Privacy Policy

Who we are

ResQPulse is run by the Municipal Disaster Risk Reduction and Management Office (MDRRMO) of the Municipality of Rosales, Pangasinan. MDRRMO Rosales decides how your information is used (it is the "personal information controller"). In this policy, "MDRRMO", "we" and "us" mean MDRRMO Rosales.

Questions or requests: Call MDRRMO Rosales at #2441, or visit the MDRRMO office, and ask for the Data Protection Officer of the Municipality of Rosales.

What we collect from you

• Your account: your first, middle and last name, suffix, mobile number, email (if you use one), password, and your address in Rosales (barangay, street and zone). Your password is stored scrambled (hashed), so nobody can read it, not even MDRRMO.
• Proof of residency: a photo of a valid ID. The law treats government-issued IDs as sensitive personal information. We use it only to confirm that you live in Rosales.
• Your agreement: when you agreed to these documents, and to which version.
• SOS alerts and reports: the kind of emergency, what you write, the photos you take, your location (GPS coordinates and how accurate they are), the barangay and nearest landmark worked out from it, and the time.
• Guests: if you send an SOS without an account, the name and mobile number you enter, with the details above.
• Your phone: a notification token, so we can send you alerts, and the internet (IP) address that reaches our server.
• At evacuation centers: MSWD teams may record your name, age, sex, barangay and contact number with the Resqponder app. Its Privacy Policy explains how.

What we collect from MDRRMO staff

For staff who use the web panel: their name, email, and a record of what each person does in the panel (the Audit Log), with the date and internet address.

How your location is used

• ResQPulse sends your location to MDRRMO only when you send an SOS or a report.
• On Evacuation Centers, your location is used on your phone to show the nearest centers. It is not sent to us.
• To show the address of a report, your phone looks up the place at your location with OpenStreetMap's search service (Nominatim).

Why we use your information

• To receive, check and respond to SOS alerts and reports, and to send the right responders.
• To confirm that an account belongs to a resident of Rosales, and to keep accounts secure (codes and limits on wrong passwords).
• To send disaster alerts, and updates about your reports.
• To prevent and deal with misuse, such as false reports.
• For disaster planning and statistics, using totals that don't identify anyone.
• To keep the records the law requires.

Our legal basis

Under Sections 12 and 13 of the Data Privacy Act, we use your information because:

• you agreed to it when you created your account, including specifically for your ID photo (Sections 12(a) and 13(a));
• it is needed to protect someone's life and health in an emergency (Sections 12(d) and 13(c));
• it is needed to respond to emergencies, keep public order and safety, and carry out MDRRMO's duties under the Philippine Disaster Risk Reduction and Management Act of 2010 (Republic Act No. 10121) (Sections 12(e) and 13(b));
• the law requires it, for example to keep public records (Section 12(c)).

The AI photo check

When an SOS or a report includes a photo, our server may send the photo to Google's Gemini AI service to suggest what kind of emergency it shows. The suggestion is only a hint for MDRRMO staff and responders. A person always checks the report and decides what to do; the AI does not decide whether help is sent.

Who sees your information

• MDRRMO Rosales staff who handle reports and accounts.
• The response teams sent to help (for example police, fire, rescue, health and social welfare teams), in the Resqponder app. They see what they need to respond: your name, mobile number, location, the report and its photos. They must keep it confidential.
• Service providers that run parts of ResQPulse for us, only for that purpose: Hostinger (our server and database); Google (Firebase Cloud Messaging for notifications, Gmail for emails with codes, Google Maps Platform for finding barangays and landmarks, and Gemini for the AI photo check); Semaphore and TextBee (text messages); and OpenStreetMap (maps and place search).
• Government authorities, when the law requires it, for example under a court order.

Some of these providers keep information outside the Philippines. We remain responsible for it under Section 21 of the Data Privacy Act. We don't sell your information, and we don't use it for advertising.

How long we keep it

• Your account is kept while it is in use. If MDRRMO rejects a sign-up, the account and its ID photo are removed.
• SOS alerts, reports and the Audit Log are government records. We keep them while they are needed for the response, follow-up and planning, and as long as records rules require (Republic Act No. 9470, the National Archives of the Philippines Act of 2007). Then we delete them or remove what identifies you.
• Codes sent by text or email stop working after 10 minutes.

How we protect it

• Information travels over encrypted connections (HTTPS).
• Passwords are stored hashed, so nobody can read them.
• Only authorized staff and teams can see personal information, and what staff do in the web panel is recorded.
• Codes and limits on wrong passwords protect accounts. Logging out removes your account from the phone.
• If a data breach affects your information, we will tell the National Privacy Commission and you, as the law requires.

Your rights

Under the Data Privacy Act, you can:

• be told how your information is used;
• get a copy of your information, including in an electronic format you can reuse;
• have wrong or incomplete information corrected (you can change many details yourself in Profile);
• object to the use of your information, or ask us to stop, block or delete it, where the law allows;
• withdraw your consent at any time. This doesn't undo what was done before, and records the law requires us to keep stay;
• be paid damages if you are harmed by inaccurate or unlawfully used information;
• complain to the National Privacy Commission (privacy.gov.ph).

To use these rights: Call MDRRMO Rosales at #2441, or visit the MDRRMO office, and ask for the Data Protection Officer of the Municipality of Rosales. We may ask you to prove who you are first.

Children

You must be 18 or older to create an account, or have a parent or guardian agree to these documents with you. Anyone, of any age, can send an SOS in an emergency.

Changes to this policy

We will post changes in the app and at resqpulse.com/privacy-policy, with the date at the top. If a change is important, we will ask you to agree again.