Your data. Your privacy.

Scope and who operates MyTUP Social

CommunityStack (“CommunityStack,” “we,” “us,” or “our”) owns and operates MyTUP Social.

MyTUP Social is designed as a digital community platform for members of the Technological University of the Philippines community.

References to TUP in the Service identify the university community for which the platform is designed. CommunityStack is responsible for operating the MyTUP Social platform and for the handling of personal information described in this Privacy Policy.

Information we collect

The information we collect depends on how you use MyTUP Social, the features available to you and the permissions you choose to grant.

Account and profile information

When you create or maintain an account, we may collect information such as your name, email address, username, profile photograph, profile information, university or community affiliation, account role and other information you choose to add to your profile.

Authentication credentials are handled using protected authentication infrastructure. Passwords are not stored by us in readable plaintext.

Content you provide

We process information and content you choose to create, upload or share through MyTUP Social. Depending on the features you use, this can include:

• Posts, comments, reactions and other community interactions.
• Photographs, videos, audio and other media you upload.
• Profile information and profile images.
• Messages and other communications sent using the Service.
• Content submitted through groups, events, community features or other interactive areas.
• Reports, support requests and information you send when contacting us.

Device and technical information

When you access MyTUP Social, we may automatically receive technical information such as your IP address, device type, operating system, application version, browser type, language settings, device identifiers, push notification identifiers, crash information, diagnostic data and network-related information.

Usage and activity information

We may process information about how you use the Service, including features viewed or used, interactions with content, session information, timestamps, navigation activity and performance information.

Information received through integrations

Where MyTUP Social offers account verification, institutional integration, authentication or other connected services, we may receive information required to provide that feature. The information received depends on the integration and permissions involved.

How we use information

We use information for purposes including:

• Creating, authenticating and managing user accounts.
• Providing the features and functionality of MyTUP Social.
• Displaying profiles, posts and other content according to the visibility of that content.
• Providing messaging, communication, media and community features.
• Sending account, service, security and notification messages.
• Providing customer and technical support.
• Detecting spam, abuse, fraud, unauthorized access and violations of our rules.
• Moderating content and protecting users and the integrity of the Service.
• Diagnosing technical issues and improving performance, reliability and usability.
• Understanding how users interact with features and improving the Service.
• Complying with applicable legal obligations and responding to lawful requests.
• Providing advertising or measuring advertising performance where advertising is enabled.

We limit our use of personal information to purposes reasonably related to operating, securing, supporting and improving MyTUP Social, or other purposes disclosed to you when the information is collected.

Public and community content

MyTUP Social contains social and community features. Information you choose to publish to your profile, timeline, groups, comments or other visible areas of the Service may be viewable by other users according to the visibility settings and design of the relevant feature.

You should not publish information that you do not want other permitted users to see.

Content may also be reported by other users and reviewed by authorized moderators or platform personnel when necessary to enforce platform rules, investigate safety issues or respond to reports.

When information may be shared

We do not sell your personal information as a product to third parties.

Information may be disclosed or processed in the following circumstances:

With other users

Information you intentionally make visible through profiles, posts, comments, reactions and other community features is shared with other users according to the relevant feature and its visibility settings.

Service providers

We may use trusted third-party service providers to operate parts of MyTUP Social. These may include providers of:

• Cloud hosting and database infrastructure.
• Authentication and account services.
• File storage and media delivery.
• Push notifications and communications infrastructure.
• Analytics, diagnostics and crash reporting.
• Video, audio, calling or live-media infrastructure where those features are available.
• Advertising and advertising measurement where advertisements are enabled.
• Security, fraud prevention and platform protection.

These providers may process information only as necessary to provide their services to us, subject to their contractual obligations and applicable privacy requirements.

Safety, legal and regulatory reasons

We may preserve, access or disclose information when we reasonably believe it is necessary to comply with applicable law, a lawful legal process or government request; protect users; investigate fraud or abuse; protect the security of the Service; enforce our terms; or protect the rights, property or safety of CommunityStack, our users or others.

Business transactions

If CommunityStack or the MyTUP Social platform is involved in a merger, acquisition, restructuring, financing, asset transfer or similar transaction, information may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

Advertising, analytics and measurement

We may use analytics and diagnostic technologies to understand how MyTUP Social performs, identify errors, measure feature usage and improve the Service.

Where advertising is enabled in the version of MyTUP Social you use, advertising partners may process information such as device identifiers, advertising identifiers, IP address, general device information, application interactions and advertising engagement for ad delivery, frequency control, fraud prevention and measurement.

Your device and operating system may provide controls relating to advertising identifiers, tracking or personalized advertising. Available controls vary by platform and device.

