01Who we are
mamitikay (“mamitikay”, “we”, “us”) operates an online marketplace where roadside photographers publish motorcycle and rider photographs, and riders search for photographs of themselves and purchase the high-resolution copies. This policy explains what personal information we handle when you use the service, why we handle it, and what control you have over it.
The service supports two kinds of accounts — rider accounts (people who search for and buy photos) and photographer accounts (people who upload and sell photos). Some parts of this policy apply to only one of them, and we say so where that is the case.
By creating an account or using the service you agree to this policy. If you do not agree with it, please do not create an account. Your use of the service is also governed by our Terms of Service.
02Information we collect
Information you give us when you register
For a rider account we collect your email address, your full name, your mobile number, and a password (which we store only as a salted hash, never in readable form). You may also add a profile picture.
For a photographer account we collect the same information plus your date of birth, your address, and — if you choose to provide them — a short biography, a portfolio link, and links to your social media profiles. Photographer profiles are public, so anything you put in your biography, portfolio link, or social links is visible to other people using the service.
Information in the photographs
Photographers upload photographs and describe them so riders can find themselves. Those descriptions include the motorcycle’s brand, model, and colour, optionally the plate number, details of the rider’s visible gear (helmet colour, jacket or top colour, gloves, top box, auxiliary lights, whether there was a back-rider), and the location and time the photograph was taken. A photograph of a person taken in a public place, together with these details, can identify that person, so we treat this material as personal information even when the subject does not have an account with us.
Messages and purchase records
When you message a photographer (or, as a photographer, a rider) we store the content of those messages, who sent them, when they were sent and read, and any file you attach — commonly a screenshot used as proof of payment. When a purchase is arranged we store the amount, the payment method you selected (cash, GCash, Maya, bank transfer, or other), the bank name where relevant, the proof-of-payment file, and the status and timestamps of the transaction.
We are not a payment processor. Riders pay photographers directly through the method the two of you agree on. We never receive, hold, or process your card details, bank credentials, or e-wallet PIN, and we never ask for them. Please do not send those details through our chat.
Information collected automatically
We store a session cookie so that you stay signed in, and we count how many times a photograph has been viewed and how many enquiries it has received. Our hosting and storage providers keep standard server logs, which typically include IP addresses and request timestamps, for security and reliability purposes.
03Google Sign-In and Google user data
You can create an account or sign in using your Google account. If you do, Google asks for your permission before sharing anything with us. We request only the basic profile scopes — openid, email, and profile.
What we receive from Google
- Your email address — used as the unique identifier for your mamitikay account, and to contact you about the service.
- Your name — stored as the full name on your account, and shown to people you transact with.
- Your profile picture URL — stored as your account avatar.
- Your Google account identifier — used only to complete the sign-in exchange.
What we do not receive
We do not request or receive access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar, Google Photos, or any other Google service or data. Signing in with Google does not give us your Google password — authentication happens entirely on Google’s side.
Limited use
mamitikay’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Sign-In is used only to create and operate your mamitikay account and to provide the features described in this policy. We do not sell it, we do not transfer it to third parties except as described in section 5, we do not use it for advertising, and we do not allow humans to read it except with your explicit permission, where required for security purposes or to comply with applicable law, or where the data is aggregated and anonymised.
Revoking access
You can disconnect mamitikay from your Google account at any time from your Google account permissions page. Doing so stops future Google sign-ins but does not by itself delete your mamitikay account — see section 8 for that.
04How we use your information
We use the information described above to:
- create your account, authenticate you, and keep you signed in;
- make photographs searchable, so a rider can find a photograph of themselves by plate number, motorcycle, gear, location, or date;
- show public photographer profiles, ratings, and sales counts;
- deliver messages between riders and photographers and carry attachments between them;
- record purchases, release the full-resolution file to the buyer, and give photographers the earnings and sales figures for their own work;
- send you service-related email, such as account, transaction, and security notices;
- keep the service secure — investigating fraud, abuse, unauthorised access, and breaches of our Terms of Service; and
- comply with legal obligations and respond to lawful requests.
We do not sell your personal information, and we do not use it to serve you third-party advertising or to build advertising profiles.
06How we protect photographs
Every uploaded photograph is stored in three versions: the original full-resolution file, a watermarked and downsized preview, and a small thumbnail. Until a photograph has been purchased, our servers only ever send the preview and the thumbnail to browsers. The address of the full-resolution original is released solely to the rider who purchased it and to the photographer who uploaded it.
The service also discourages casual copying in the browser. That is a deterrent only — it is not what protects the original file. The protection that matters is that the full-resolution address is withheld on the server.
07Retention and security
We keep your account information for as long as your account exists. Messages, photographs, and transaction records are kept while they remain relevant to the marketplace — transaction records in particular may be retained after an account closes where we need them for accounting, dispute resolution, fraud prevention, or to meet a legal obligation.
Passwords are stored only as salted bcrypt hashes. Traffic to the service is encrypted in transit with HTTPS. Access to production systems is limited to the people who need it to operate the service. No online service can promise perfect security, so we cannot guarantee absolute protection; if we become aware of a breach affecting your personal information, we will notify you and the National Privacy Commission as required by the Data Privacy Act.
08Your rights and choices
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) you have the right to be informed about, to access, to correct, and to object to the processing of your personal information, the right to erasure or blocking in the circumstances the Act provides for, the right to data portability, and the right to be indemnified for damage caused by inaccurate or unlawfully obtained data.
To exercise any of these:
- Correct your details — edit them in your account settings, or write to us if a field is not editable there.
- Get a copy of your data — email us at support@mamitikay.com and we will provide it in a portable format.
- Delete your account — email us at support@mamitikay.com from the address on the account. We will delete your account and associated personal information, except records we are required to keep for the reasons given above.
- Ask for a photograph of you to be removed — if you appear in a photograph on mamitikay and you want it taken down, email us at support@mamitikay.com with enough detail to identify it (for example the plate number, or a link to the listing). You do not need a mamitikay account to make this request, and there is no charge for it.
We answer these requests within a reasonable period, and in any case within the timeframes the Act requires. If you are not satisfied with our response, you may complain to the National Privacy Commission.
09Children
mamitikay is not intended for children. You must be at least 18 years old to hold a photographer account, and at least 13 years old to hold a rider account — and if you are under 18, only with the consent of a parent or guardian. If we learn that we hold personal information from a child contrary to this section, we will delete it. If you believe a child has given us information, please write to support@mamitikay.com.
10Changes to this policy
We may update this policy as the service changes. When we do, we will revise the “last updated” date at the top of this page, and for changes that materially affect how we handle your personal information we will give notice in the app or by email before they take effect. Continuing to use the service after a change takes effect means you accept the revised policy.
11Contact us
For any question about this policy, about how your information is handled, or to exercise a right described in section 8, contact us at:
mamitikay
Email: support@mamitikay.com
You may also contact the National Privacy Commission of the Philippines at privacy.gov.ph.