Privacy Policy

Who we are

SukiPlus (“SukiPlus”, “we”, “us”) is a point-of-sale and payments app for Philippine businesses, operated by HyperCobalt Inc., Ligao City, Albay. This policy explains how we collect, use, share and protect personal information when you use the SukiPlus app and website, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

Information we collect

• Account details: your name, email address, mobile number, business name and role (owner, manager or staff).
• Business data you enter: stores and branches, products, inventory, prices, sales, receipts, staff accounts and settings.
• Payment information: the PayMongo account you connect (for example, the email you link), and the amount, status, fees and reference of each transaction. We do not collect or store your customers’ card numbers or e-wallet credentials.
• Device and usage data: device identifiers used for device verification, app version, IP address, error logs and the audit trail of actions taken in your account.
• Support messages: what you send us when you contact us.

How we use information

• To provide the app: record sales, manage inventory, issue receipts and produce reports.
• To process and confirm QR Ph payments, including verifying payment notifications from PayMongo before a sale completes.
• To keep accounts secure, verify devices, prevent fraud and keep audit logs.
• To bill paid plans, provide support and send service notices.
• To improve and fix the app.
• To comply with legal obligations and respond to lawful requests.

Basis for processing

We process personal information with your consent, to perform our contract with you, to comply with the law, and for our legitimate interests in running and securing the service, balanced against your rights.

Who we share it with

• PayMongo: your payments are processed by PayMongo under your own agreement with them. Their handling of your data is governed by their policies.
• Service providers that host our systems, send email, or help us monitor and support the app, under confidentiality and data protection obligations.
• People in your business: owners and managers can see staff activity and the audit log for their business.
• Authorities when required by law or to protect rights, safety and security.
• A successor if SukiPlus is involved in a merger, acquisition or sale of assets, with notice to you.

We do not sell personal information.

Your customers’ data

When you record sales or receipts, you may enter information about your own customers. For that data you decide why and how it is used, and we act only as your service provider (a personal information processor). You are responsible for having a lawful basis and giving your customers any notices the law requires.

How long we keep it

We retain your information only for as long as necessary to provide SukiPlus services, operate your account, maintain transaction and business records, protect the security of our platform, resolve disputes, and comply with applicable legal, tax, accounting, and regulatory requirements.

Security

We use measures such as encrypted connections, role-based access, PIN and biometric re-entry in the app, verified payment webhooks and server-side price calculation. Biometric checks are performed by your device’s own system. No system is completely secure, so please protect your PIN and devices. If a breach affects your personal information, we will notify you and the National Privacy Commission as the law requires.

Your rights

Under the Data Privacy Act you have the right to be informed, to access your personal information, to object, to correct inaccurate data, to request erasure or blocking, to data portability, to claim damages for unlawful use, and to file a complaint with the National Privacy Commission (privacy.gov.ph). To exercise these rights, email hello@sukiplus.app. We may need to verify your identity first.

Where data is stored

Our service providers may store or process data on servers outside the Philippines. Where that happens, we require protections consistent with Philippine law.

Our website

This website loads fonts from Google Fonts and code libraries from a public content delivery network. Those providers can receive your IP address and browser details when your browser requests those files. We do not use advertising trackers on this site.

Children

SukiPlus is for businesses and is not directed to anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy. We will post the new version here with a new date, and tell you in the app or by email if the changes are significant.

Contact us

HyperCobalt Inc.
Ligao City, Albay
Privacy inquiries: sukipluscustomerservice@gmail.com
Data Protection Officer: Lorenze Prepotente