos and reactions in that circle. When you delete your account, we delete your account, proofs, photos, votes, nudges, proof comments, chat messages and reactions, and memberships, and any circle left with no members. When you re-upload a proof, the old photo and its votes are deleted. We record when you last changed your goal or stake to apply the circle's cooldown. Copies in backups may remain for a short time until they expire.
Security
Photos and chat messages are private and shown only to members of your circle. Passwords are hashed, and connections are encrypted. No system is perfectly secure. If a breach puts your information at risk, we will notify you and the National Privacy Commission as the law requires.
Your rights
Under the Data Privacy Act, you have the right to be informed, to access your data, to object, to have it corrected, to have it erased or blocked, to data portability, and to claim damages. You can edit your name, add or change your email, link or unlink Google, and delete your account yourself in Profile. For anything else, email us at [email protected]. You may also file a complaint with the National Privacy Commission (privacy.gov.ph).
Age
Resiboo is only for people 18 and older. We don't knowingly collect data from minors.
Changes
If we change this policy, we'll update the date above and tell you in the app if the change is significant.