Privacy Policy

We collect the following types of personal information:

• Account information: your name and email address when you create an account
• Assessment answers: your responses to the Once assessment, used to personalize your learning experience
• Payment information: payment details processed securely through Paddle, our Merchant of Record (we do not store your full card number, GCash, or Maya account details on our servers)
• Usage data: information about how you interact with the platform, including pages visited, lessons completed, and time spent

We use your personal information to:

• Provide and deliver the Once educational service to you
• Personalize your learning path based on your assessment results
• Process payments and send transaction confirmations
• Communicate with you about your account, updates, or support requests
• Improve and develop the platform based on aggregated usage patterns
• Comply with legal obligations

Your data is stored securely using Supabase with encryption at rest and in transit. We implement industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

We share your information with third parties only as necessary to operate the Service:

• Paddle: our Merchant of Record, processes your payments securely. Paddle's use of your data is governed by their own Privacy Policy.
• Supabase: provides our database and authentication infrastructure.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Under the Philippine Data Privacy Act (RA 10173), you have the following rights as a data subject:

• Right to be informed: you have the right to know how your personal data is being collected and processed
• Right to access: you may request a copy of the personal data we hold about you
• Right to correction: you may request correction of any inaccurate or incomplete personal data
• Right to erasure or blocking: you may request deletion of your personal data, subject to legitimate business or legal requirements
• Right to data portability: you may request your data in a structured, commonly used format
• Right to object: you may object to the processing of your personal data in certain circumstances
• Right to file a complaint: you may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated

To exercise any of these rights, please contact us at hello@onceph.com. We will respond to your request within a reasonable timeframe, and no later than 30 days from receipt.

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

We use essential cookies to keep you logged in and to ensure the platform functions properly. We may also use analytics cookies to understand how the platform is used. You can control cookie settings through your browser preferences.

The Once platform is not intended for children under the age of 18. We do not knowingly collect personal information from anyone under 18 without parental consent. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending you a notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or your personal data, please contact us at hello@onceph.com.

You may also contact the National Privacy Commission (NPC) of the Philippines for data privacy concerns at www.privacy.gov.ph.