Privacy Policy

1. Introduction

This Privacy Policy explains how Tagapag collects, uses, shares, stores, and protects information through Tagapag, including our website, web application, profiles, matching tools, goals, check-ins, comments, messages, notifications, and related services. In this Privacy Policy, “Tagapag,” “we,” “us,” and “our” refer to Tagapag. “You” and “your” refer to each user of Tagapag.

By creating an account or using Tagapag, you acknowledge that your information will be handled as described in this Privacy Policy. Your use of Tagapag is also governed by our Terms of Use.

If Tagapag is provided through a school, district, nonprofit, club, or other organization, that organization may also have its own privacy notices, consent forms, student privacy rules, and data practices that apply to your use of Tagapag.

2. Eligibility and Users Under 13

Tagapag is not intended for children under 13. Users under 13 are not permitted to create an account or use Tagapag. We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a user under 13 without a legally valid consent process, we will take reasonable steps to delete that information and close the account. Parents, guardians, schools, or authorized organizations may contact us at support@tagapag.com if they believe a child under 13 has provided information to Tagapag.

Users who are 13 or older but under the age of majority may use Tagapag only with permission from a parent or legal guardian, or through a school or organization that has authorized their participation, as described in the Terms of Use.

3. Information We Collect

We collect information that users provide directly, information generated through use of Tagapag, and limited technical information needed to operate and secure the service.

4. How We Use Information

We use information for the following purposes:

• To create, maintain, and authenticate user accounts.
• To provide onboarding, profiles, mentor matching, mentor requests, and mentor/mentee relationships.
• To show relevant profile information, shared interests, help areas, availability, and match details to authorized users.
• To allow users to create goals, update progress, submit check-ins, comment, message, and view history.
• To provide notifications, reminders, updates, and account communications.
• To support student mentorship, accountability, progress tracking, and approved school or organization programs.
• To monitor, investigate, and respond to safety, misuse, bullying, harassment, security, or policy concerns.
• To provide support, troubleshoot problems, fix bugs, and improve app functionality.
• To maintain records of consent, account status, terms acceptance, privacy acceptance, and important account events.
• To comply with legal obligations, school obligations, contractual obligations, law enforcement requests, court orders, or safety-related requests when applicable.
• To protect the rights, safety, and security of users, schools, organizations, the public, and Tagapag.

5. How Information Is Shared Inside Tagapag

Tagapag is built around mentorship, so some information is shared with other authorized users based on role, match status, and app permissions.

6. How Information Is Shared Outside Tagapag

We do not sell student personal information. We do not use student personal information for targeted advertising. We do not share personal information with third parties except as described in this Privacy Policy.

We may share information with:

• Schools and organizations: We may share information with , schools, districts, clubs, nonprofits, or program administrators that sponsor, manage, or authorize the mentorship program.
• Parents and guardians: We may share information with parents or guardians when required by law, school policy, user safety needs, consent requirements, or a valid request from an authorized school or organization.
• Service providers: We may share information with vendors that help us operate Tagapag, including hosting, database, authentication, storage, email, security, support, logging, and analytics providers. Current placeholder providers include SUPABASE, VERCEL], RESEND, and NONE.
• Safety and legal recipients: We may share information with school officials, parents, guardians, emergency contacts, law enforcement, courts, or other appropriate parties if we believe disclosure is necessary to protect someone’s health or safety, investigate misuse, comply with law, respond to legal process, or enforce our Terms of Use.
• Business transfers: If we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law and any school or organization agreement.
• With your direction or consent: We may share information when you, your parent or guardian where applicable, your school, or another authorized organization directs us or gives permission to do so.

7. Student Privacy and School Programs

If Tagapag is used by or through a school, district, or education program, information collected through Tagapag may be subject to student privacy laws, school policies, or written agreements between Tagapag and the school or organization.

When we receive or maintain student information on behalf of a school or organization, we will use that information only to provide, support, secure, improve, and administer Tagapag, or as otherwise permitted by the applicable agreement and law.

8. Safety, Moderation, and Reporting

We may review account information, profiles, goals, check-ins, comments, messages, notifications, and related activity when we believe review is necessary to protect users, investigate a report, enforce our Terms of Use, comply with law, support a school or organization, or maintain the security and integrity of Tagapag.

Tagapag is not an emergency service. Do not use Tagapag to report emergencies, threats of harm, abuse, self-harm, violence, medical emergencies, or other urgent safety concerns. Contact a trusted adult, parent or guardian, school official, emergency services, or local crisis resource immediately.

If we become aware of content or conduct that suggests a safety concern, we may notify school officials, parents or guardians, emergency contacts, law enforcement, or other appropriate parties where permitted or required.

9. Cookies, Local Storage, and Similar Technologies

Tagapag may use cookies, browser storage, local storage, session storage, and similar technologies to keep users logged in, remember onboarding progress, maintain security, operate the app, understand basic usage, and improve the user experience.

For example, Tagapag may temporarily store onboarding answers in browser local storage before account creation. After account creation, that onboarding draft may be cleared from the browser and stored in the user’s account record.

Browser settings may allow you to block or delete cookies or local storage, but doing so may prevent parts of Tagapag from working correctly.

10. Data Retention

We retain information for as long as reasonably necessary to provide Tagapag, maintain accounts, support mentorship programs, comply with legal and school obligations, resolve disputes, enforce our Terms of Use, maintain security, and preserve safety-related records.

We may retain certain information for longer when required by law, school policy, contractual obligation, backup systems, safety investigations, dispute resolution, or legitimate business needs. We may also de-identify or aggregate information so that it no longer identifies a particular user, and we may retain and use de-identified or aggregated information for lawful purposes.

11. Account Deletion and Access Requests

Users may contact us at support@tagapag.com or support@tagapag.com to request help accessing, updating, correcting, or deleting account information. We may need to verify your identity before completing a request.

If your account is connected to a school or organization, we may need to direct your request to that school or organization, or process the request according to that school’s instructions, student privacy rules, record retention requirements, or applicable law.

Parents or guardians may contact us about their student’s information where permitted by law and school policy. We may need to verify the requester’s identity and authority before disclosing, modifying, or deleting information.

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. These safeguards may include authentication, access controls, database security rules, encrypted connections, secure hosting, logging, and limited access to personal information.

No online service can guarantee complete security. You are responsible for keeping your login credentials confidential and notifying us promptly if you believe your account has been accessed without permission.

13. No Sale of Personal Information

We do not sell personal information. We do not sell student personal information. We do not use student personal information for targeted advertising.

14. De-Identified and Aggregated Information

We may create de-identified, anonymized, or aggregated information from data collected through Tagapag. We may use this information to understand app usage, improve matching, improve features, troubleshoot issues, create reports, or support school and program administration.

We will not attempt to re-identify information that we maintain as de-identified except as permitted by law, such as to test whether de-identification measures are effective.

15. Third-Party Links and Services

Tagapag may include links to third-party websites or services, or may rely on third-party providers to operate certain features. Third-party websites and services are governed by their own terms and privacy policies. We are not responsible for third-party services that we do not control.

16. International Users

Tagapag is currently intended for users located in THE UNITED STATES. If you access Tagapag from another country, you understand that your information may be processed and stored in countries where privacy laws may differ from those in your location.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we may update the effective date above and provide notice through Tagapag, email, or another reasonable method.

If we make material changes that require additional consent, we may ask users, parents or guardians, schools, or organizations to review and accept the updated Privacy Policy before continuing to use Tagapag.

18. Contact Us

Questions or requests about this Privacy Policy may be sent to: