1. Information We Collect

Personal Information:

• Full Name, Email Address, Mobile Number
• Profile Picture, Age, Gender, Birthday
• Government ID (for verification)
• Photos, Posts, and Live Video Streams you share

(Future updates may include: delivery addresses for physical gifts and hotel bookings.)

Usage Information:

• App Interactions (likes, comments, reservations, live stream participation)
• Transaction history (e.g., coin purchases, bookings, TomoPoints earnings and redemptions)
• Location (optional for meetups, booking suggestions)

2. How We Use Your Information

We use your information to:

• Provide and improve app services
• Verify identity and prevent fraud
• Process reservations and (in future) gift deliveries
• Deliver targeted content and recommendations
• Support user safety and enforce community rules
• Enable user-to-user interaction, including live video streaming and participation in live events
• Manage your TomoPoints rewards program, including earning, tracking, and redemption for vouchers, load, or other rewards
• Comply with legal obligations

3. Data Sharing and Disclosure

Tomodachi does not sell your data. We only share limited information when necessary:

With trusted third parties:

• Payment processors (for coin purchases)
• Hotel or restaurant admins (for reservations)
• Voucher and redemption partners (for TomoPoints redemptions such as load, vouchers, or subscriptions)

With safeguards:

• We never reveal your exact address to other users.
• Verified vendors and partners must comply with confidentiality agreements.

Payments and Bookings:

All payments for reservations and services are made directly between the user and the restaurant or business. Tomodachi does not process or hold user funds.

Tomodachi acts only as a facilitator by providing the booking and reservation platform. A booking is confirmed when the user scans a QR code provided by the restaurant. This QR scan verifies the reservation, credits the user with TomoPoints (TP), and records the successful booking in Tomodachi’s secure admin system.

Any commissions owed to Tomodachi are settled directly with the restaurant or business, separate from the user’s payment.

4. Security and Protection

We implement strict security measures to protect your information:

• Encrypted data transmission (HTTPS)
• Limited access to personal data within staff
• Regular audits and system monitoring
• Selfie + ID verification to combat fake accounts
• Reservation QR code verification to ensure valid bookings

Moderation and Oversight:

Tomodachi maintains a dedicated moderation team available 24/7 to review identity verification submissions, investigate fraudulent activity, and address user reports. This ensures a safe and trustworthy community.

4A. Camera and Photo Library Access

Tomodachi requests access to your camera and photo library strictly for:

• Capturing and uploading photos or videos for posts, stories, or chats
• Taking a selfie with your ID for account verification
• Uploading existing images or videos from your photo library to share with the community or for verification

Example: You may capture a selfie with your ID to verify your account or select a picture from your gallery to use as your profile photo.

All photos and videos remain within Tomodachi and are not shared with third parties.

4B. Identity Verification and Face Data

Tomodachi may require users to submit a selfie photo and, in some cases, a photo of their government-issued ID for identity verification.

• Purpose: This verification ensures each profile is genuine, prevents account duplication, and helps block fraudulent or scam activity.
• Use: Face data is used only to verify that the selfie matches the ID. It is not used for advertising, analytics, or personalization.
• Moderation: A 24/7 Tomodachi moderation team reviews verification submissions to confirm authenticity.
• Third-Party Sharing: Face data is never shared with third parties.
• Storage: Data is stored securely on encrypted servers managed by Tomodachi. Access is restricted to authorized personnel.
• Retention: Verification data is kept as long as the account remains active for security purposes. Users may request deletion at any time by contacting us.

5. Your Privacy Rights

In compliance with the Philippines Data Privacy Act of 2012 and international data protection standards, you may:

• Access and correct your information
• Delete your account and associated data
• Withdraw consent at any time
• Report any misuse or suspicious activity

To exercise these rights, you can contact us at atechitsolutionsph@gmail.com.

6. Cookies and Tracking

At this time, Tomodachi does not use cookies or third-party tracking tools.

If such features are introduced in future updates, this Privacy Policy will be updated to explain their purpose and use.

7. Children’s Privacy

Tomodachi is intended for users aged 18 and above. We do not knowingly collect data from children under 18. If discovered, such accounts will be deleted immediately.

8. Third-Party Services

We may link to third-party services or platforms. Their privacy practices are beyond our control, and we recommend reviewing their respective policies.

9. Data Retention

We retain your information as long as your account is active or as needed to comply with legal and business obligations. You may request permanent deletion anytime.

10. Updates to This Policy

We may update this policy from time to time. Users will be notified via in-app prompts or email when major changes occur.

11. Business Partners & Affiliates

Tomodachi collaborates with verified business partners—such as restaurants, hotels, merchants, and service providers—to facilitate bookings, promotions, and user interactions. We are committed to protecting your business information and maintaining trust within our ecosystem.

Information We Collect from Businesses:

• Business Name and Owner Details
• Business Address and Contact Info
• Government Registration Documents (e.g., DTI, SEC, Barangay Permit)
• Business Logo, Menu, Services, Room/Package Photos
• Admin Staff Profile (for check-in verification)
• Reservation Schedules and Reports
• Payment and Commission Transaction Records

How We Use Business Information:

• To list and promote your business inside the Tomodachi app
• To process user reservations and deliver confirmations
• To verify authenticity of listings and prevent fraud
• To facilitate payouts, earnings reports, and transaction history
• To provide insights on user activity and engagement
• To communicate service updates, events, or marketing opportunities

Data Sharing for Business Transactions:

• Reservation data (e.g., name of user, number of guests) is shared only when a booking is made
• No user address or payment information is ever shared directly with business owners
• Businesses agree to protect any limited user information provided solely for the booking process
• Partner data will never be sold or used outside the Tomodachi ecosystem

Business Responsibility:

• All affiliate businesses are responsible for keeping their listing accurate and updated
• Businesses are prohibited from misusing any customer data obtained through Tomodachi
• In the event of misuse or fraud, Tomodachi reserves the right to suspend the business account

By affiliating with Tomodachi, business partners agree to the collection, processing, and secure handling of their data as described in this policy.

12. Data Breach Notification

In the event of a data breach that affects your personal information, we will promptly inform you through in-app notifications or email and take all necessary steps in compliance with the Philippines Data Privacy Act of 2012 and other relevant laws.

13. Contact Us

For privacy-related concerns, account deletion requests, or questions about this policy, please contact:

Tomodachi – A-Tech I.T. Solutions

Location: Muntinlupa City, Philippines

Email: atechitsolutionsph@gmail.com

---