Personalized and non-personalized advertising

Where advertising is enabled, Google or other approved advertising providers may serve personalized or non-personalized ads depending on region, consent, user settings and platform configuration. Personalized ads may use prior activity or interest signals. Non-personalized ads do not use past behavior for ad targeting, but may still use contextual information, coarse location, cookies or mobile identifiers for frequency capping, aggregated reporting, security and fraud prevention.

Where required for users in the EEA, United Kingdom or Switzerland, applicable consent will be obtained through a Google-certified consent management platform before personalized advertising is served. See the Cookie & Advertising Policy for more detail.

Device permissions

Certain MyTUP Social features may request access to device capabilities. Access depends on the feature you use and the permission you grant.

Examples may include:

• Camera — to capture photographs or video when you choose to create media.
• Microphone — to record audio, create video with sound, or use audio/video communication features where available.
• Photos or media library — to select media you choose to upload.
• Notifications — to send alerts, messages and activity notifications to your device.

You can manage device permissions through your device settings. Disabling a permission may prevent features that depend on that permission from functioning.

How we protect information

We use reasonable administrative, technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction and misuse.

Measures may include:

• Encryption of information while transmitted over supported secure network connections.
• Authentication and account access controls.
• Restricted administrative access to production systems.
• Security logging, monitoring and abuse prevention.
• Infrastructure and database access protections.
• Backup and recovery processes.

No digital service or storage system can guarantee absolute security. Users are also responsible for protecting their login information and maintaining the security of their devices.

Data retention and deletion

We retain account information and user data for as long as reasonably necessary to provide MyTUP Social, maintain the user's account, operate the Service, resolve disputes, protect the platform and comply with applicable legal obligations.

Account deletion

Users may request deletion of their MyTUP Social account and associated account data.

Account deletion can be initiated through the account deletion functionality available in the Service where provided, or through our external account deletion page:

https://mytup.social/delete-account/

When a valid account deletion request is completed, we delete or de-identify personal information associated with the account except where continued retention is reasonably required for legal compliance, fraud prevention, security, enforcement, dispute resolution or another legitimate requirement permitted by law.

Backup copies

Residual copies of deleted information may remain temporarily in secured backup systems until those backups are overwritten or deleted according to our normal backup lifecycle. Such backup data is not restored for ordinary business use after an account has been deleted.

Content involving other users

Certain information may not disappear from another user's experience immediately when deletion occurs. For example, information another person has independently retained, quoted or included in their own content may remain where technically or legally appropriate.

Your privacy choices and rights

Depending on your location and applicable law, you may have rights regarding your personal information.

These may include the ability to:

• Access certain personal information associated with your account.
• Correct or update inaccurate profile information.
• Change available privacy or account settings.
• Manage device permissions through your device.
• Control push notifications through application or device settings.
• Request information about how your data is handled.
• Request deletion of your account and associated data.
• Withdraw consent where processing is based on consent, subject to legal and technical limitations.
• Exercise other privacy rights provided by applicable law.

To make a privacy request, contact support@mytup.social .

We may need to verify your identity before completing certain requests in order to protect your account and personal information.

International processing

MyTUP Social may rely on technology providers and infrastructure that process or store information in countries other than the country where you live.

Where personal information is transferred or processed internationally, we take reasonable measures designed to ensure that the information remains protected in accordance with applicable privacy requirements and this Privacy Policy.

Younger users

MyTUP Social is intended for members of the university community who meet the minimum age requirements applicable to the Service and their jurisdiction.

The Service is not directed to children under 13 years of age. We do not knowingly create accounts for or intentionally collect personal information from children under 13.

If we become aware that information from a child under the applicable minimum age has been collected without appropriate authorization, we may take steps to remove the information and close the relevant account.

A parent, guardian or other authorized person who believes that a child has provided personal information improperly may contact us at support@mytup.social .

Third-party services and external links

MyTUP Social may contain links to external websites, third-party services or content operated by other organizations.

This Privacy Policy does not govern third-party websites or services that operate independently from CommunityStack. Their handling of information is governed by their own terms and privacy policies.

Users should review the privacy practices of a third-party service before providing information directly to that service.

Philippine privacy law

CommunityStack processes personal information subject to applicable Philippine privacy law, including Republic Act No. 10173, the Data Privacy Act of 2012, its implementing rules and other applicable requirements.

Where the Data Privacy Act applies, personal information is handled according to applicable principles of transparency, legitimate purpose and proportionality, together with appropriate security and user-rights processes.

Changes to this Privacy Policy

We may update this Privacy Policy when the Service, our data practices, legal requirements or technology change.

When changes are made, the revised Privacy Policy will be published on this page and the effective or last-updated date will be updated.

Where required by law or where a change is materially significant, we may provide additional notice through the Service or another appropriate communication method.

Contact us

If you have questions, concerns or requests regarding this Privacy Policy or the handling of personal information through MyTUP Social, contact:

For official university matters unrelated to the operation of MyTUP Social, please use the official Technological University of the Philippines website: https://www.tup.edu.ph/ .