Privacy Notice

When you buy online: the name, email address and mobile number you enter at checkout, which reviewer you bought, the amount, the payment method (for example GCash or card) and the payment reference. Your card or wallet login goes only to our payment processor; we never see it.

When you pay us directly for a license key (GCash, Maya, bank or cash): the name and email or mobile number you give us, the amount and the payment reference, recorded with the key we issue you. When you unlock with a key, the name and email you type into the unlock form.

When you challenge a question: your name, email, the answer you chose, your written solution and any source you cite, plus which question it was. We use them only to check the question and reply to you.

A device code: a random code your browser makes the first time you unlock and keeps in its own storage. We use it only to count how many devices use one purchase, for the device limit. It is not calculated from your device, your name, or your location, and clearing your browser data deletes it.

We do not collect: passwords (there are no accounts), payment card numbers, GCash or Maya credentials, birthdays, addresses, or school records.

Your XP, levels, badges, daily streaks, quiz history, and weak-topic statistics are stored only in your own browser — they are never uploaded to us. If you clear your browser data, that progress is gone and we cannot restore it. Your unlocked access can always be restored using your emailed access link.

• Email — to send your access link, receipt, and support replies.
• Name, mobile number and payment details — to find your purchase when you need help, to handle refunds, and to keep the sales records our taxes require.
• Name (license-key unlocks) — to watermark your copy, which deters sharing.
• Device code — to enforce the device limit fairly.
• Payment reference — to verify purchases and process refunds. A short code made from it (or from your license key) appears in the quiz watermark, so a leaked screenshot can be traced to the purchase it came from.
• Question challenges — to review the question you disputed, correct it if you are right, and send you our answer. Your consent, given on the challenge form, is the basis for this.

Our legal basis is the performance of our contract with you (delivering what you paid for) and our legitimate interest in preventing piracy of paid content.

We do not sell your data — ever. We share only what is necessary with the service providers who run the platform:

• PayMongo — processes your payment. They receive your payment details directly; we never see your card or wallet credentials.
• Our hosting and email providers — deliver the website and send your access link.
• Anthropic (Claude) — an AI service that helps us re-check a question you challenge and draft our reply. It receives the question and the answer and working you sent, never your name or email. A person on our team reviews and approves every reply before it reaches you.

Some of these providers process data on servers outside the Philippines. We use only providers bound to keep it confidential and secure, and we remain responsible for your data under the Data Privacy Act.

Purchase records (name, email, mobile number, amount, payment method and reference) are kept for as long as needed to honour access and to meet tax and accounting requirements. Question challenges are kept for 12 months after we answer them. Device codes are kept while your access is active. Support messages are kept for up to two years.

The site is served over an encrypted (HTTPS) connection. Because there are no accounts, we hold no passwords that could be stolen. Because PayMongo handles payment directly, we never receive or store your card, GCash, or Maya credentials. Your access link is cryptographically signed, so it cannot be forged or guessed, and your study progress never leaves your own browser. Purchase records are reachable only by the owner of Magrebyu.

No system is perfectly secure. If a personal data breach occurs that is likely to put you at real risk — for example, unauthorised access to buyer email addresses — we will notify the National Privacy Commission and every affected person within 72 hours of becoming aware of it, as RA 10173 requires. We will tell you what happened, what information was involved, what we are doing about it, and what you can do to protect yourself.

Many of our users are senior high school students. If you are under 18, please purchase only with the permission and involvement of a parent or guardian. If a parent or guardian asks us to delete a minor's information, we will do so promptly.

Under RA 10173 you have the right to be informed, to access, to correct, to erase or block, to object, to data portability, to damages, and to complain. To exercise any of these, contact us through our support channel and we will respond within a reasonable period.

You may also file a complaint with the National Privacy Commission (privacy.gov.ph) if you believe your rights have been violated.

We do not use advertising cookies or third-party tracking pixels. The site uses your browser's local storage purely to remember your unlocked access and your study progress on your own device.