Privacy Policy

1. Introduction

Welcome to GuroHero ("we," "us," "our," or "Service"). GuroHero is an independently developed and operated project by a freelance developer based in the Philippines. It is not owned or operated by a registered company or corporation. References to "we," "us," or "our" in this document refer to the individual developer operating GuroHero.

We are committed to protecting your privacy and ensuring you understand our practices regarding the collection and use of your information in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered lesson planning platform.

2. Information We Collect

A. Account Information

When you create an account using Google Sign-In, we collect:

• Full Name (from your Google account)
• Email Address
• Profile Picture (optional, from Google)
• User ID (from Firebase Authentication)

B. Usage Data

We collect information about how you use our Service:

• Lesson plans you create and generate
• Educational preferences (subject, grade level, curriculum type)
• Session timestamps and duration
• Features used and functionality accessed

C. Generated Content

All lesson plans, assessments, and educational materials you generate through our AI system may be processed and stored. This content is yours to use, modify, and download as needed.

D. Technical Information

We may collect technical information including device type, browser type, operating system, and IP address to improve service performance and security.

3. How We Use Your Information

Under the Philippine DPA 2012, we process your data based on the following lawful criteria (Section 12):

• Consent: You consent to data processing when you sign in and use the Service
• Service Delivery: To create and maintain your account, process your requests, and provide lesson planning functionality
• AI Generation: To process your prompts and generate educational content via Google Gemini AI
• Service Improvement: To analyze usage patterns and enhance our features
• Communication: To send service-related notifications and updates
• Security: To detect, prevent, and address fraud, abuse, and security issues
• Legal Compliance: To comply with applicable Philippine laws and regulations

4. Third-Party Services & AI Disclosure

A. Google Firebase

We use Google Firebase for authentication, database storage, and hosting. Your data is stored in Firebase databases located in secure Google data centers. Google's privacy practices are governed by their Privacy Policy.

B. Google Gemini AI

When you request AI-generated content, the following data is sent to Google Gemini:

• Your lesson plan specifications, grade level, subject, and curriculum type
• Custom requirements and instructions you provide
• Content of sections being regenerated or customized

Google may retain API request data according to their terms (typically up to 30 days for API logs). We recommend reviewing Google's privacy documentation for details.

C. Google Analytics

We use Google Analytics to understand how users interact with our Service. Analytics data is collected in aggregate form and may include page views, session duration, and general usage patterns.

Google Analytics is only activated after you accept our Cookie & Storage Notice. If you reject non-essential cookies, Analytics will not be loaded and no tracking data will be collected.

D. Cookies & Local Storage

Our Service uses the following browser storage technologies:

• Firebase Authentication Cookies: Essential cookies set by Google Firebase to maintain your login session. These are required for the Service to function and cannot be disabled.
• Google Analytics Cookies: Non-essential cookies used to collect aggregate usage data (page views, session duration). Only activated with your consent.
• localStorage — Cookie Consent: Stores your cookie consent preference so we don't ask again on every visit.
• localStorage — Uploaded File Text: Temporarily stores uploaded file content for lesson plan generation. Cleared when you close the tab.

You can clear all localStorage data at any time through your browser settings (Settings → Privacy → Clear Browsing Data → Cookies and Site Data).

E. Google Sign-In

We use Google Sign-In for authentication. When you sign in with Google, we receive your email and display name. You control what information Google shares through your Google account settings.

5. Data Security

In compliance with Section 20 of the Philippine DPA 2012, we implement reasonable and appropriate security measures:

• Encrypted transmission using HTTPS/SSL
• Secure Firebase database with authentication rules
• Regular security monitoring and updates
• Restricted access to sensitive data
• AI safety filters on generated content (harassment, hate speech, explicit content, dangerous content)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. AI-Generated Content: Important Warnings

7. Data Retention

We retain your personal information for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. After account deletion, we will remove your personal information within 30 days.

8. Your Privacy Rights (Philippine DPA 2012)

Under the Philippine Data Privacy Act of 2012, you have the following rights:

• Right to Be Informed (Sec. 16a): You have the right to be informed about how your data is collected, processed, and stored
• Right to Access (Sec. 16c): Request a copy of the personal data we hold about you
• Right to Correction (Sec. 16d): Request corrections to inaccurate or incomplete information
• Right to Erasure (Sec. 16e): Request deletion of your personal data when it is no longer necessary
• Right to Data Portability (Sec. 18): Request your data in a structured, commonly used format
• Right to Object (Sec. 16c): Object to the processing of your personal data
• Right to File a Complaint: You may file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph

To exercise any of these rights, contact us at info@gurohero.online. We will respond within 30 days.

9. Children's Privacy

Our Service is designed for educators, not students. We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it promptly. Contact us immediately if you believe we have information from a child.

10. International Data Transfers

Your information may be stored and processed in countries outside the Philippines, including the United States (Google's data centers). By using our Service, you consent to the transfer of your information to these countries, which may have different data protection laws.

11. Data Breach Notification

In compliance with Sections 20(f) and 36 of the Philippine DPA 2012, in the event of a personal data breach, GuroHero will:

• Notify the National Privacy Commission (NPC) within 72 hours of discovery
• Notify affected users within 72 hours if the breach involves sensitive personal information
• Provide details of the breach, steps taken, and recommended protective measures

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date. Your continued use of the Service after changes means you accept the updated policy.

13. Contact Us