BarKada

Data Privacy Act of 2012 (RA 10173)

Privacy notice

Version 2026-09-28

BarKada is a small, invite-based study tool for Philippine law students, run by its owner (the “personal information controller”). This notice explains what we collect, why, and your rights as a data subject.

What we collect

  • Account: your email address, sign-in codes (stored only as one-way hashes, deleted after use or expiry) and your consent record.
  • Profile: full and preferred name, law school, year level, and optionally student number, section and target bar year.
  • Study material: subjects, outlines, notes, flashcards, quiz and essay attempts, and AI outputs you generate.
  • Invite requests: if you ask for an invite on the home page, the name, email, law school and note you enter, used only to review your request and contact you about it. Ask the owner to delete a request at any time.
  • Usage: counts of AI requests (for daily limits), last sign-in time, and IP address for rate-limiting abuse.

Why we use it

To create and secure your account, show your study material only to you, enforce fair-use limits on the shared AI key, and keep the service running. We do not sell your data or use it for advertising.

Who else processes it

  • Cloudflare hosts the app and database.
  • Google Gemini processes text you send to the AI (topics, notes you choose to summarize, your answers for grading). On Google's free tier, prompts may be used to improve Google's products, so avoid entering personal or sensitive information in your notes and answers.
  • Email provider (e.g. Brevo) delivers your sign-in codes.

Retention

Your data is kept while your account exists. Sign-in codes expire in 10 minutes. When you delete your account, your profile and study material are erased from the live database.

Your rights

Under RA 10173 you may be informed, access, object, correct, and request erasure or blocking of your data, and to data portability. In BarKada you can edit your profile at any time, download all your data (Settings → Backup) and delete your account (Settings → Account). For other requests, contact the owner who invited you. You may also lodge a complaint with the National Privacy Commission (privacy.gov.ph).

Security

Passwordless sign-in, signed session cookies, hashed one-time codes, encrypted API keys, per-account data isolation and HTTPS everywhere.

BarKada is an AI study aid. It is not legal advice.

Back to BarKada