Privacy Notice

What we collect, when, and why

GECAN practices progressive disclosure: at signup we collect only your email. Each further datum is requested at the moment it unlocks something for you, with the reason shown on the request itself — identity documents only when you move to transact, settlement preferences only at your first live deal.

Scanning a code collects nothing about you at all. GECAN records which code was scanned and when, so a business can tell which card or standee is working. There is no field for an IP address, a device fingerprint or a user agent — not left empty, but absent from the table, because a column that exists eventually gets filled.

J’Taime Local — what a phone gives us, and what we keep

J’Taime Local (jtaimelocal.com) is the consumer brand on this platform. A phone there has a device token, never an account, and the things below are the only things it adds.

1. Microphone (Listen & Find). The microphone opens only when you tap the listen button, for six seconds, with a visible indicator, and closes by itself. The clip is sent once to a music-recognition service to name the song and is not stored by us. What we keep is metadata: that you asked, which mode, which service answered, whether it matched, how long it took, and which J’Taime song it resolved to. A recognition is not a favourite; it never changes your Passport. This feature is switched off until a recognition service is contracted, and the button does not appear while it is off.
2. Games in a Barkada room. A room learns which kinds of games land — reactions (LOL, too tame, too much, never again), skips, completions, and whether the room went on — as counts against the game prompt and the game family, never against a person. Nothing from the room chat, your address, your religion, politics, ethnicity, sexual orientation or your health is used to choose a game. A prompt written for a room by an AI director is kept for that room only, with the scores that ranked it; no model is trained on private chats.
3. Missions and commitments. Saying you will do a mission (now, tonight, this week) is a fact on the room, and completing it privately keeps the words to yourself. No photo proof is asked for, nothing is posted publicly, and the reward is a Passport stamp — never money.
4. Body focus (Home Wellness). Marking where you would like more, gentler or no attention is a preference sent with your request, as zone names and one of three states, and shown to the therapist as words. It is not a health record and we do not infer any condition from it.

Your rights & our commitments

1. Consent ledger. Every consent you grant or withdraw is recorded immutably with the document version — you can always see what you agreed to and when.
2. Access & portability. Your data is keyed to your membership and exportable on request.
3. Erasure. Account deletion cascades through your profile, onboarding, and consents; transaction evidence that must be retained is pseudonymized.
4. Tiered protection. Sensitive data is isolated behind row-level security; identity documents are never visible to other members; deal-room identities stay masked until you accept disclosure terms.
5. No data sales. We do not sell member data. Integrations receive event notifications you can audit, never raw data access.
6. Jurisdictions. Built to GDPR / Singapore PDPA / Philippine DPA standards.