Back to home

Privacy Policy

Last updated: March 31, 2026

GasTrack PH (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information responsibly and transparently. This Privacy Policy explains how we collect, use, store, and protect the personal data you provide when you use our website at gastrackph.com.

This policy is issued in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.


1. Who We Are (Personal Information Controller)

GasTrack PH is the Personal Information Controller (PIC) responsible for your personal data collected through this website. We are a community-driven fuel price tracking and trip cost estimation platform built for Filipino drivers.

Platform: GasTrack PH

Website: gastrackph.com

Data Protection Officer (DPO) Contact: privacy@gastrackph.com

You may contact our DPO for any questions, requests, or concerns regarding your personal data.


2. What Personal Data We Collect

We collect only the data necessary to deliver and improve our services:

Account Information

Data: Full name, email address

Legal basis: Contract — required to create and maintain your account

Vehicle Information

Data: Vehicle type, fuel type, vehicle name (optional), custom km/L rating

Legal basis: Contract — required to provide fuel cost calculations and tracking

Fuel Fill-Up Logs

Data: Date, station, fuel type, liters, price paid, odometer reading (optional)

Legal basis: Contract / Consent — you voluntarily log this data to use tracking features

Trip & Route Data

Data: Origin address, destination address, estimated fuel cost, route distance and duration

Legal basis: Consent — entered by you to calculate trip costs via the Trip Calculator

Price Reports

Data: Station ID, fuel type, price per liter, date of report

Legal basis: Consent — you voluntarily submit community price reports

Usage Data

Data: Browser type, device type, pages visited, timestamps (collected via Supabase)

Legal basis: Legitimate Interest — for service stability, security, and improvement

We do not collect payment card information, government ID numbers, or sensitive personal information as defined under Section 3(l) of RA 10173.


3. How We Use Your Data

  • To create and manage your account
  • To display your fuel logs, spending history, and efficiency statistics on your dashboard
  • To calculate trip fuel costs using route data you enter
  • To display community-reported fuel prices to all users
  • To improve the accuracy and reliability of the platform
  • To respond to your requests, reports, or support inquiries
  • To detect and prevent abuse, fraud, or unauthorized access

We do not sell your personal data to third parties. We do not use your data for automated profiling or decision-making that produces legal or similarly significant effects on you.


4. Third-Party Service Providers & Cross-Border Transfers

We use the following third-party processors to operate our platform. Your data may be transferred to and processed on servers located outside the Philippines:

Purpose: Database, authentication, and backend infrastructure

Data location: United States (AWS us-east-1)

Google Maps Platform

Privacy Policy ↗

Purpose: Address autocomplete, route calculation, and map display in the Trip Calculator

Data location: United States and global Google data centers

Purpose: Web hosting and content delivery

Data location: United States and global edge network

These processors are required to implement appropriate safeguards for your personal data. We have reviewed their data protection practices to ensure a comparable level of protection, consistent with IRR Rule XII of RA 10173.


5. How Long We Keep Your Data

Account dataUntil you delete your account, or 3 years of inactivity
Fuel logs & trip dataUntil you delete them, or upon account deletion
Community price reportsRetained indefinitely as aggregated public data; linked to your account until deletion
Usage/access logsUp to 90 days, then automatically deleted

When data is no longer needed, it is securely deleted or anonymized in accordance with Section 11(e) of RA 10173.


6. Your Rights as a Data Subject

Under Section 16 of the Data Privacy Act of 2012, you have the following rights:

Right to be Informed

You have the right to know what personal data we collect, why, and how it is used — which this policy fulfills.

Right to Access

You may request a copy of the personal data we hold about you, including how it has been processed.

Right to Object

You may object to the processing of your personal data on the basis of legitimate interest, or for direct marketing purposes.

Right to Erasure or Blocking

You may request that we delete or block your personal data if it is no longer necessary, or if your consent is withdrawn.

Right to Rectification

You may correct inaccurate or incomplete personal data we hold about you.

Right to Data Portability

You may request your personal data in a structured, commonly used, machine-readable format.

Right to Damages

You are entitled to claim compensation if you suffer harm due to inaccurate, incomplete, outdated, or unlawfully obtained personal data.

To exercise any of these rights, email our DPO at privacy@gastrackph.com. We will respond within 15 business days of receiving a verifiable request.


7. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • HTTPS encryption for all data in transit
  • Row-Level Security (RLS) in our database — you can only access your own records
  • Password hashing (managed by Supabase Auth)
  • Access control — only authorized personnel can access production data
  • Regular review of third-party processor security practices

In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the NPC within 72 hours and affected users without undue delay, as required by Section 20(f) of RA 10173.


8. Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

Authentication session cookie (sb-*-auth-token)Required to keep you logged in. Deleted when you log out.
Local storage (visit count, install prompt)Stores anonymous usage counters to manage the app install prompt. Contains no personal data.

We do not use advertising or analytics cookies.


9. Children's Privacy

GasTrack PH is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us at privacy@gastrackph.com and we will promptly delete it.


10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page. Continued use of GasTrack PH after changes are posted constitutes your acceptance of the revised policy.


11. How to File a Complaint

If you believe your data privacy rights have been violated, you may file a complaint with the National Privacy Commission (NPC):

National Privacy Commission

3F Core G, DICT Building, C.P. Garcia Ave., UP Diliman, Quezon City 1101

Website: privacy.gov.ph

Email: info@privacy.gov.ph

Hotline: (02) 8234-2228

We encourage you to first contact us at privacy@gastrackph.com so we can resolve your concern directly.