Privacy Policy
Last updated:
Your information, how we use it, and the choices and rights available to you.
1. Introduction
TopTier Prep Hub respects your privacy. This policy explains how we collect, use, store, disclose, and protect personal data when you use toptierprephub.com, our Fisheries Professional Licensure Examination (FPLE) review platform.
We aim to handle personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) guidance.
2. Information we collect
- Account and profile: email address, Supabase account identifier, names and display name, username, and Google profile image when Google provides one. Profile completion requests your first, middle, and last names and birth date, and stores your calculated age.
- Authentication: sign-in and session information needed to recognize your account and keep you signed in. Google handles your Google password; it is not entered into our profile forms.
- Study activity: exam answers, scores, exam history, mastered and missed questions, progress resets, topic and difficulty performance, streaks, Shells, Tide XP, leaderboard display preferences, and related ranking activity. We also process mock-exam and challenge activity when you use those features.
- Premium requests: subscription and Premium status, activation and expiration information, uploaded payment receipts, and related payment-verification and administrator review information. Receipts may contain payer names, transaction references, amounts, and other details visible in the image you submit.
- Communications: support messages, question reports, feedback, responses, message and notification read status, and temporary chat typing indicators. Signed-in online presence and last-active information help operate support and administrator activity views.
- Technical information: session and preference storage, and request, error, usage, and diagnostic logs generated by our hosting and authentication services. Those services may record IP addresses and device or browser information as part of handling requests; we do not ask you to enter this information in your profile.
Please avoid including unrelated sensitive information in receipts, reports, or support messages. Age and certain study records may qualify as sensitive personal information under Philippine law and require additional care.
3. How information is collected
You provide information through Google sign-in and account registration, profile forms, exam sessions, payment receipt uploads, support conversations, and feedback or question-report tools. Google supplies the account information authorized during sign-in.
The platform generates progress, performance measures, ranking information, and activity timestamps as you use it. Essential browser storage maintains sessions and settings. Hosting and authentication infrastructure automatically generates technical logs when it processes requests.
4. Purposes and lawful processing
- Create and maintain accounts, authenticate users, and provide the Free or Premium services requested.
- Save answers, results, progress, and mastery; generate study recommendations, readiness measures, and performance analytics; and operate leaderboards.
- Verify Premium payments and manage activation, expiration, and subscription records.
- Respond to support requests and question reports, and deliver essential account or service notices.
- Secure the platform, prevent abuse, investigate errors, improve performance, resolve disputes, and meet legal obligations.
Processing must have an applicable legal basis: consent where required, necessity to perform our agreement with you, compliance with a legal obligation, or legitimate interests such as security where these do not override your rights. A legitimate purpose alone does not authorize every use of data. Sensitive personal information requires an applicable condition under Section 13 of the Act; ordinary contractual necessity or legitimate interests alone are insufficient.
Where processing depends on consent, you may withdraw it by contacting us. Withdrawal does not undo earlier lawful processing; it may affect features that require the information. Accepting the Terms is not blanket consent for unrelated processing.
5. Cookies and browser storage
Strictly necessary storage: Supabase Auth persists and refreshes your session using browser storage. Clearing or blocking this storage may sign you out or prevent authenticated features from working.
Preferences and feature state: local storage remembers your theme, exam answer-flow preference, progress-reset markers, dismissed installation notices, and whether a score-sharing prompt has been shown. Session storage remembers the installed-app launch splash. Installed-app caching supports delivery of app resources.
Analytics and advertising: the application currently includes no non-essential advertising cookies or third-party visitor-tracking analytics scripts. Study analytics are calculated from your exam activity; they are not advertising tracking. We do not currently present a cookie-consent banner for these essential functions and preferences. If non-essential tracking is introduced, we will provide an updated notice and obtain valid consent before loading it, with a way to change your choice.
You can manage website storage in your browser and change the theme in your profile. External services may use their own cookies when you visit them.
7. International processing
Our service providers may process or store personal data outside the Philippines. We remain responsible for the personal data under our control and will use reasonable contractual, organizational, and technical safeguards for transfers where applicable. Provider locations and infrastructure may change; contact us with questions about a particular transfer.
8. Data retention
Personal information is retained only as long as necessary for the purposes described here, including operating your account, providing study history, verifying payments, securing the service, resolving disputes, and complying with legal requirements. Applicable backup and provider-log lifecycles may differ from live account records.
You may request deletion or blocking through our contact email. We will assess the request and any lawful need to retain particular records, and explain relevant limitations. Signing out, clearing browser storage, or resetting question progress does not delete your account, payment records, or exam history. Contact us for information about retention of a particular record.
9. Security
Reasonable safeguards include Supabase authentication, account and role-based access controls, database row-level security rules, HTTPS encryption in transmission, restricted administrative functions, and private receipt access through short-lived signed links. Service logs and administrator activity tools support investigation of errors and suspicious activity.
No online service or storage method is completely secure. Protect your Google account and signed-in devices, avoid sharing access, and notify us promptly if you suspect unauthorized use. We will handle security incidents and any required notifications in accordance with applicable law.
10. Your data-subject rights
Subject to applicable legal conditions and exceptions, you may exercise the following rights:
- Be informed about how your data is handled.
- Object to processing and withdraw consent where applicable.
- Access your personal data and information about its processing.
- Request rectification of inaccurate or incomplete data.
- Request erasure or blocking when the legal grounds apply.
- Obtain portable data in an appropriate electronic format where applicable.
- Seek damages for a violation of your privacy rights.
- File a complaint with the National Privacy Commission.
- Exercise applicable rights concerning automated processing, including information about and objections to qualifying automated decision-making.
Our automated study measures summarize exam activity for learning; they do not determine a PRC licensing outcome. You can ask us about an incorrect result or its calculation.
Email contact.toptierprephub@gmail.com with your request. We may need proportionate identity verification to protect your account. We will explain the outcome and any applicable limits. See the NPC guidance on data-subject rights for further information and complaint guidance.
11. Children and minors
Users below 18 should use TopTier Prep Hub only with the knowledge and permission of a parent or legal guardian. Parents or guardians may contact us about a minor's information or a request to remove it. We do not knowingly use children's personal information for targeted advertising.
12. Third-party links
External links and externally opened tools follow their own privacy policies. These include Google-provided services and search, social or support channels such as Messenger or WhatsApp when used, and external AI tools. Opening an explanation search sends the displayed search prompt to the external search provider; review it before adding personal information.
Some pages load externally hosted images, whose hosts receive the request needed to deliver them. Review each provider's privacy practices before signing in, sending a message, or submitting information outside TopTier Prep Hub.
13. Policy changes
We will update this policy when our practices or applicable requirements change. Material changes will be communicated through a website or account notice, or email where appropriate, and the last-updated date will change. Where a new use requires consent, a policy update alone will not replace that consent.
14. Contact
TopTier Prep Hub
contact.toptierprephub@gmail.com
Philippines