Privacy Policy

Introduction

This Privacy Policy describes how the Armed Forces of the Philippines Pension and Gratuity Management Center (AFPPGMC) ("we," "us," "our," or "the Company") collects, uses, shares, and protects your personal information when you use our Heroes mobile application and related services (collectively, the "Service").

Company Information:

• Name: Armed Forces of the Philippines Pension and Gratuity Management Center (AFPPGMC)

• Address: Camp Aguinaldo, Quezon City, Metro Manila, Philippines

• Contact: isu.pgmc@gmail.com

• Data Protection Officer: MAJ Israel Soquerata

This policy complies with:

• Republic Act No. 10173 (Data Privacy Act of 2012)

• National Privacy Commission (NPC) Implementing Rules and Regulations

• Relevant international data protection standards

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Definitions

The following terms have specific meanings in this Privacy Policy:

Account: A unique account created for You to access our Service.

Affiliate: An entity that controls, is controlled by, or is under common control with the Company.

Application: Refers to Heroes, the mobile application provided by the Company.

Company: Refers to the Armed Forces of the Philippines Pension and Gratuity Management Center (AFPPGMC), located at Camp Aguinaldo, Quezon City, Metro Manila, Philippines.

Country: Refers to the Republic of the Philippines.

Device: Any device that can access the Service, such as a smartphone or tablet.

Personal Data: Information that relates to an identified or identifiable individual.

Service: Refers to the Application and related services.

Service Provider: Any third party that processes data on behalf of the Company.

Usage Data: Data collected automatically, such as IP address and device information.

You: The individual accessing or using the Service, or the legal entity on whose behalf such individual is accessing or using the Service.

2. Personal Data We Collect

We collect the following types of personal data to provide pension management services:

2.1 Identity Information

• AFP Serial Number

• First name and last name

• Date of birth

• Branch of Service (Army, Navy, Air Force, Philippine Constabulary)

• Date of Retirement

2.2 Contact Information

• Email address

• Phone number

• Mailing address (Street, City, Province, ZIP/Postal code)

2.3 Pension-Related Information

• Pensioner type (Principal or Beneficiary)

• Beneficiary type and relationship (if applicable)

• Principal pensioner information (for beneficiary applications)

• Officer status

2.4 Account Credentials

• Password (stored securely using encryption)

2.5 Usage Data

• IP address

• Device type and operating system

• App version and usage patterns

• Timestamps of actions performed

• Diagnostic and crash data

2.6 Media and Files

• Photos and documents (with your permission, for form submissions)

• Camera and microphone access (for document scanning and video verification)

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To provide, maintain, and improve our pension management services

• To verify your identity and eligibility for pension benefits

• To manage your account and provide customer support

• To process pension claims and applications

• To communicate with you via email, SMS, push notifications, or other means

• To provide important updates about your pension status

• To detect, prevent, and address technical issues and fraud

• To comply with legal obligations and government regulations

• To analyze usage patterns and improve the Service

• To fulfill contractual obligations related to pension administration

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Legal Obligation: Processing is required to comply with Philippine laws and regulations governing pension administration.

Consent: You have given explicit consent for specific processing activities (e.g., camera access for proof-of-life recording).

Legitimate Interest: Processing is necessary for our legitimate interests in providing secure, efficient services and preventing fraud.

5. Data Retention

We retain your personal data for different periods depending on the type of information:

Active Accounts: For the duration of your account plus 7 years after closure, as required by Philippine government record-keeping regulations.

Pension Records: Indefinitely, as required by law for government pension systems.

Usage Data: Up to 2 years for analytics and service improvement purposes.

Support Communications: Up to 5 years from the date of your last interaction.

6. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights:

Right to Access: You can request a copy of your personal data we hold.

Right to Rectification: You can request correction of inaccurate or incomplete data.

Right to Erasure: You can request deletion of your data, subject to legal retention requirements.

Right to Object: You can object to processing of your data for specific purposes.

Right to Data Portability: You can request your data in a structured, machine-readable format.

Right to Withdraw Consent: You can withdraw consent at any time where processing is based on consent.

Right to Lodge a Complaint: You can file a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact us at isu.pgmc@gmail.com.

7. Sharing Your Personal Data

We may share your personal data in the following circumstances:

Government Agencies: We may share data with Philippine government agencies as required for pension administration and legal compliance.

Service Providers: We may share data with trusted third-party service providers (e.g., cloud hosting, email services) who are contractually obligated to protect your data.

Legal Requirements: We may disclose data to comply with legal obligations, court orders, or government requests.

Protection of Rights: We may disclose data to protect the rights, property, and safety of the Company, users, and the public.

We do not sell your personal data to third parties.

8. Security of Your Personal Data

We implement robust security measures to protect your personal data:

• Industry-standard encryption for data in transit (TLS/SSL) and at rest (AES-256)

• Secure password hashing using bcrypt or similar algorithms

• Multi-factor authentication options

• Regular security audits and vulnerability assessments

• Access controls and role-based permissions for staff

• Secure servers hosted in compliance with Philippine data protection laws

• Regular backups with encrypted storage

• Employee training on data protection and privacy

However, no method of transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the National Privacy Commission within 72 hours of discovery

• Notify affected individuals without undue delay

• Provide information about the nature of the breach and measures taken

10. Children's Privacy

Our Service is primarily intended for adults aged 18 and older. However, we recognize that minor children may be eligible beneficiaries under Philippine pension laws (e.g., children or/and sibling of deceased pensioners).

Collection of Children's Data

When collecting personal data from or about children under 18 years of age, we:

• Require a parent or legal guardian to create and manage the account on behalf of the minor beneficiary

• Obtain verifiable parental consent before collecting, using, or disclosing personal information of children under 13 years old

• Collect only information necessary for pension administration and legal compliance

• Apply additional security measures to protect children's data

Parental Rights: Parents or legal guardians have the right to review, update, or delete their child's personal information at any time by contacting us at isu.pgmc@gmail.com.

If we discover that we have collected personal information from a child under 13 without proper parental consent (except as required by law), we will take steps to delete that information as soon as possible.

11. Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the Application

• Sending you an email notification (if you have provided an email address)

• Displaying a prominent notice in the Application

You are advised to review this Privacy Policy periodically for any changes. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have any questions, you may contact us:

•  Armed Forces of the Philippines Pension and Gratuity Management Center (AFPPGMC)
  Camp Aguinaldo, Quezon City, Metro Manila, Philippines

• Through the App:

Use the “Contact Us” option found in the About Us section of the app.

• Email:

isu.pgmc@gmail.com

ncrupdating@yahoo.com

You may also file a complaint with the National Privacy Commission of the Philippines:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto St., Pasay City, Metro Manila
Website: www.privacy.gov.ph

14. Acceptance

By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms.

Current Privacy Policy:  AFPPGMC Heroes Privacy Policy February 2026