MeronDitoBack to discoveryPrivacy Policy
Last updated: November 2, 2026
About this policy
MeronDito helps people find products at neighborhood stores. This notice describes information used by the current web application.
Information we use
Merchant accounts contain your name, email, password hash, and account role. Store listings contain the store name, barangay, address, phone number, chosen map coordinates, storefront photo, and product and stock details. We use these to authenticate merchants, manage listings, approve stores, and display nearby products. Hosting providers may process connection and diagnostic logs such as IP addresses and request times.
Google sign-in and Google account data
Google sign-in is planned but is not enabled in the current release. The current app does not obtain Google OAuth tokens or access Google account data. The intended sign-in permissions are openid, email, and profile, for identifying your account and signing you in. This does not authorize access to Gmail messages, Drive files, Calendar events, Contacts, or other Google account content. We will update this policy with the implemented data storage and retention details before enabling Google sign-in.
Location is your choice
Customer device location is requested only when you choose Use my location. Customer coordinates are held in browser memory for distance calculations, rather than saved to your account. You can browse by barangay without location access. A location chosen during store registration is saved as the store’s public location. Map tile requests can reveal the viewed area and your IP address to the map provider.
What becomes public
Once approved, your store name, address, phone, map location, storefront photo, product listings, prices, and stock confirmation times are public. Account email addresses and password hashes are not part of public listings. Pending listings and photos are available to their owner and administrators. Only upload photos you have permission to share; avoid faces, private documents, and sensitive details.
Browser storage and cookies
An essential sign-in cookie maintains your merchant session. Saved product IDs are kept in local storage on your device. The service worker caches the app shell for offline loading; it does not cache live API inventory. Clearing site data removes local favorites and cached files and may sign you out. The app does not currently include advertising trackers or analytics SDKs.
Service providers and security
Vercel serves the frontend and proxies API requests. The API and SQL Server database use MonsterASP hosting. OpenStreetMap supplies map tiles and directions. These providers receive information needed to deliver their services. The browser connection uses HTTPS, but the current connection from the frontend proxy to the API uses HTTP and is not encrypted end to end. Do not submit sensitive personal information.
Data sharing and advertising
Account information is used to operate accounts and store listings, rather than for advertising. The current application has no data-sale, targeted-advertising, or AI model-training integration. Public listing details are visible to visitors; private account records are handled by the operator and hosting services used to run the app. We may disclose information when required by law.
Retention and your choices
Account and store records remain in the database while they are used to operate the service. Replacing a storefront photo replaces its active database copy; hosting backups may retain earlier copies. Product deletion is available in the merchant dashboard. Automated account deletion and a fixed backup retention schedule are not yet implemented. You can remove saved products, clear browser storage, and revoke location permission in your browser settings.
Your privacy rights
Depending on applicable law, you may have rights to access or correct personal information, object to processing, request erasure or blocking, and obtain a copy of your information. You may also raise concerns with the Philippine National Privacy Commission. See the official rights guidance linked below.
Contact and updates
MeronDito is operated by John Philip Garcia. For access, correction, deletion, or other privacy requests, email noreply@merondito.shop. Include enough information to identify your account, but never send your password. We may need to verify your identity before acting on a request. Do not post personal information in public repository issues. Changes to data handling will be reflected on this page.
Contact John Philip Garcia: noreply@merondito.shop