Privacy Policy

This policy covers INSURE, the exam reviewer you are reading it on, and every account that uses it — reviewees, Field Managers, and the Sales Manager alike. It is written to the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules issued under it by the National Privacy Commission.

Writing to insureph26@gmail.com reaches the people who run INSURE and handle everything described here.

Your account

The name and email address you give when you register, and the password you choose. The password is stored only as a bcrypt hash — it cannot be read back, by us or by anyone with access to the database, which is why a forgotten password is reset rather than recovered.

Your role and who you report to

Whether the account is a reviewee, a Unit Manager, or the Sales Manager, and which manager a reviewee belongs to. This is what decides which screens you land on and whose progress a manager can see.

Your profile photo

Optional. If you upload one, it is cropped to a small square in your browser and stored alongside your account record. Removing it from the avatar menu deletes it.

What you study

Which flashcards and memorization items you have mastered, the practice questions you have answered and whether you got them right, your practice-exam attempts with each answer and score, your per-track progress percentages, and your study streak.

Your certificates

The track a certificate was issued for, the date it was issued, and its certificate number.

When you were last active

A timestamp updated when you open the app, so a manager can tell an account that has stalled from one that was never used.

Invitations

If you were invited to join as a Unit Manager, the invitation record holds the code, who created it, when it expires, and when it was claimed.

We do not ask for your address, your date of birth, any government or licence number, or any payment details, and there is nowhere in the app to enter them. Please do not put personal details of that kind into a profile photo or a name field.

Your account details exist so the app can tell who you are and keep your progress attached to you between visits. Your study record exists so the app can pick up where you left off, work out what is still unmastered, decide when a practice exam unlocks, and issue a certificate when a track is finished. Your role and manager assignment exist so the right screens are shown to the right people.

The lawful bases we rely on are the performance of our agreement with you — you cannot have an account without an account record — and our legitimate interest in running a review programme a manager can oversee. Your profile photo is optional and rests on your consent; you can withdraw that consent by removing the photo.

Nobody else is shown your record. We do not sell it, rent it, or hand it to advertisers, and we do not share it with anyone outside the people who run INSURE, except in the two cases below: the services we use to run the app, and a lawful order from an authority entitled to make one.

Running the app means using a few outside services, each of which handles data on our instructions and nothing more:

• Railway hosts the PostgreSQL database, which is where everything listed above is stored.
• Vercel hosts the application itself and serves every page you load. On the live site it also runs Vercel Analytics, described below.
• Resend sends outbound mail. It is used only for Unit Manager invitations, and it sees the address an invitation is going to.

These providers operate servers outside the Philippines, so using INSURE involves your information being stored and processed abroad.

INSURE sets one cookie that matters: the session cookie that keeps you signed in. Without it you would be asked to sign in on every screen, so it cannot be switched off while you are using an account. Clearing it signs you out.

The live site also runs Vercel Analytics, which counts page views and general traffic patterns. It does not use advertising cookies, does not follow you to other sites, and is not tied to your account. Analytics does not run in development at all.

Your account and its study record are kept for as long as the account exists, because that record is the thing the app is for. Ask us to close your account and we will delete it along with the progress, attempts, streaks, and certificates attached to it — those are removed with the account rather than left behind. An unclaimed invitation expires on the date it was issued with, and can be deleted before then.

Under the Data Privacy Act you may ask to be told what we hold about you and to be given a copy of it, to have anything inaccurate corrected, to object to how we are using it, to have it erased or blocked where the law allows, and to have it handed to you in a portable form. You may also lodge a complaint with the National Privacy Commission if you believe we have mishandled your information.

Some of this you can do yourself: your name and photo are editable from the avatar menu, and a forgotten password is reset from the sign-in screen. For anything else, write to insureph26@gmail.com from the address on your account and say what you want done. We will come back to you within a reasonable period, and in any case no later than the law requires.

Passwords are hashed with bcrypt and never stored in a readable form. Sessions are signed tokens rather than shared secrets. Every screen and every data route checks who is asking before it answers, and the manager roster applies the same rule to the data it returns as the console does to the page. Traffic to the site is encrypted in transit.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your information, we will notify you and the National Privacy Commission as the law requires.

INSURE is built for adults preparing for insurance licensing examinations and is not directed at children. We do not knowingly create accounts for anyone under 18. If you believe a minor has registered, tell us and we will remove the account.

If this policy changes, the date at the top changes with it, and a change that materially affects what we do with your information will be signalled in the app rather than left for you to notice. The version on this page is always the one in force.

The Terms & Conditions set out the rules for using INSURE, and the Help page answers the practical questions about studying and accounts.