Privacy policy

1. Who we are

Papaldo Ka (“Papaldo”, “we”) is a practice stock market for learning to invest. It is built and run by David Jamandre in the Philippines. This policy explains what information Papaldo keeps about you, why, and the choices you have, in line with the Data Privacy Act of 2012 (Republic Act No. 10173).

2. What we collect

Only what it takes to run your practice account:

• Your account: your email address and a password, or your name and email from Google if you sign in with Google. Passwords are handled by our sign-in provider and are never visible to us.
• Your profile: your username, and anything you choose to add: a photo, your occupation, a contact number, a website, and your current and ideal income. You can also make your profile private.
• Your risk quiz: your answers and the risk level they produce, each time you take it.
• Your practice portfolio: your simulated balance, holdings and orders.
• Community: the messages you post in the chat room, your friends list, and the name you give if you chat as a guest.
• Support: what you send us through the support form.
• Records the app keeps to stay secure and working: a log of changes to accounts and a log of the market-data requests made while you use the app, which notes which account made the request but never what you typed.

We never ask for bank details, card numbers or government IDs. No real money ever moves through Papaldo.

3. How we use it

• To run your account and your practice portfolio, and to show your risk level and suggestions.
• To show your profile, messages and friends to other members, as you set them.
• To answer you when you contact support.
• To keep Papaldo secure, fix problems, and understand which features are used.

4. Who we share it with

We don’t sell your information, and we don’t use it for advertising. We share it only with the services that run Papaldo:

• Supabase stores the database and handles sign-in.
• Vercel hosts the website.
• Google, only if you choose to sign in with Google.

Market-data providers (Alpaca, Finnhub, ExchangeRate-API) receive the names of the stocks we look up, never who you are. Some images, such as company logos and the logos on How it’s built, load straight from their providers, which see your device’s IP address as any website would.

We may also disclose information when the law requires it.

5. Cookies and browser storage

Papaldo uses only the cookies it needs to keep you signed in and to complete sign-in safely. Your display settings (theme, colours, currency, language) are saved in your browser. We use no advertising or tracking cookies.

6. How long we keep it

We keep your account information for as long as your account exists. Request logs are deleted automatically after 30 days. When you ask us to delete your account, we delete your information, except anything we must keep by law.

7. Your rights

Under the Data Privacy Act you can:

• be told what information we have about you, and how it is used;
• get a copy of it: download everything from Tools → Export;
• correct it, from your profile page;
• object to how it is used, or ask us to delete it, by contacting us;
• complain to the National Privacy Commission at privacy.gov.ph.

8. How we protect it

Information travels encrypted. Every table that holds your information is locked so that only you, and the people you choose to share with, can read it. The keys that could bypass that are never sent to your browser. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you and the National Privacy Commission as the law requires.

9. Age

Papaldo is meant for people aged 18 and over. We don’t knowingly keep information about anyone younger.

10. Changes to this policy

When this policy changes, we update the date at the top. If a change is significant, we will tell you in the app.

11. Contact us

For anything about your privacy, write through the support form or email hello@papaldo.ph.