Privacy
Tinubuan privacy policy
Tinubuan is a record-keeping service for private savings groups. This policy covers tinubuan.com, the Treasurer workspace and the Tinubuan Android app.
Who handles the information
Tinubuan provides the record-keeping platform. Each private group and its Treasurer enter and manage the group’s member, contribution, loan, payment, message, reconciliation and payout records. You can reach Tinubuan at [email protected].
What Tinubuan handles
- Account identity and contact details: name, email address and mobile number.
- Membership: your group, your role and your account status.
- Financial records of the group: contributions, loans, loan payments, payouts and the balances Tinubuan calculates from them.
- Messages, announcements, text messages sent by the group, and support and privacy requests.
- Notification details for the devices where you use the app, and audit events that record who changed what.
- When you start a group: a one-time code is texted to your mobile number to check it is yours. Only a hashed copy is kept, for ten minutes.
- If you joined the launch list on tinubuan.com before sign-ups opened: your name, email, mobile number, role and group size (when given). That form is closed; the records already given are still held until you ask for them to be removed.
Why information is used
To sign you in, run your group’s workspace, keep accurate group records, support contribution and loan work, send service notifications by push, email or text, investigate support and privacy requests, protect the service, and keep the audit history. Tinubuan does not use a support or privacy request to silently change a financial record.
Who can see information
Access depends on your role and group. Members see the records made visible to their own account. Treasurers see the records they need to run their group. Tinubuan administrators can see and work with any group’s records to run the service and help groups, as described below. Row Level Security and server-side checks enforce these limits.
Tinubuan also uses service providers for hosting, sign-in, email, text messages and push notifications, only to run the service. Tinubuan does not sell group records.
Tinubuan administrators
Tinubuan administrators run the service and help groups. They can:
- open a group’s records as its treasurer and record or correct them, for example voiding a payment saved twice;
- see a member’s app as the member sees it and act for them, such as asking for or cancelling a loan, updating a mobile number or resending an invite;
- change a person’s role or group, remove them from a group, send them a password-reset email or sign them out of every device;
- manage a group’s plan, payments and text-message limit;
- post announcements from Tinubuan to groups.
They never see or set anyone’s password.
How administrator access is limited
Administrators must confirm their sign-in with an authenticator app. Tinubuan logs each time an administrator opens a group or a member’s view, and that access ends on its own after 12 hours. Every change they make inside a group appears in the group’s Activity marked as made by a Tinubuan administrator, loan requests they make for a member are marked as theirs, and their announcements are marked as coming from Tinubuan.
Retention and financial records
A request to delete information does not automatically erase accounting, loan, payment, audit or other records that Tinubuan or the group may need to keep for legitimate operational, legal, security or record-integrity reasons. Requests are reviewed before any action is taken.
Security
Tinubuan uses authenticated sessions, role checks, database Row Level Security, audit logging and encrypted connections. You are responsible for protecting access to your device and your Tinubuan account.
Your choices and rights
You may ask for access to your information, correction, portability, deletion, objection, or withdrawal of consent. Send a request from the Privacy center in the app, from Account → Privacy & support on the web, or by email to [email protected]. Tinubuan records each request and its status, and may ask for more information to confirm it is you. For unresolved privacy concerns, data subjects in the Philippines may also contact the National Privacy Commission.
Deleting your account
See Delete your Tinubuan account for how to ask, what is deleted and what is kept.
Changes to this policy
Tinubuan publishes a new notice version when this policy changes. The app and the Treasurer workspace show the version in effect.