Privacy Policy

Last updated: 12 October 2026

FindMyCoach.PH (“we”, “us”) connects students across the Philippines with coaches, tutors, and trainers. This policy explains what personal information we collect, why, and what you can do about it. We follow the Data Privacy Act of 2012 (RA 10173) and its implementing rules.

What we collect

When you create an account

Your name and email address.
A password, which we never store directly — only a scrypt hash that cannot be reversed back into your password.
Your mobile number, which we ask for when you sign up. Until you confirm it by SMS, we keep it as you typed it, marked not verified, and you can change or remove it from your account at any time. If you verify your phone, we send a one-time code by SMS to confirm it is yours, and the number you confirm replaces the one you typed. If you verify by email instead, we send the code to the email address on your account and note when it was confirmed.

If you are a student

Your city, whether you are learning for yourself or your child, and your goals — so coaches can respond usefully.
The coaches you contact and the messages you exchange with them.
Reviews you write. Reviews are public: they appear on the coach’s profile with your first name and last initial.

If you are a coach

Your public profile: display name, headline, bio, credentials, subjects, city and area, years of experience, and hourly rate.
Your profile photo, if you upload one. Photos appear on your profile right away; our team reviews them and removes any that break our Terms.
Verification records if you complete identity verification.
Your subscription and payment history (amount, plan, dates, status).

Automatically

Pages you view on the site, the referring page, and an anonymous visitor identifier stored in a cookie. This is first-party only — we do not use Google Analytics, advertising pixels, or any third-party tracker.
Your IP address, used transiently for rate limiting and abuse prevention.

Cookies we set

Session cookie — keeps you logged in. HTTP-only and signed, so it cannot be read or forged by scripts.
Two-factor cookie — short-lived, only between entering your password and your authentication code.
Visitor cookie — an anonymous ID so we can count visits without identifying you.

We set no advertising or cross-site tracking cookies.

How we use your information

To run your account, and to show coach profiles to students searching.
To pass an inquiry to a coach and let the two of you message each other.
To verify phone numbers and identity, which is what the Verified badge means.
To take subscription payments from coaches and keep billing records.
To detect fraud and abuse, and to enforce our Terms.
To understand which searches lead to contacts, so we can improve the directory.

What we share, and when

A coach’s phone number and email are never shown publicly and are never returned by search.They are released only to a student who has actually sent that coach an inquiry — and equally, that student’s contact details are released only to that coach. This is enforced in our database, not just in the interface.

We share data with service providers who help us operate:

Supabase — database and file storage.
Vercel — website hosting.
PayMongo — payment processing. Card details go directly to PayMongo; we never see or store them.
Semaphore — sending SMS verification codes.
Resend — sending transactional email such as password resets.

We do not sell your personal information. We may disclose information if required by law, a court, or the National Privacy Commission, or to protect someone’s safety.

How long we keep it

Account and profile data — while your account is open.
Inquiries, messages, and reviews — retained after account closure where another user was party to them, or where we need them to resolve a dispute.
Payment records — kept as long as tax and accounting rules require.
One-time codes and password-reset links — minutes, then they expire.

Your rights

Under the Data Privacy Act you may:

Be informed about how your data is processed.
Access a copy of the personal data we hold about you.
Correct anything inaccurate.
Object to processing, or withdraw consent.
Have your data erased or blocked where the law allows.
Obtain your data in a portable format.
Be indemnified for damages from inaccurate or unlawfully obtained data.
Complain to the National Privacy Commission at privacy.gov.ph.

You can edit most of your information from your dashboard. For anything else, message us on Facebook at facebook.com/findmycoachphand we will respond within 15 working days. We will confirm it’s really you before sharing or changing any of your data.

Security

Traffic is encrypted in transit (HTTPS).
Passwords are stored as scrypt hashes, never in readable form.
Two-factor authentication is available to all coaches and required for our administrators.
Access to the database is server-side only, with row-level security enabled.

No system is perfectly secure. If we ever discover a breach affecting your personal data, we will notify you and the National Privacy Commission as the law requires.

Children

You must be at least 18 to hold an account. Parents and guardians are welcome to book coaching for a child using their own account — please do not create an account in a child’s name.

Changes

If we make a significant change we will update the date above and, where it materially affects you, tell you in the app or by email.

Contact

Questions about this policy or your data: message us on Facebook at facebook.com/findmycoachph.