Privacy Policy — GroundTruth

This is a plain-language, factually accurate description of what this specific tool does with data — written from the code itself, not boilerplate. It is not legal advice and has not been reviewed by a lawyer. Before deploying this app publicly or commercially, have qualified counsel draft a policy that meets the requirements of the jurisdictions and users you're actually serving — for FESMC specifically, that starts with the Philippine Data Privacy Act of 2012 (RA 10173), not just GDPR/CCPA as generic reference points.

What You Enter

Project name, geometry, soil class, building parameters, borehole/CPT values, and any coordinates or addresses you search for. This stays in the app's in-memory state on your device and is lost on refresh unless you explicitly save a snapshot (below). Avoid entering real personal names or confidential project details in the "Project name" field if you don't want them retained in a saved snapshot.

What Gets Saved, and How to Delete It

Clicking "Save Snapshot" (Basis of Design tab) requires signing in, and stores a record — project name, site, soil class, geometry, hazard values, and quantity totals — in this app's database, scoped to your account by row-level security so no other user can read, edit, or delete it. Use DELETE on any snapshot or CLEAR ALL to remove it — both delete the underlying database rows immediately and permanently, not a soft-delete or archive.

Account & Sign-In

Sign-in uses a passwordless magic link — enter your email, we send a one-time link, no password is ever stored. Only your email address and the snapshots you explicitly save are retained; Quick Estimate and every Advanced Mode tab work fully without signing in, except saved snapshots specifically.

Third-Party Services This App Calls Directly From Your Browser

Unlike the earlier prototype version of this tool, this deployment does have a backend: Supabase (database and authentication) and Resend (transactional email). Payment processing, when you subscribe to Pro Mode, is handled by Stripe or PayMongo depending on your region — this app never sees or stores your card/GCash/Maya details directly.

Feature	Service	What's sent	When
Fetch Live Hazard Data	USGS earthquake.usgs.gov	Latitude, longitude, site class, risk category	Only when you click the button
Address search (Locate)	OpenStreetMap Nominatim	The text you type in the search box	Only when you click Locate
Realistic map tiles	OpenStreetMap tile server	Latitude/longitude/zoom of the map area you’re viewing	Whenever the realistic map view is open and you pan/zoom
Typography	Google Fonts (fonts.googleapis.com / fonts.gstatic.com)	Standard font-file request (IP address, as with any web request)	On page load
Sign-in & saved snapshots	Supabase	Your email address, and the project data in any snapshot you save	When you sign in or save/delete a snapshot
Magic-link & confirmation emails	Resend	Your email address, plus the email content itself	When you sign in, or after a successful subscription
Pro Mode subscription	PayMongo (primary — PHP) or Stripe (international cards, USD)	Your email address and payment details, handled entirely by the payment processor — not this app	When you subscribe

Location/search fields (USGS, Nominatim, map tiles) never include your account email or snapshot data. Account-related fields (Supabase, Resend, payment processors) never include your project geometry or hazard inputs unless you explicitly saved them as part of a snapshot.

What This App Does Not Do

This app sets one essential, functional cookie for sign-in session management (via Supabase Auth) — nothing else. No analytics or tracking scripts are included, no advertising cookies, no third-party trackers. Nothing is sold, shared with advertisers, or used to train a model. Data retention is limited to your account email, any snapshots you explicitly save, and subscription status if you're a Pro Mode subscriber — nothing beyond what's described in this policy.

Children's Privacy

This is a professional/educational engineering tool, not directed at children, and doesn't knowingly collect data from anyone under the age of consent in their jurisdiction.

Changes to This Notice

If you deploy this app under your own organization, update this tab to reflect your actual data practices, hosting, and any backend you add — this notice is only accurate for the app as built here, with no server of its own.

Contact — Who to Reach for App-Related Inquiries

This app is registered to a named organization based in the Philippines. That means the Philippine Data Privacy Act (RA 10173), regulated by the National Privacy Commission (NPC), is the primary applicable law for this deployment — not just GDPR/CCPA as generic reference points. RA 10173 requires personal information controllers of a certain scale to designate a Data Protection Officer; confirm with counsel whether FESMC's processing activities trigger that requirement, and register with the NPC if so.

Organization / data controller	F.E. Santiago Management Consultancy (FESMC)
Contact email	privacy@fesmc.com.ph
Mailing address	Maxcor Lane, Scout Fuentebella Extension, Sacred Heart, Diliman, Quezon City, Metro Manila, Philippines, 1103
Data Protection Officer	Not separately designated here — confirm with counsel whether RA 10173 requires one for FESMC's scale/processing activities, and route DPO-specific inquiries to the contact email above in the meantime.
Response time commitment	Within 30 days
Scope of inquiries handled here	Data/privacy requests, general app support, bug reports, licensing questions

This is a factual record of the details provided, not a certification that FESMC's privacy program meets RA 10173 in full — have counsel review the complete policy, registration status, and any required NPC filings before relying on this for a live deployment.

Engineering Disclaimer

PROF-FE is a screening-level, educational, and pre-analysis tool. "Transparent" means every formula is shown — it does not mean full ACI 318/ASCE 7 code compliance. This app performs one real ACI 318 Ch.22 two-way shear check and a Richart-formula SSI spring estimate; it does not perform flexural design, one-way shear, development length, detailing, nonlinear dynamic analysis, or liquefaction-degraded stiffness modeling. R/Ω₀/Cd values are representative — confirm the exact system category against the governing code table. This tool cannot be stamped or sealed by a professional engineer as-is, and no version of it ever will be: a PE seal certifies the licensee's own judgment, real subsurface investigation, and verified analysis software. Before any real structure is built anywhere on the Pacific Ring of Fire, it must be designed from actual borehole/CPT data and a site-specific hazard and ground-motion study by a licensed geotechnical and structural engineer, checked against the full governing code, and independently reviewed before permitting or construction.