Privacy Policy

Last updated October 13, 2026

This policy explains what personal information GuroMake collects, why, who receives it, and what you can do about it. GuroMake is run by [Operator / business name], [business address], which is the personal information controller under the Data Privacy Act of 2012 (Republic Act No. 10173).

1. What we collect

You give us

  • Account details: your name, email address and password. The password is stored only in hashed form; we cannot read it.

  • Teaching details: the grade levels and subjects you teach, your defaults, and the name of the person who checks your plans (for example your principal), which is printed on your plans.

  • Your work: your Budgets of Work and lesson plans, their earlier versions, the reference links you add, and the instructions you type for the AI assistant.

  • Payment details: the amount, the method (GCash or Maya), the reference number you type, and the receipt you attach. We do not receive or store your e-wallet password, PIN or card details.

Collected automatically

  • Sign-in sessions: your IP address, your browser's description, and the time you were last active.

  • AI usage: for each AI request, what it was for, which plan it belonged to, how much text was processed, and how many credits it cost. The text of the request and of the reply is not kept in this record.

We do not use analytics, advertising or tracking tools, and we do not buy information about you from anyone.

2. Why we use it

  • To provide the service: sign you in, keep your work, and produce documents with your name on them. This is needed to perform our agreement with you.

  • To check payments and keep a record of subscriptions and credits. This is needed for our agreement with you and for our legal and accounting obligations.

  • To keep the service secure, for example by limiting repeated sign-in attempts. This is our legitimate interest.

We do not sell your information and we do not use it for advertising.

3. The AI assistant

When you ask for an AI draft, we send the content needed to write it to our AI provider, [AI provider name, for example OpenAI]. That content is the lesson's details (title, subject, grade, topic, competencies, standards and activities), the text already written in the plan, any instructions you type, text from the reference links you added, and, when you upload a Budget of Work, the text extracted from that file.

We do not add your name, email address or account number to these requests. Anything you type or upload yourself is sent as it is, so please do not put personal information about yourself, your learners or others into lesson content or AI instructions.

4. Who receives your information

  • Service providers who process it for us: our hosting provider [hosting provider and country], our AI provider as described above, and our email provider, which carries the notice sent to our administrators when you report a payment.

  • People you share with. If you share a lesson plan with another account, that person sees the plan and your name. If you turn on a share link, anyone who has the link can read the plan, with your name and the name of the person who checks it, until you turn the link off.

  • Our administrators, who can see your name, email address, payment records and receipts, AI usage records and credit balances in order to run the service.

  • Authorities, when the law requires it.

Some providers may process information outside the Philippines. Where they do, we rely on their contractual commitments to protect it.

5. How long we keep it

  • Your account, Budgets of Work and lesson plans are kept while your account is open, including while a subscription has lapsed.

  • A lesson plan you delete is removed from your account but may remain in our records until your account is deleted.

  • Up to 30 earlier versions of each lesson plan are kept; older ones are deleted.

  • A Budget of Work file you upload is read and then discarded; only the text taken from it is kept.

  • Payment records and receipts are kept for [retention period, for example as long as tax and accounting rules require].

  • Sign-in session records are removed some time after they expire.

When your account is deleted, your work and records are deleted with it, except what we are required by law to keep.

6. How we protect it

Passwords are hashed, receipts are stored privately and shown only to you and our administrators, and access to administration is limited to authorized people. No system is perfectly secure; if a breach affects your information, we will notify you and the National Privacy Commission as the law requires.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access your information, to object to its processing, to have it corrected, to have it erased or blocked, to receive a copy in a portable form, to claim damages, and to file a complaint.

  • You can correct your name, email address and teaching details in Settings.

  • You can download a backup of your lesson plans and Budgets of Work from Settings, and export any plan as a document.

  • To have your account deleted, or to use any other right, write to [contact email]. We will answer within a reasonable time.

If you are not satisfied with our answer, you may complain to the National Privacy Commission (privacy.gov.ph).

8. Children

GuroMake is for teachers and is not meant for use by children. Please do not enter information that identifies individual learners.

9. Changes to this policy

When we change this policy we update this page and the date at the top.

10. Contact

support@guromake.com