Privacy notice

FoqusLab is a review app for the Philippine Optometry Licensure Exam, run at foquslab.app. This notice explains what personal information we collect, why we need it, how long we keep it, and what you can do about it. We follow the Data Privacy Act of 2012 (Republic Act 10173).

What we collect

• Account details: your name, email address and password. Passwords are stored hashed by our sign-in provider, so we never see them.
• Study activity: the questions you answer and whether you got them right, scores, your review queue, reading progress, streaks, XP and badges.
• Usage and device data: which pages you open and when, plus basic browser and device details. We use this to keep the service running and to spot misuse.
• Messages you send us: feedback and error reports from inside the app.
• Feedback and quotes: if you answer the "How's FoqusLab working for you?" card, your rating, what you wrote, and whether we may publish your quote with your first name, without your name, or not at all.
• Error reports: when something breaks, the app sends a technical report to Sentry: the error message, the page address, your browser and device type, and the steps the app took just before. Reports don't include your name, email or answers.
• Visit statistics: Vercel Web Analytics counts page views, the site you came from, your country and device type, and Vercel Speed Insights measures how fast pages load. Neither uses cookies, and neither can tell who you are.
• Payment details, if you buy a pass: which pass you chose, the amount, the reference number you type in, a screenshot of your receipt, and when we checked it. The screenshot may show your name, the app you paid from and part of your account number, so feel free to crop out anything we don't need. We never see your bank, wallet or card login.
• Consent record: the time you agreed to this notice and the terms of use.

We don't ask for government IDs, and we don't collect health information about you.

Why we use it

• To create and run your account and keep you signed in.
• To plan your reviews, bring back items you missed, and show your readiness per subject.
• To protect the service and its content, for example by noticing a shared account or bulk copying.
• To fix errors and improve questions and explanations.
• To send account emails, such as sign-up confirmation, password resets and important notices.
• To send study emails: a welcome note with where to start, a reminder about 2 days before your Pro access ends, and a summary when it does. You can turn these off on the account page.
• To find and fix errors quickly (Sentry), and to see which pages are used and how fast they load (Vercel Analytics and Speed Insights).
• To show quotes from users on our home page, but only quotes you said we may publish, and only in the way you chose.
• To match each payment to the right account, confirm or decline it, and keep a record of every sale for tax purposes.

We don't sell your information and we don't show ads.

Who else handles it

A few service providers process data for us so the app can run: Supabase (database and sign-in, plus private storage for receipt screenshots), Vercel (hosting, visit statistics and page speed), Resend (email) and Sentry (error reports). They only handle it to provide their service. Their servers may be outside the Philippines. We share information with authorities only when the law requires it.

How long we keep it

We keep your information while your account is open. When you delete your account, your profile and study history are removed from our live database right away. Backup copies may hold it for a short time until they are replaced. Deleting your account also removes any feedback you sent through the app, which takes your quote off our home page. Error reports are deleted by Sentry after 30 days, and visit statistics are kept in summary form only.

Payment records are the exception. Each claim (amount, pass, reference number, receipt screenshot, and whether it was confirmed or declined) is kept as the record of a sale, even if you later delete your account. We keep them only as long as Philippine tax rules require, which can be up to 10 years, and then delete them. Receipt screenshots sit in private storage that only you and the FoqusLab admin can open.

Your rights

Under the Data Privacy Act you have the right to:

• be told how your information is used (this notice);
• get a copy of the information we hold about you;
• have wrong or outdated information corrected;
• object to processing, or ask us to block or erase your information;
• receive your data in a format you can take elsewhere;
• file a complaint with the National Privacy Commission (privacy.gov.ph).

You can change your name and delete your account yourself on the account page. Deleting removes your login and all your study data, and it can't be undone. For anything else, email us.

Security

Data travels over encrypted connections, each account can only read its own records, and admin access is limited. No system is perfectly secure, so if we ever learn of a breach that puts you at risk, we'll tell you and the National Privacy Commission as the law requires.

Changes and contact

If we change this notice in a way that matters, we'll tell you in the app before it takes effect. Questions, requests or complaints go to hello@foquslab.app.