TAIO Labs
← TaxPh

Privacy policy

TaxPh

TaxPh is a Philippine tax and pay calculator for iPhone, iPad and Android, made by TAIO Labs, the studio of John Nicholai Villegas (“we”). It is built so that your financial information stays with you. This policy explains what the app does with data, in plain terms.

Last updated

The short version

  • No account, no sign-in.
  • No analytics, no advertising, no tracking.
  • What you type is calculated on your device and never sent to us.
  • The one thing processed off your device is your purchase history, so the app knows whether you bought Pro or Business.

Information you enter

Salaries, income, deductions and other figures you type into a calculator are processed only on your device.

If you save a calculation, or, on the Business plan, add employees (names and salaries) to payroll, that information is stored on your device only. It is encrypted with AES-256-GCM, and the key is kept in the device's secure keystore (the iOS Keychain or the Android Keystore). We never receive it, and it is not uploaded to any server.

You stay in control of it:

Export
Settings → Your data → Export my data gives you a copy as a JSON file.
Delete
Settings → Your data → Delete all my data erases it. Uninstalling the app also removes it.

Files you choose to share, such as PDF payslips, calculation PDFs or calendar files, go only where you send them, using your device's share sheet.

If your device backs up app data to iCloud or to your Google account, that backup may include the saved file. It stays encrypted, and it goes to Apple or Google under your own account, never to us.

Purchases

Payments are handled by the Apple App Store or Google Play; we never see your payment details. To confirm what you have bought and restore purchases, the app uses RevenueCat, a subscription service. RevenueCat receives:

  • a random, anonymous app user ID created by the app;
  • your purchase and subscription history for TaxPh from Apple or Google; and
  • basic technical details its service needs, such as your device type, operating system and app version, store country and IP address.

RevenueCat does not receive your name, email address, or anything you enter in the app. We use this information only to unlock the features you paid for. RevenueCat processes it on our behalf as a service provider, is bound by its terms to protect it, and is based in the United States, so the information is processed there. It is sent over an encrypted (HTTPS) connection. See RevenueCat's privacy policy.

Apple and Google handle the payment itself under their own policies: Apple's privacy policy and Google's privacy policy.

Tax-rate updates

From time to time the app downloads signed tax-rate files from a public repository hosted on GitLab (gitlab.com). These requests contain no personal information. As with any website, GitLab may log technical details such as your IP address; see GitLab's privacy statement.

Links to official sources (for example BIR, SSS, PhilHealth, Pag-IBIG and DOLE pages) open in your browser and are covered by those websites' own policies.

On iPhone and iPad, and on Android

The app works the same way on both. The differences are only where things live:

iPhone and iPad
Purchases go through the Apple App Store. The encryption key is kept in the iOS Keychain. To remove your data, use Delete all my data in the app, or delete the app from your device.
Android
Purchases go through Google Play. The encryption key is kept in the Android Keystore. To remove your data, use Delete all my data in the app, uninstall it, or clear its storage in Android's Settings → Apps → TaxPh → Storage.

What we do not do

  • We do not sell, rent or share personal information.
  • We do not use advertising or analytics SDKs.
  • We do not track you across apps or websites.

How long data is kept

  • What you enter and save stays on your device until you delete it or remove the app. We hold no copy.
  • Purchase records are kept by RevenueCat for as long as they are needed to confirm and restore your purchases, and by Apple or Google under their own policies. We can ask RevenueCat to delete your record at any time; see Your rights below.

Children

TaxPh is a general-audience finance tool. It is not directed at children under 13, and we do not knowingly collect information from children.

Your rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and similar laws, you have the right to be informed about, access, correct and erase your personal data, and to lodge a complaint with the National Privacy Commission. Because we keep no personal data about you on our servers, you can exercise these rights directly in the app with the export and delete options above. For purchase records held by RevenueCat, contact us and we will help you with a request, including deleting the record. Because the record is anonymous, we may ask for your App Store or Google Play order ID so we can find it. Deleting it does not cancel a subscription; manage that in your App Store or Google Play account.

Changes to this policy

If we change this policy, we will update the date above and publish the new version at this address. Significant changes will also be noted in the app's release notes.

Contact

Questions or requests: nicholaivillegas@gmail.com, or use the contact form.