toll.ph

This policy explains how Toll PH (“we”) handles information when you use toll.ph or the Toll PH mobile apps (together, the “Services”). We do not display ads or sell your personal information.

Information we handle

• On-device data. Saved trips, journeys, vehicle-class preferences, and dismissed notices are stored locally in your browser or mobile device. They are not synced to your Toll PH account or stored in our database. You can remove them by clearing the feature’s data, browser storage, or app data.
• Account data. If you create an account, we process your name, email address, verification status, sign-in method, account and session identifiers, and account dates. For email sign-in, we store a password hash—not your readable password. If you use Google sign-in, Google provides the basic profile and account information you approve.
• Subscriptions and donations. For Pro purchases, we receive customer, product, transaction, and subscription status information from our payment provider. We do not receive or store your full payment-card number. A donation provider may send us basic transaction details such as your display name, amount, and reference number.
• Usage and technical data. We and our analytics and hosting providers process page views, app or browser and device information, referring pages, approximate location derived from IP address, and interaction events. Calculation events may include the selected origin, destination, and vehicle class; save and journey-management events do not include the contents of your locally saved trips or journey names.
• Communications. If you contact support or request an account email, we process your email address, message, and related delivery information.

How we use information

We use information to provide toll calculations and Pro features; create and secure accounts; process subscriptions and donations; send verification, password-reset, and service messages; understand and improve the Services; prevent abuse; respond to support requests; and comply with legal obligations. We process it as needed to provide the Services you request, for our legitimate operational and security interests, with consent where required, and to meet legal obligations.

Cookies and local storage

The web app uses cookies or similar storage for sign-in, security, local preferences, saved features, and analytics. You can control these through your browser or device, but blocking essential storage may prevent sign-in or saved features from working.

Service providers

We disclose information only as needed to operate the Services, including to:

• Vercel for hosting and privacy-focused web analytics;
• Prisma for database hosting;
• PostHog for product analytics;
• Google when you choose Google sign-in;
• Polar and its payment partner Stripe for checkout, payments, taxes, fraud prevention, and subscription management; and
• Resend for verification and password-reset emails.

If you use an external donation option, its own policy also applies, including Buy Me a Coffee or GCash. These providers may process information outside the Philippines under their own policies.

Retention and security

We retain account information while your account is active and afterward only as reasonably needed for the purposes above, legal requirements, dispute resolution, and security. Payment providers may retain transaction records as required by financial and tax laws. We use reasonable safeguards, but no online service can guarantee absolute security.

Your choices and rights

Depending on applicable law, you may ask to access, correct, object to, erase or block, or receive a portable copy of your personal information, and may file a complaint with the National Privacy Commission. To make a request, email contact@toll.ph. We may need to verify your identity and may retain information where legally permitted or required.

Changes

We may update this policy as the Services change. The revised policy applies when posted, and we will update the date above.