MCM Touch is committed to protecting your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and applicable international standards.
1. Information We Collect
1.1 Information You Provide
- Account registration: Full name, email address, phone number, date of birth (optional), and password.
- Profile data: Currency preference and any edits made in the Profile section.
- Bookings: Preferred consultation dates, time slots, and any notes you provide to your practitioner.
- Orders: Product selections, cart contents, and order history.
- Health logs: Daily wellness entries including water intake, sleep hours, exercise, supplement compliance, mood score, and personal notes.
- Messages: Text content sent through the in-app secure messaging channel.
- Feedback: Subject, category, description, and any attached image submitted through the Feedback & Support form.
1.2 Information Collected Automatically
- Device information: Device model, operating system version, and app version.
- Firebase Cloud Messaging (FCM) token: A device token used to deliver push notifications to your device.
- Usage data: Feature interactions collected by Firebase Analytics (if enabled) for product improvement purposes.
1.3 Third-Party Sign-In
If you choose to sign in with Apple or Google, we receive only the basic profile information those services provide (name and email). We do not receive your Apple or Google password.
2. How We Use Your Information
- To create and manage your MCM Touch account.
- To facilitate consultation bookings and notify your wellness practitioner.
- To process product orders and maintain your order history.
- To store and display your daily health log entries and progress data.
- To deliver real-time messages between you and your assigned wellness staff.
- To send push notifications about booking confirmations, office updates, and health reminders (only with your permission).
- To respond to feedback and support requests.
- To improve and maintain the MCM Touch application.
- To comply with applicable laws and regulations of the Republic of the Philippines.
3. Legal Basis for Processing
Under RA 10173 (Data Privacy Act of 2012), we process your personal data based on:
- Consent: You provide explicit consent at account registration by accepting these terms.
- Contractual necessity: Processing required to provide the services you request (bookings, orders, messaging).
- Legitimate interest: Improving the application and ensuring security.
- Legal obligation: Compliance with Philippine law and regulatory requirements.
4. Data Storage & Security
- Your data is stored securely on Google Firebase (Firestore, Firebase Auth, Firebase Storage), with servers located in Google Cloud infrastructure. Google complies with ISO 27001, SOC 2, and other international security standards.
- Passwords are never stored in plaintext — they are managed exclusively by Firebase Authentication using industry-standard hashing.
- Health log entries are stored under your unique user ID and are accessible only to you and authorised MCM wellness staff.
- Messages are stored in a Firestore collection scoped to your user ID, accessible only to you and assigned staff.
- On the iOS app, your sign-in session token is stored securely in the iOS Keychain.
- We implement Firestore Security Rules to enforce that each user can only read and write their own data.
5. Data Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
- MCM Wellness Staff: Your booking notes, messages, and order details are visible to authorised practitioners to provide you with services.
- Service Providers: Google Firebase processes and stores data on our behalf under Google's data processing terms.
- Legal Requirements: If required by Philippine law, court order, or government authority.
- Business Transfer: In the unlikely event of a merger or acquisition, your data may be transferred. You will be notified beforehand.
6. Health Data
Important: MCM Touch is not a medical device. Information logged in the Health Tracker is for personal wellness monitoring only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional for medical concerns.
Health metric data you enter (water intake, sleep, supplements, mood) is stored exclusively under your account and is not shared with third parties, advertisers, or insurance providers.
7. Children's Privacy
MCM Touch is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@mcmtouch.com and we will delete it promptly.
8. Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have the right to:
- Be informed — know what personal data we collect and how it is used.
- Access — request a copy of your personal data we hold.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your personal data ("right to be forgotten"). You can trigger account deletion directly within the MCM Touch app under Profile → Delete Account, which permanently wipes your Firestore data and Firebase Auth record.
- Data portability — receive your data in a structured, commonly used format.
- Object — object to processing based on legitimate interest.
- Lodge a complaint — file a complaint with the National Privacy Commission (NPC) of the Philippines at www.privacy.gov.ph.
To exercise any of these rights, contact us at privacy@mcmtouch.com.
9. Push Notifications
The iOS app will request permission to send push notifications on your first booking. You may withdraw this permission at any time through your device's iOS Settings → Notifications → MCM Touch. Withdrawing permission does not affect your ability to use the app.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, where appropriate, notify you via the app. Continued use of MCM Touch after a policy update constitutes acceptance of the revised policy. If a material change affects how we handle your health data, we will request fresh consent.
Contact & Data Controller
See also: Terms of Service · End-User License Agreement