Privacy Policy

1. What we collect

From Google, when you sign in. Your email address, your name, and your profile picture. We never see or store your Google password.

From you, as you set up your account.A username, which exam level you're targeting, a daily question goal, and optionally your region.

From using the app. The questions you answer and what you chose, how long each took, your XP, level, streak, bookmarks, badges, mock scores, and any question you report to us.

If you buy Pro. Your GCash reference number, the amount, and the receipt screenshot you upload. Receipts are held in a private storage bucket that no other user can read.

We do not use advertising trackers or third-party analytics, and we don't collect your location beyond the region you type yourself.

2. Why we hold it

• To run your account and show your progress — this is us performing the agreement you entered into
• To rank you on the leaderboards, which is the feature you signed up for
• To check and approve GCash payments, and to keep records of them as any business must
• To investigate abuse, cheating, and reported questions — our legitimate interest in keeping the app fair and accurate

We do not sell your personal information, and we do not share it for anyone else's marketing.

3. What other people can see

Your username and XP total are visible to other signed-in users on the global and weekly leaderboards. That is the only thing about you other users can see. Your email, your real name, your answers, your scores, and your payment details are never shown to another user.

4. Who processes it for us

We keep the app deliberately small, so the list is short:

• Supabase — the database, sign-in, and receipt storage that sit behind the app
• Vercel — hosting and delivery of the app itself
• Google — only as your sign-in provider; they tell us your email, name, and picture when you authorise it

These providers store data outside the Philippines, so using Lumina CSE involves your information being transferred abroad. They are bound by their own contractual and security obligations to protect it.

5. How long we keep it

Your account data is kept for as long as your account exists. If you delete your account, it is erased immediately as described in section 7. Records of an approved payment may be retained where we are legally required to keep transaction records; nothing else survives deletion.

6. Your rights

Under the Data Privacy Act you have the right to be informed, to object, to access what we hold, to correct anything wrong, to have your data erased or blocked, to receive a copy in a portable form, and to complain to the National Privacy Commission. To exercise any of these, email hello@dietherdave.dev. We will respond within 15 days.

7. Deleting your account

You don't have to email us to be forgotten — go to your profile and choose Delete account. It happens immediately and cannot be undone. We erase:

• Your profile — name, username, avatar, region, level, goal
• Every session and every answer you have given
• Your XP history, per-topic statistics, streaks, and badges
• Your bookmarks and any questions you reported
• Your payment submissions and the receipt screenshots you uploaded

One thing deliberately survives: your Google sign-in itself. That login is shared with a separate, unrelated app on the same infrastructure, so deleting it would close an account that has nothing to do with Lumina. Your Lumina data is gone regardless — and if you sign in again you start over as a new free user, with no history and no second trial.

8. Security

Access is enforced in the database itself, not just in the app: every row of your data is restricted to your own account, so one user cannot read another's even in the event of a bug in the app. Receipt screenshots sit in a private bucket reachable only through short-lived links generated for an administrator. Traffic is encrypted in transit.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the National Privacy Commission as the law requires.

9. Children

Lumina CSE is meant for people preparing for the Civil Service Examination and is not directed at children under 13. If we learn we are holding a young child's data without a parent's consent, we delete it.

10. Changes

If this policy changes materially we will tell you in the app before the change takes effect. The date at the top always reflects the current version.

11. Contact

Diether Dave Ingco
Davao City, Philippines
hello@dietherdave.dev

You may also complain to the National Privacy Commission at privacy.gov.ph.