Privacy policy

Who is responsible

During development, TigerTrail is run by its student developers at the University of Santo Tomas. When the app is handed over, the UST Campus Safety and Security Office and the University become responsible for this data.

Questions and requests go to tigertrail.ust@gmail.com.

What we collect

• Your account: your name and email address, when you sign in with Google or with a code sent to your email. Signing in is optional. Maps, routes and alerts work without an account.
• Emergency alerts: the details listed under "Emergency alerts" below, only when you raise one.
• Assistant questions: the text you type to the assistant is sent to answer it. We do not store the question. We keep a count per phone so the assistant is not overused.

What stays on your phone

• Your position. The app works it out on your phone from nearby Wi-Fi signals and the phone's motion sensors. It is not sent anywhere in normal use, and no trail of where you have been is kept.
• Wi-Fi scans. Android asks for location permission because Wi-Fi scanning needs it. Scans are used on your phone to find your position.
• Maps and routes. They are downloaded once and work offline.
• Your sign-in. A session key stays on your phone for up to 30 days so you stay signed in.

Emergency alerts

When you hold the emergency button, TigerTrail sends an alert so UST responders can find you and send help. The alert sends:

• Your name: your account name, or the name you typed if you are not signed in
• How urgent it is (the level you chose)
• Your location on the building map and your floor, at the moment you send it
• The time you raised it, and a random code for this phone so we can show you updates
• If you are signed in, the alert is linked to your account

Who can see it

UST TigerTrail staff: administrators and the responder assigned to your floor, in the TigerTrail admin console.

No connection

If you have no signal, the alert waits on your phone and sends once you are back online, marked with the time you first raised it. It is removed from your phone after it is sent.

How long it is kept

• Alerts are deleted after 30 days. After that we keep only an anonymous record (time, floor, urgency and how fast it was handled) to measure response times. It does not include your name or position.
• Your account is kept until you ask us to delete it.
• Sign-in codes expire after 10 minutes and are stored only as a hash, never as the code itself.

Services we use

• Amazon Web Services (Singapore region) runs the TigerTrail server and database and sends sign-in code emails.
• Google handles Google sign-in and answers assistant questions (Gemini). We do not send your name or email with a question.
• Mapbox draws the map. Its map software may collect anonymous usage data, as described in the Mapbox privacy policy.

What we do not do

No ads. We never sell your data or share it for marketing.

How we protect it

Data travels over encrypted connections. The database sits on a private network, and staff can see alerts only through the admin console, by role.

Your rights

Under the Data Privacy Act of 2012, you can ask to be informed, to see your data, to correct it, to object, and to have it deleted. You can also file a complaint with the National Privacy Commission.

To use these rights, email tigertrail.ust@gmail.com.

Important

TigerTrail is an aid, not a replacement for UST's official emergency and evacuation procedures. Alerts are monitored daily from 7:00 am to 8:00 pm (Philippine time); outside these hours an alert waits on your phone and sends at 7:00 am. In an emergency, follow official instructions and contact UST Security directly.

Changes

When this policy changes, the date at the top changes too.