Privacy Policy
Last updated:
This Privacy Policy explains what information iLokal collects when you use the app, how we use and share it, and the choices you have. We wrote it to be easy to read — if anything is unclear, email support@ilokal.shop.
1.Who we are
iLokal is a local-business discovery app that helps you find nearby shops, follow them, discover events, and claim deals to redeem in store. We are the data controller for the app, and we process personal information in line with the Philippine Data Privacy Act of 2012 (RA 10173).
2.Information you provide
If you sign in with Google, we receive the basic profile information (name, email, avatar) you authorize Google to share.
- Email address — required to create an account.
- Full name — shown on your profile.
- Phone number and profile photo — optional, added by you.
- Password — stored and managed by our authentication provider; we never store it in plaintext.
- Ratings and reviews — anything you write about a business.
3.Information we collect automatically
- Approximate location — to show nearby businesses and directions (see Location below).
- Your activity — businesses you follow, offers you claim and redeem, events you view, and pages you visit.
- View counts — businesses and products you view, deduplicated to one view per item per day and used only as aggregate trending numbers.
- Device and technical data — device type, operating system, and app version, to operate and secure the app.
4.Permissions the app asks for
- Location — for nearby discovery and directions. Optional and revocable.
- Photos / storage — only when you choose to upload a profile photo.
5.How we use your information
- To provide the app — discovery, follows, events, offers, updates, and notifications.
- To manage your account and keep you signed in.
- To validate and honor offers you claim (redemption codes).
- To produce aggregate numbers like view and trending counts.
- To send service messages — email confirmations, password resets, and notifications from businesses you follow.
- To keep the app secure and prevent fraud and abuse.
- To comply with legal obligations.
6.How we share information
We never sell your personal information. We share it only as needed:
- With businesses you interact with — when you redeem an offer, the business processes what is needed to honor it.
- With service providers who host and run the app for us — such as our authentication, database, hosting, email, and map providers.
- Where required by law, to enforce our Terms, or to protect rights, safety, and property.
- In a merger, acquisition, or asset sale, subject to this policy.
7.Location data
We request location only to show nearby businesses and directions, and we use it while you use the app ("when in use"). Location is optional — you can decline it or use the app with a default area instead, and you can revoke access anytime in your device settings. We don’t build a persistent history of where you’ve been.
8.Events you bookmark
Events you save with the heart button are stored only on your device — they aren’t uploaded to our servers. They stay with you even after you sign out.
9.Retention and security
We keep personal information for as long as your account is active or as long as needed to provide the service. When you delete your account we archive it immediately and then purge the personal fields after the recovery window described below, except where longer retention is required by law.
We use encryption in transit, secure token storage on your device, and access controls at our providers. No system is 100% secure, so we can’t guarantee absolute security.
10.Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate data — you can edit your name, phone, avatar, and email in the app;
- Delete your account and the data tied to it;
- Object to or restrict certain processing, and withdraw consent (for example, location);
- Receive your data in a portable form; and
- Lodge a complaint with a supervisory authority — in the Philippines, the National Privacy Commission (NPC).
11.Deactivating your account
If you want a break rather than a deletion, you can deactivate instead, in the app under Profile → Account Settings → Deactivate Account.
Deactivating is reversible: it signs you out and pauses your account, and your data is kept while it is deactivated. You can reactivate by signing back in. Deactivation does not delete anything — to remove your details, use Delete Account.
12.Deleting your account
You can delete your account in the app under Profile → Account Settings → Delete Account.
Deleting archives your account straight away: you are signed out on every device and your profile stops being visible to anyone. We keep the archived record for 90 days before removing your personal details, so a deletion made by mistake is not immediately irreversible.
After 90 days we purge the personal fields — your email address, name, phone number and profile photo. Records of things you did, such as offers you redeemed, may be kept for the businesses’ own records and for legal and fraud-prevention reasons, in a form that no longer identifies you.
13.Children’s privacy
iLokal is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us data, contact us and we will delete it.
14.International users
Our providers may process and store data in countries other than yours. Where required, we use appropriate safeguards for such transfers.
15.Changes to this policy
We may update this policy. When we do, we’ll post the new version with a revised "Last updated" date and, for material changes, provide additional notice.
16.Contact
Questions or requests? Email support@ilokal.shop — we’re happy to help.

