TAFARMCO

1. Introduction

Taloy Farmers Multipurpose Cooperative (TAFARMCO) is committed to protecting the privacy of our members. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the TAFARMCO mobile application.

2. Information We Collect

We collect the following information to provide our services:

• Phone number - Used for OTP (One-Time Password) verification and account identification
• Member code, name, and branch - Retrieved from cooperative records to identify your membership
• MPIN (Mobile PIN) - Stored as a bcrypt hash for secure authentication; never stored in plain text
• Device FCM token - For push notifications (future feature)

3. How We Use Your Data

Your personal information is used for the following purposes:

• Authentication and account verification - To verify your identity and grant access to your account
• Displaying member information - To show your savings and loan balances within the app
• Sending OTP codes via SMS - To verify your phone number and authenticate transactions
• Push notifications - To send you important updates and reminders (future feature)

4. Data Storage and Security

We take data security seriously and implement the following measures:

• Credentials are stored server-side with encryption (bcrypt hashing for MPIN)
• Session management uses JWT (JSON Web Tokens) with a 30-day expiry
• Sensitive data on your device is stored via encrypted secure storage
• All communication between the app and our servers is encrypted using HTTPS/SSL

5. Data Sharing

We do not sell or share your personal data with third parties, except as necessary to provide our services:

• Semaphore - Our SMS provider, used solely for delivering OTP codes to your phone number
• Google Play Services - Required for app distribution and basic device functionality
• Firebase Cloud Messaging - For delivering push notifications (future feature)

6. Data Retention

• Account data is retained for as long as your cooperative membership is active
• OTP codes expire automatically after 5 minutes
• JWT session tokens expire after 30 days
• You may request deletion of your account data by contacting the cooperative directly

7. Your Rights

As a member, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account by contacting the cooperative
• Withdraw consent for data processing (note: this may affect your ability to use the app)

8. Contact Information

If you have questions or concerns about this Privacy Policy or your personal data, please contact us:

• Cooperative: Taloy Farmers Multipurpose Cooperative (TAFARMCO)
• Address: Taloy Sur, Tuba, Benguet, Philippines
• Email: tafarmco@gmail.com

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of the app after changes constitutes acceptance of the updated policy.