Privacy Policy

1. Who is responsible for your data

The personal information controller for the data described here is:

We handle personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.

2. What we collect

From operators

• Name, email address and mobile number.
• Shop or business name, and the location of each machine.
• Payout details you give us so we can send you the money from your sales.
• Proof of payment you upload when buying credits, such as a screenshot of a transfer.

From end customers buying internet time

• The network address of the phone or laptop connecting to the WiFi, including its MAC address and IP address. We need this to give internet access to the right device and no other.
• Session records: when the session started, how long it lasted, and how much data it used.
• Payment records: the amount, the time, the method, and the reference number returned by the payment provider. We do not receive or store your full card number.
• A mobile number or email address, only if you give one so we can send you a voucher code or a receipt.

Automatically, on our websites

• Basic technical information such as browser type and pages visited, used to keep the site working and to see which guides people need.

3. Why we use it

• To deliver what you paid for — issuing a voucher, starting an internet session, activating a subscription.
• To run the machines — knowing which device is online, which session belongs to which customer, and when time runs out.
• To pay operators — working out how much of each sale belongs to which operator.
• To give support — answering you, and looking into a machine or a payment that did not work.
• To prevent fraud and abuse, and to meet legal and payment-provider requirements.

We rely on your consent, on the contract between us, and on our legitimate interest in running the service safely.

4. Who else sees it

We do not sell personal data. We share only what is needed, with:

• Payment providers, to take a payment and to send money to operators.
• The operator whose machine you used, who can see the session and payment records for their own machines. They do not see your payment card details.
• Hosting, storage and email providers that run our servers and send our messages on our instructions.
• Government bodies or courts, when the law requires it.

Some of these providers keep data on servers outside the Philippines. Where that happens, we use providers that commit to protection at least equal to what the Data Privacy Act requires.

5. How long we keep it

• Account details: while your account is open, and up to one year after it closes.
• Session and device records: up to twelve months, so operators can check their own sales and we can look into disputes.
• Payment and payout records: at least five years, because tax and accounting rules require it.

6. Keeping it safe

Traffic to our websites and to our servers is encrypted. Passwords are stored hashed, never in readable form. Access to production data is limited to the people who need it, and our servers are backed up regularly. No system is perfectly safe, but if a breach affects you we will notify you and the National Privacy Commission as the law requires.

7. Cookies

We use only the cookies and local storage needed to keep you signed in, remember your preferences, and keep an internet session attached to the right device. We do not use advertising cookies.

8. Your rights

Under the Data Privacy Act you may:

• Be told what data we hold about you, and ask for a copy.
• Have wrong or incomplete data corrected.
• Ask us to erase or block data where it is outdated, wrongly obtained, or no longer needed.
• Object to how we use your data.
• Ask for your data in a portable form.
• Be compensated for damage caused by false, wrongly obtained or unauthorised use of your data.
• Complain to the National Privacy Commission if you are not happy with our answer.

To use any of these rights, email support@smartfi.ph. We reply within fifteen working days. We may ask you to confirm who you are first, so we do not hand your data to someone else.

9. Children

SmartFi is not aimed at children under 18. We do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.

10. Changes

If we change this policy we will update the date at the top, and tell account holders about anything significant before it takes effect.

11. Reaching us

Email support@smartfi.ph, call +63 950 558 5800, or write to us at the address above. Full details are on the contact page.