Last updated 21 August 2026
This explains what ErrandDrop collects, why, and what we do with it. It is written to be read rather than to cover us, so if something here is unclear, email support@erranddrop.com and we will fix the wording.
We never see or store your card number, GCash PIN, or bank login. Payments are handled entirely by PayMongo, a BSP-licensed processor. Your details go to them, not to us.
Other users see your display name, profile photo, store details, listings and reviews. They see your address only if you share it with them.
A seller sees your name, the order details, and any address or document you sent them for that order. They cannot see your email, your other orders, or documents you sent to a different seller.
We share with service providers only what they need: PayMongo for payments, Supabase for storage, and Google for maps and address lookup. They act on our instructions and cannot use your data for anything else.
We never sell your data, and we do not show advertising.
A government ID uploaded for seller verification is stored in a private bucket, readable only by you and our verification system. It is used to confirm your identity and nothing else.
A document uploaded because a rental seller asked for it is visible to that seller only, and only after you have paid. It is not shown on your profile and no other seller can reach it.
Location is used to sort listings by distance and to fill in an address when you share one. It is approximate, collected only while the app is open, and never shown to another person unless you deliberately share a place in a chat.
You can refuse it, or turn it off later in Profile, then App permissions. The app still works; results are simply sorted from a city rather than from you.
Under the Data Privacy Act of 2012 you may ask us to show you what we hold, correct anything wrong, delete your account and data, or send you a copy of your information. Email support@erranddrop.com and we will respond within fifteen days.
You can delete your account yourself in the app: Profile, then Request Account Deletion. Some records must be kept for the periods above even after deletion, because the law requires it.
Data is encrypted in transit and at rest. Access is restricted by row-level rules, so one account cannot read another's data even if something else fails. Payment credentials never touch our systems.
No system is perfectly secure. If a breach ever affects you, we will tell you and the National Privacy Commission within seventy-two hours.
ErrandDrop is for people aged 18 and over. We do not knowingly collect data from anyone younger, and will delete the account if we find one.
If this policy changes in a way that affects you, we will tell you in the app before it takes effect. The date at the top always reflects the current version.
You also have the right to complain to the National Privacy Commission at privacy.gov.ph.
ErrandDrop