HOAHub — Privacy Policy
Effective date: 6 August 2026 Last updated: 6 August 2026
HOAHub ("the App") is operated by JGStudios Software OPC, a One Person Corporation organized under the laws of the Republic of the Philippines and registered with the Securities and Exchange Commission under Registration No. 2026070257638-64 ("we", "us", "our"). We are committed to protecting your personal data in accordance with Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA"), its Implementing Rules and Regulations, and issuances of the National Privacy Commission ("NPC").
This policy explains what personal data we collect through HOAHub, why, how we store and protect it, and the rights you have over it.
1. Who is the data controller
For residents and homeowners, your homeowners' association ("HOA") is the Personal Information Controller for community data, and we act as its Personal Information Processor by providing the App platform. For your account and device data, we act as a controller. Questions can be directed to the contacts in Section 10.
2. Personal data we collect
We collect only what the App needs to function:
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email address | Sign-in, identifying you to your HOA |
| Contact & residence | Phone number, unit/lot number, property/address | Linking you to your unit, HOA communication |
| Household | Names/relationships of household members you add | Resident records you choose to maintain |
| Financial records | Dues/payment records, payment method (e.g. GCash/Maya/bank), uploaded receipt images | Recording and confirming dues payments |
| Community activity | Service/maintenance requests, visitor passes, package logs, amenity bookings, violation records, votes/ballots, forum posts, event RSVPs | Core HOA features you use |
| Images | Photos you upload (receipts, requests, packages, announcements, posts) | Attachments you choose to add |
| Device & technical | Push-notification (FCM) token, device/app diagnostics, crash reports | Delivering notifications, reliability |
We do not use your data for advertising and we do not sell your personal data. We do not knowingly collect data from children; the App is intended for adult residents and HOA staff.
3. How we use your data
- Operate core HOA features (dues, requests, visitors, packages, amenities, violations, voting, documents, events, forum).
- Authenticate you and enforce role-based access within your property.
- Send you notifications you have not opted out of (announcements, bookings, incidents, maintenance, packages, violations, votes).
- Maintain security, prevent abuse, and diagnose crashes/performance.
- Comply with legal obligations.
Legal bases under the DPA include your consent, performance of your membership relationship with your HOA, our legitimate interests in operating the platform securely, and compliance with law.
4. How your data is stored and secured
- Data is stored on Google Firebase / Google Cloud Platform, in the
asia-southeast1(Singapore) region. - Access is restricted by Firebase Authentication and server-side Firestore Security Rules enforcing per-property, role-based access — no cross-HOA access.
- Data in transit is encrypted via HTTPS/TLS; data at rest is encrypted by Google Cloud.
- Access integrity is further protected by app-attestation (App Check).
Because data is hosted in Singapore, your data may be processed outside the Philippines; we rely on Google Cloud's contractual and security safeguards for such cross-border processing, consistent with the DPA.
5. Sharing and disclosure
We share data only:
- With your HOA and its authorized staff/administrators, for community management.
- With our processor, Google (Firebase/GCP), under its data-processing terms.
- When required by law, legal process, or a lawful NPC/government request.
- To protect the rights, safety, or property of users, the HOA, or us.
We do not share your data with third parties for their own marketing.
6. Retention
We retain your personal account data for as long as you maintain an account with your HOA and as needed for the purposes above, then for up to 12 months after your account is closed.
Financial and transaction records are an exception. As a Philippine corporation we are required to keep records of financial transactions — such as dues and payment records — for the periods set by applicable Philippine law and tax regulations. Those periods are longer than 12 months, and we retain such records for as long as the law requires, even after your account is closed.
Backups are retained on a rolling 7-day point-in-time recovery cycle. We delete or anonymize data when it is no longer needed for the purposes above or required by law.
7. Your rights under the Data Privacy Act
You have the right to: be informed; access your data; object to or withdraw consent for processing; correct inaccurate data; erasure or blocking; data portability; damages for violations; and to lodge a complaint with the NPC. To exercise any right, contact us (Section 10). We may need to verify your identity and may consult your HOA where it is the controller of the relevant data.
8. Push notifications & device permissions
The App requests permission to send push notifications and to access the camera and photo library (only when you attach a photo). You can change these in your device settings and manage notification categories in the App's profile settings.
9. Changes to this policy
We may update this policy; material changes will be notified in-app or by email, and the "Last updated" date will change. Continued use after changes means you accept the updated policy.
10. Contact us & Data Protection Officer
- Operator: JGStudios Software OPC (SEC Reg. No. 2026070257638-64)
- Email: jamesag@jgstudiosph.com
- Data Protection Officer (DPO): James Gamboa — jamesag@jgstudiosph.com
- Mailing address: 3606 Verve Residences Tower 2, 26th St, Brgy. Fort Bonifacio (1630), BGC, Taguig City, NCR, Philippines
- National Privacy Commission: https://www.privacy.gov.ph
You may also contact your HOA directly regarding community data it controls.