Privacy Policy
Last updated: 6 August 2026
1. Who we are
moyeu (“moyeu”, “we”, “us”) is a point-of-sale and inventory service for Philippine retailers, operated by moyeu, Philippines. You can reach us at [email protected] for anything in this policy.
2. Two kinds of data, two different roles
This distinction matters, so we state it plainly.
Your account data. Information about you as our subscriber — name, email, mobile number, business name and address, billing details, and login credentials. For this data we are the personal information controller.
Your business data. Everything you record while using moyeu — sales transactions, payment methods, inventory and stock movements, suppliers, staff user accounts, and any customer records you choose to enter. This data is yours. We hold and process it on your instructions, as a personal information processor. We do not decide what you collect from your customers, and we do not use your business data for our own purposes.
If you record your customers’ personal information in moyeu — for example a name and mobile number on a delivery or a job order — you are the personal information controller for that data. You are responsible for having a lawful basis to collect it and for telling those customers how it is used.
3. What we collect automatically
- Basic technical logs — IP address, browser and device type, timestamps, and pages or endpoints accessed — kept for security and troubleshooting.
- Activity records inside your account — who changed what, and when — so you have an audit trail of your own staff’s actions.
We do not use advertising trackers, and we do not sell or rent any data to anyone, ever.
4. Why we process it
- To provide the service — running your register, syncing sales, and generating your reports.
- To bill you and keep records of payment.
- To support you when you ask for help.
- To keep the service secure, and to detect and investigate abuse.
- To comply with Philippine law when we are legally required to.
5. Where your data lives
Your data is stored on Amazon Web Services infrastructure in the Singapore (ap-southeast-1) region. This is a transfer outside the Philippines. AWS is contractually bound to security standards appropriate to the data, and we remain accountable to you for it under the Data Privacy Act regardless of where it is physically stored.
6. How long we keep it
- While your account is active: we keep your business data for as long as you keep your subscription, so your history and reports stay intact.
- After you cancel: we retain your data for 30 days so you can reactivate or export it, after which it is permanently deleted from our active systems.
- Backups: we take backups on a daily basis and keep them in encrypted storage as protection against data loss. Deleted data may persist in a backup after it has been removed from our active systems. We do not use backups to restore data you have asked us to delete, and we will confirm deletion on request.
- Billing records are kept longer where tax and accounting law requires it.
7. Who else sees it
Only the service providers we need to run moyeu — our cloud host (AWS), our payment processor, and our email delivery provider. Each receives only what it needs to do its job and is bound to protect it.
We will disclose data to a government authority only where we are legally compelled to, and we will tell you unless we are prohibited from doing so.
8. Your rights
Under the Data Privacy Act you have the right to be informed, to access your data, to correct anything inaccurate, to object to processing, to have data erased or blocked, to data portability, and to be indemnified for damages from unlawful processing. You may also lodge a complaint with the National Privacy Commission.
To exercise any of these, email [email protected]. We will respond within a reasonable period and will not charge you for a reasonable request.
You can export your own business data at any time from within the app — see our Terms of Service.
9. Security
Traffic between your device and moyeu is encrypted in transit. Passwords are stored hashed, never in plain text. Access to production systems is restricted to personnel who need it.
No system is perfectly secure, but if a breach occurs that puts your rights at serious risk, we will notify you and the National Privacy Commission as the law requires.
10. Cookies
We use cookies strictly to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies.
11. Children
moyeu is a business tool and is not directed at children. We do not knowingly collect data from anyone under 18.
12. Changes
If we change this policy we will update the date at the top, and we will tell you by email before any change that materially affects your rights takes effect.
13. Contact
Questions, requests, or complaints: [email protected].
Questions about this document? Email [email protected].