Privacy notice

Last updated: [date to be set]. Written with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) in mind.

The short version

• Unit Pulse helps a unit manager see the team's activity counts (approaches, appointments, presentations and so on). It is not a client database.
• We do not collect clients' full names, phone numbers, addresses, birthdays, health information or policy details. Please don't enter them.
• The app never messages clients and gives no insurance or financial advice.
• We don't sell data and don't use it for ads.

Who is responsible

Unit Pulse is a product of Tiny Tool Co., which runs the service. [Business registration details (DTI/SEC), registered business address and contact email to be completed.] For questions or requests about your data, contact our Data Protection Officer: [DPO name and contact email to be completed].

The unit manager decides who joins their unit and what is tracked. For advisors' activity data, the unit manager acts as the personal information controller, and we act as a personal information processor on their behalf. [Lawyer to confirm roles.]

What we collect

• Unit managers: name, email, a salted and hashed password (we never store the password itself), unit name and targets, and billing status. Card payments are handled by our payment provider, Lemon Squeezy, and we never see card numbers.
• Advisors: the display name you type, the date and time of each activity you log, your weekly pledge, the cases you add (date, APE and an optional short note; please no client names, phone or policy numbers), and any official monthly production figures (APE, cases) and MDRT target your unit manager enters.
• Recruitment pipeline: a candidate's first name and stage, entered by the unit manager.
• Advisor follow-up list (optional): a client's first name and a follow-up date. Only the advisor who wrote it can see it. It is not shared with the unit manager or included in exports, and it is deleted when marked done.
• Technical data: a login cookie, which we need to keep you logged in, and standard server logs from our hosting provider (Cloudflare). We use no advertising or tracking cookies.

Why we use it

We use this data only to run the service: show dashboards, build the weekly digest and leaderboard, keep accounts secure, and handle billing. The legal bases are the performance of our agreement with the unit manager and our legitimate interest in running a secure service. [Lawyer to confirm.]

Who we share it with

• Within your unit: the unit manager sees advisors' activity counts, pledges and production, including each case an advisor adds, its note, and any edits or deletions. Leaderboards (the unit manager's leaderboard page/image and the in-app leaderboard every active advisor in the unit can open, by day, week, month or year) show display names, activity points for the chosen period, and each advisor's APE and cases totals for that period. Other advisors never see your individual case entries or notes. Pledges and personal targets are not shown to other advisors. The unit manager decides where to post leaderboard images.
• Service providers: Cloudflare for hosting and database, which may store data outside the Philippines, and Lemon Squeezy for payments. They process data under their own data protection terms.
• We don't share data with insurance companies, recruiters or advertisers.

How long we keep it

We keep data for as long as the unit exists. A unit manager can delete the unit at any time, which permanently deletes the unit, its advisors, activity, pledges, production, recruits, digests and follow-up lists. Login sessions expire automatically. [Retention after cancellation and for backups to be confirmed.]

Your rights

Under the Data Privacy Act you have the right to be informed, to access, to object, to correct, to erase or block, to data portability, to claim damages, and to file a complaint with the National Privacy Commission. Unit managers can export CSV files and delete the unit from Settings. Advisors can delete their follow-up list from their screen, or ask their unit manager or us for anything else.

Security

We use encrypted connections (HTTPS), hashed passwords, HttpOnly login cookies, and we store only hashed session tokens. No system is perfectly secure. If a breach affects you, we will notify you and the National Privacy Commission as the law requires.

Changes

If we change this notice, we will update the date above and tell unit managers inside the app.