Privacy notice

Agatha and Amelia Bridals, a bridal shop in Mandaue City, Cebu, Philippines, is the personal information controller. Questions, corrections and complaints go to nmeventplanners@gmail.com.

Everything below exists because payroll cannot be run without it. None of it is collected for marketing, sold, or shared for advertising — there is nobody to sell it to and no advertising in this app.

Who you are

Name, the shop’s own payroll number, position, employment type, hire date and — if you leave — separation date. This is what a payslip has to be addressed to.

Government identifiers

TIN, SSS, PhilHealth and Pag-IBIG numbers, where you have given them. These are sensitive personal information under the Data Privacy Act. They are here because contributions and tax must be remitted against the right number, and a wrong one means the money goes missing from your record rather than the shop’s.

Contact details

Email address and mobile number. Email is also how you sign in.

When you worked

Every clock-in and clock-out, the day built from them, lateness, undertime, overtime, absences, leave you filed and the reason you gave, and trips off-site with the reason attached.

Where you were when you clocked in

If your phone allows it, the app records the latitude, longitude and accuracy of a single reading at the moment you tap, and whether that put you inside the shop. It is not tracking: nothing is recorded between taps, the app never reads your location in the background, and if you refuse the permission or the reading times out the punch still records — it is simply marked as having no location. The raw reading is kept rather than only the yes/no so that a mis-set shop boundary can be corrected later instead of leaving old punches permanently wrong.

What you were paid

Rates, payslips, deductions, the statutory contributions computed from them, 13th month pay, commission and coordination fees.

Shop money you are holding

The revolving fund: what you spent, what it was for, and photographs of receipts you upload.

Photographs

A profile photo, if you set one.

What was said about a decision

Comments and replies on overtime and on fund expenses, and the note attached to an approval or a refusal, including who wrote it and when. The app deliberately keeps these so a decision can be questioned rather than only received.

Each person signed in can see their own days, their own pay and their own fund. The shop owners can see everyone’s, because that is what running payroll is. A login marked accountant can see filings. Nobody else has access, and there is no public page anywhere in the app — every page checks who is asking before it renders.

It is not shared outside the shop except where the law requires it: contributions and returns go to the SSS, PhilHealth, Pag-IBIG and the BIR, as they must for any employer.

In a private Supabase database and, for photographs and receipts, in Supabase storage. The app runs on Vercel. Both are data processors acting on the shop’s instructions. Email the app sends — notifications and digests — goes through Resend.

Signing in with Google is optional and sits alongside the password. Google tells this app your email address, your name and your profile picture, and nothing else; it is used to recognise an account the owner has already created. Signing in with Google does not create an account and cannot grant access on its own.

Payroll and attendance records are kept for at least ten years, because Philippine labour and tax rules require an employer to be able to produce them. Records of someone who has left are kept on the same basis and are not deleted on request, for the same reason a payslip from four years ago still has to exist.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) you may ask what is held about you, have something wrong corrected, object to how it is handled, and complain to the National Privacy Commission. In this app you can already see your own days, your own payslips and your own fund without asking anyone.

If something in your record is wrong — a punch, a rate, a deduction — say so. Corrections are recorded as corrections rather than by overwriting what was there, so the fix and the original both remain visible.

If the app starts collecting something it does not collect today, this page changes in the same breath. The date at the top is the last time it did.