Privacy Policy
Last updated: September 29, 2026
AGAPAI Technologies Corp. ("AGAPAI", "we", "us") operates the AGAP.AI™ mobile application and the website at https://www.agapai.ph. This Privacy Policy explains what personal data we collect, why, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the EU and UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA).
1. Who We Are
AGAPAI Technologies Corp. is the personal information controller responsible for your data. Address: G/F National Engineering Center, Junio Hall, F. Agoncillo St. corner Osmeña Ave., UP Campus, Diliman, Quezon City, Metro Manila, Philippines. Contact our Data Protection Officer at hello@agapai.ph.
2. Information We Collect
- Account information (parents, caregivers and healthcare workers): such as your name, email address, login credentials or sign-in provider identifier, role, and, for healthcare workers, your organization.
- Information about your child that you provide: such as your child's name or nickname, date of birth, profile photo, milestone observations, assessment answers, and pre-test and post-test results.
- Health information: developmental screening results and reports and, if you choose to enable it, information from connected health records. This is sensitive personal information under RA 10173, special-category data under the GDPR, and sensitive personal information under the CCPA.
- Photos and videos you choose to upload.
- Community content: forum posts and comments.
- Subscription status from Google Play or the App Store. We do not receive your full payment card details.
- Device and usage information: such as device model, operating system, app version, language setting, crash logs, and, on the Free plan, your device's advertising identifier.
- Support communications: messages and forms you send us, including through this website.
3. How We Use Information, and Our Legal Basis
- Provide milestone monitoring, AI-assisted screening, reports, resources and forums (performance of our contract with you; for health information and children's data, your explicit consent).
- Connect you with doctors, therapy clinics and healthcare professionals at your request (your explicit consent).
- Connect to health records when you enable it (your explicit consent).
- Send in-app notifications (your consent, which you can withdraw in settings).
- Show advertisements on the Free plan (your consent where required by law; see Section 6).
- Improve the Service, including our AI features, using de-identified or aggregated data (our legitimate interests).
- Provide customer support, prevent fraud and abuse, and keep the Service secure (our legitimate interests).
- Comply with legal obligations (legal obligation).
4. Children's Information
AGAP.AI™ is used by adults on behalf of children and is not intended for children to use directly. We process a child's information only with the consent of the child's parent or legal guardian, or through an authorized healthcare worker. A parent or guardian may review, correct or delete their child's information at any time. Health information and children's data are never used to target advertising.
5. How We Share Information
We do not sell your personal information. We share it only:
- with doctors, therapy clinics and healthcare professionals you choose to connect with;
- with service providers that process data on our behalf under contract, such as cloud hosting, data storage, crash reporting and analytics, email delivery and customer support providers;
- with Google and Apple, to process subscriptions;
- with advertising partners on the Free plan, limited to device and advertising identifiers and non-health usage information;
- with authorities when required by law, or to protect the rights, safety and property of our users and AGAPAI;
- with a successor entity in a merger or acquisition, subject to this Policy.
6. Advertising and Your Choices
Ads on the Free plan may use your device's advertising identifier. We do not use health information or children's data for advertising. You can reset or limit your advertising identifier in your device settings, and upgrading to Premium removes ads. California residents may opt out of the "sharing" of personal information for cross-context behavioral advertising by emailing hello@agapai.ph with the subject "Do Not Sell or Share". We honor Global Privacy Control signals where applicable.
7. International Transfers
Our service providers may store or process data in the Philippines and in other countries. When personal data is transferred across borders, we use appropriate safeguards, such as contractual clauses, as required by applicable law.
8. How Long We Keep Information
We keep your account and your child's data while your account is active. When you delete your account, we delete or de-identify this data within 30 days, and it is removed from backups within 90 days. We keep transaction and business records for as long as tax and accounting laws require (generally 5 years under Philippine law). We may keep de-identified or aggregated data that can no longer identify you or your child.
9. Security
We use organizational, physical and technical measures to protect personal data, including encryption in transit, access controls, and restricted access to health information. No system is completely secure. If a personal data breach occurs, we will notify affected users and regulators as the law requires.
10. Your Rights
- Philippines (RA 10173): the right to be informed, to object, to access, to rectify, to erasure or blocking, to data portability, to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph).
- EU/UK (GDPR): the rights of access, rectification, erasure, restriction, portability and objection; the right to withdraw consent at any time without affecting prior processing; and the right to complain to your local data protection authority.
- California (CCPA): the rights to know, delete and correct your personal information; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
To exercise your rights, email hello@agapai.ph or use our Request for Data Deletion page. We may need to verify your identity. We respond within 30 days, or within 45 days for California requests, extendable where the law allows.
11. Cookies on This Website
This website does not use advertising or analytics cookies and does not load third-party tracking scripts. Our web host may keep standard server logs, such as IP address and browser type, for security.
12. Changes to This Policy
We will post updates on this page with a new "Last updated" date and notify you in the app of material changes.