Privacy policy
OneSur lets residents report an emergency to their local disaster risk reduction and management office (DRRMO), and lets the office's responders receive and act on those reports. This policy explains what the two apps collect, why, who sees it, and how to have it deleted. We follow the Philippine Data Privacy Act of 2012 (Republic Act 10173).
Who is responsible
OneSur is built and run by IdeaLaunch for the local government units (LGUs) that use it. The disaster office of the LGU where an emergency is reported decides how that report is handled. IdeaLaunch stores and processes the data on the office's behalf. Questions go to billyranario@gmail.com.
What the OneSur app collects
| Data | Why |
|---|---|
| Name, email address, mobile number, profile photo | Your account, and so the office can call you back about a report. Your mobile number is verified by a one time code. |
| Sign in with Google or Apple identifiers | Only if you choose to sign in that way. |
| Your location when you report | So the office knows where to send help. It is read only when you make a report, never in the background. |
| Photos, video and voice notes you attach, and your written notes | So the office can see and hear what is happening. |
| Messages you send to the office | To follow up on a report. |
| A push notification token | To tell you when the office receives your report, when help is on the way, and to send public advisories. |
What the OneSur Responder app collects
Responder accounts are created by a disaster office for its own staff and partner agencies. The app collects:
| Data | Why |
|---|---|
| Name, email address, station and role | Your work account, set up by your office. |
| Your location while you are on a call, including in the background | So the office can see you approaching the scene. Sharing starts when you accept a call and stops when you mark it done. |
| Photos, video, voice logs and messages | The incident record, and talking with the office. |
| A push notification token | To alert you to new calls. |
What we do not do
- We do not sell personal data or use it for advertising.
- We do not use analytics or tracking tools, and we do not track you across other apps or websites.
- We do not read your location outside the moments described above.
Who can see your data
- The disaster office of the LGU your report is sent to, and the responders it assigns. Offices cannot see reports sent to other LGUs.
- Service providers that run parts of the system for us: our server host; Google Firebase for push notifications and mobile number verification; Google Maps for maps and for turning a location into a barangay name; Google and Apple when you choose to sign in with them. They process data only to provide those services.
- Authorities, where the law requires it.
How long we keep it
Your account details are kept until you delete your account. An emergency report becomes part of the disaster office's official incident record, which the office must keep under Philippine law (including Republic Act 10121). When you delete your account, your name, contact details and sign in details are removed, and your past reports stay in the office's record without them.
Your rights
You can ask to see, correct or delete your personal data, and you can object to how it is used. You can change your details in the app under Account. To delete your account, open Account in the app and tap Delete account, or follow the steps on Delete your account. You can also complain to the National Privacy Commission at privacy.gov.ph.
Security
Data travels over encrypted connections, passwords are stored hashed, and each office can only reach its own records. Changes to incident records are written to a log that cannot be edited.
Children
OneSur is meant for people aged 13 and over. A child can still call for help through a parent, guardian or any adult.
Changes
If this policy changes, we update the date at the top of this page and tell you in the app when the change matters.