1. Who is responsible for your personal data
RankUP Marine Digital Solutions OPC is the Personal Information Controller for personal data processed through the RankUP Marine platform.
- Registered name: RankUP Marine Digital Solutions OPC
- SEC Registration No.: 2026080263008-56
- Registered address: Cauayan City, Isabela, Philippines
- Data Protection Officer: Reyndell Valdez
- DPO contact email: admin@rankupmarine.com
We process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
2. What we collect
Information you give us
- Account details: email address, and any name or display name you choose.
- Professional profile: your rank or role selection, for example Engine Cadet, Fourth Engineer, Third Engineer, Second Engineer, or Chief Engineer. You provide this so we can show you relevant content.
- Anything you type into C/E PoyPoy or another AI-assisted feature — sent to an AI provider to generate a response, not stored by us (see Section 6).
- Correspondence you send us, including support and complaint messages.
Information generated by your use of the platform
- Learning activity: topics opened, phases completed, quiz answers and scores, streaks, and simulator progress.
- Subscription status: your tier, whether your subscription is active, and its expiry date.
- Your acknowledgement of these legal documents: which version you accepted and when.
- Which payment confirmations and access reminders we have sent you, and when.
Information collected automatically
- Technical data: device type, operating system, app or browser version, approximate region, and log data such as timestamps and error reports.
- Local storage on your device used to keep you signed in and to hold app settings.
Payment information
Card and e-wallet details are entered on our payment provider's checkout page and processed by the provider. We do not receive or store your card number, expiry date, or security code. For each purchase we keep the plan, amount, currency, and date; the provider's payment reference numbers; and the payment confirmation data the provider sends us.
We do not collect sensitive personal information as defined under the Data Privacy Act, such as health, government-issued identifier, or biometric data, and you should not submit it to us.
3. Why we process it, and on what basis
- To create and maintain your account and sign you in — performance of our contract with you.
- To deliver the content and features your tier includes — performance of our contract with you.
- To track and display your learning progress — performance of our contract with you.
- To process payments, send payment confirmations, and remind you before and when your access period ends — performance of our contract with you, and legal obligation.
- To respond to support requests and complaints — performance of our contract with you, and legal obligation.
- To operate C/E PoyPoy and other AI-assisted features when you use them — your consent, given by choosing to use the feature.
- To keep the platform secure and investigate misuse — our legitimate interests.
- To improve content and fix errors, using aggregated and de-identified activity data — our legitimate interests.
- To meet tax, accounting, and regulatory record-keeping duties — legal obligation.
We do not sell your personal data. We do not use your personal data for advertising.
4. Who we share it with
We share personal data only with service providers that help us run the platform, and only to the extent needed:
- Supabase — database and authentication hosting.
- Netlify — frontend application hosting.
- Railway — backend application hosting.
- Anthropic — processes the text you submit to C/E PoyPoy in order to generate a response.
- Google — processes text submitted to certain AI-assisted features in order to generate a response.
- HitPay Payment Solutions — payment processing for purchases made from us directly.
- Zoho Corporation — email delivery for sign-in, payment confirmation, and access-reminder messages.
- Google Play and the Apple App Store — app distribution, and payment processing where a purchase is made through the store.
These providers act as Personal Information Processors on our instructions and are bound to protect the data they handle for us.
We may also disclose personal data where required by law, court order, or a lawful request from a government authority, and to establish or defend legal claims.
5. Processing outside the Philippines
Some of the providers above operate servers outside the Philippines. Where personal data is transferred abroad, we remain accountable for it under the Data Privacy Act and take reasonable steps to ensure a comparable level of protection.
6. C/E PoyPoy and AI-assisted features
C/E PoyPoy is a set of AI-assisted tools inside the platform. You enter text — an interview answer, a description of a job, or an account of an incident — and an AI model generates a written response. The responses are automatically generated and may be incomplete or incorrect.
We do not keep what you enter or the response. Your text is sent to our server, passed to the AI provider, and the response is returned to you. Neither the text you entered nor the response is written to our database. Closing or reloading the page clears the response from your device. If you want to keep a response, use the copy or download option provided with it.
We keep usage metadata for each account: which tool was used, the month, and the token counts of the request and the response, so that monthly allowances can be applied and costs monitored. This metadata contains no part of what you entered or what was generated.
When you use these tools, the text you submit is sent to a third-party AI provider so that a response can be generated. Please note:
- Do not submit confidential, company-proprietary, or vessel-specific safety material, and do not submit another person's personal information.
- Responses are generated automatically and may be incorrect or incomplete. They are reference material and do not replace your company's safety management system, permit-to-work process, or incident investigation procedures.
- The AI provider's handling of that text is governed by its own terms.
If a response is offensive or wrong, you can report it from within the app. Reporting opens your own email application with the response included, so that you choose what is sent to us. We receive only what you send.
You can choose not to use these tools. The rest of the platform works without them.
7. How long we keep it
- Account and learning data — for as long as your account is open, and for 12 months after closure, so you can reactivate and find your progress intact.
- Subscription and payment records — for 10 years, as required of all taxpayers under Philippine tax regulations governing the preservation of books of accounts and supporting records.
- Support and complaint correspondence — for 24 months after the matter is closed.
- C/E PoyPoy text and responses — not retained. Only usage metadata (tool, month, token counts) is kept, alongside your account and learning data, and it contains none of your text.
- Technical logs — for 12 months.
After these periods we delete or irreversibly anonymise the data. Aggregated and de-identified information, which can no longer be linked to you, may be kept indefinitely to help us improve the platform.
8. Your rights
Under the Data Privacy Act you have the right to:
- be informed whether your personal data is being processed, and for what purpose;
- access your personal data and information about how it is being processed;
- have inaccurate or outdated data corrected;
- object to processing, or withdraw consent where processing is based on consent;
- request erasure or blocking of your data in the circumstances the law provides;
- obtain your data in a commonly used electronic format, known as data portability;
- claim damages where your rights have been violated; and
- lodge a complaint with the National Privacy Commission.
To exercise any of these, contact our Data Protection Officer at the address in Section 1. We will respond within a reasonable period and in any case as required by law. We may need to verify your identity first.
You may also complain directly to the National Privacy Commission at privacy.gov.ph.
9. Security
We use access controls, per-user record access controls, encrypted connections, and authentication provided by our hosting platform to protect personal data. No system is completely secure, and we cannot guarantee absolute security.
If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and affected users within the period required by law.
10. Children
The platform is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact our Data Protection Officer and we will delete it.
11. Changes to this policy
We may update this policy. If a change is material, we will notify you in the app or by email before it takes effect. The "last updated" date at the top shows when it was last revised.
12. Contact
RankUP Marine Digital Solutions OPC
Data Protection Officer: Reyndell Valdez
Email: admin@rankupmarine.com
Registered address: Cauayan City, Isabela, Philippines