QAUBAN - Privacy Policy

QAUBAN stands for QR Automated Database Network. It is a QR logging system developed by Nexity Technology Corporation in collaboration with the LGU, the LGU Health Department, and Visayan Electric Company, Inc., as a tool for COVID-19 crisis management by providing a digital solution to the contact tracing efforts of the LGU and entered into a SOFTWARE AS A SERVICE PILOT PROGRAM AGREEMENT to properly enforce the DILG Memorandum Circular No. 2021 – 091, entitled “Implementation of a more aggressive PDITR + V (Prevent – Detect – Isolate – Treat – Reintegrate + Vaccinate) Strategy and Stronger Contact Tracing Initiatives to contain Highly Transmissible COVID – 19 Variants”.

1. What personal information do we collect from the applicant/representative of the applicant?

We collect the following personal information from the individual users:

• Full name
• Mobile Phone Number
• Home Address
• Birthdate
• Gender
• Occupation
• Status
• Employer
• VECO Account Number of the place in the LGU where the individual is actually occupying

We collect the following information from the users registering as an establishment:

• Business Mobile Number
• Business Permit Number
• Business Name
• Business Landline Number
• Business Address
• Business Admin Full Name
• Email (optional)
2. How do we collect the personal information?

We collect, use and process the personal information provided through electronic or automated means to proceed in this registration system.

3. Why do we need access to your camera?

This permission requires you to explicitly grant permission for QAUBAN to use your camera to scan QR codes when entering and exiting establishments and when activating your household members’ accounts or your referral accounts.

4. Why do we need access to your external storage?

This permission requires you to explicitly grant permission for QAUBAN to access data from your external storage such as images and/or videos to scan QR codes sent via any messaging app and saved in your external storage. Access to external storage will also let you use the offline feature of the QAUBAN app.

5. How do we keep your personal information secure?

Only authorized personnel of the LGU’s Emergency Operations Center are granted access to the personal information collected through the registration system. The collected personal information via the internet or other electronic methods are stored in a secured database, and only authorized personnel can access user profile information and logs. Data is sent with standard HTTP encryption from the mobile app to the server. Logs are put in place for auditing purposes. Docker images used in applications are scanned for vulnerabilities by Google and don’t have shell access. We use reasonable security safeguards to protect the information gathered from any loss, unauthorized access, use or disclosure.

6. What are the rights of the data subjects?

Under the Data Privacy Act of 2012, data subject refers to an individual whose personal information is collected and processed. We are duly bound to observe and respect your privacy rights, including your right to information, right to access, right to correct, right to remove, right to damages, and right to data portability.

7. We do not collect data about your GPS location.

QAUBAN uses QR technology to log data for people going in and out of establishments. We do not collect data about your GPS location. Neither do we collect data about your WiFi or mobile network.

8. Data logged in the establishments do not reveal personal identities

When an establishment scans your QR Code, the establishment only logs your QR ID. It does not reveal your identity or the other person's identity and can only be decrypted by Nexity Technology.

9. Data about you is stored on a secured cloud server.

The data about you is stored securely on Nexity’s cloud server. All the data logs collected using the QAUBAN app are shared only with the LGU for contact tracing purposes. The data logs stored on Nexity’s cloud server is automatically deleted after the 14-day requirement.

10. Other third-party services will not be able to track your identity

The QR ID that your device is using is impossible for third parties to identify or track you.

11. You may request for your identification data to be deleted from our servers.

You may request for your identification data to be deleted from our servers once contact tracing efforts cease.

When your identification data is deleted from our servers, all the data logs that was saved in the Nexity server will become meaningless because that data will no longer be associated with you. Without having your data means that when the LGU tags a COVID-positive person, they will not be able to identify you if you had close contact with the COVID-positive person.

12. Data that is shared with the LGU will be used for contact tracing.

Your privacy is important. In all situations, the QAUBAN data logs are stored securely on Nexity’s system and shared only with the LGU.

Any data shared with the LGU can only be used for contact tracing purposes.

13. QAUBAN will only log your data until contract tracing efforts cease.

QAUBAN is designed for contact tracing. Once contact tracing ceases, you will be prompted to disable the functionality of the QAUBAN App. All personal contact tracing data that was collected will be deleted as soon as practicable.

You can also disable Qauban's functionality at any time by deleting the App. If contact tracing is required for a future outbreak, you will be prompted to enable permissions, or you can reinstall the App.