Learning While Healing ("we," "us," or "our") operates SPACE, a daily reset and spiritual wellness app at https://space.learningwhilehealing.com (the "App"). We are committed to protecting your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and issuances of the National Privacy Commission (NPC), as well as other applicable data protection laws.
This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it. By creating an account or using the App, you consent to the practices described here.
1. Information We Collect
a. Account information you provide at sign-up:
- Full name
- Email address
- Password (stored in encrypted/hashed form; we never see your actual password)
- Age range
- Country and city
b. Wellbeing content you create in the App:
- Mood check-ins and emotion selections
- Journal entries
- Gratitude entries
- Saved Scripture verses and reflections
- Breathing and reset session activity
- Evening release entries
- Journey progress and completion activity
Some of this content may reveal information about your emotional wellbeing and religious beliefs. Under the Data Privacy Act, this may be considered sensitive personal information. We collect and process it only with your consent, only to provide the App's features to you, and we treat it with a higher standard of care as described in this Policy.
c. Subscription and payment information:
Payments may be processed by third-party payment providers, including Lemon Squeezy and Xendit, depending on the payment method, subscription, plan, or offer you select. Lemon Squeezy handles our standard subscription plans, including recurring/renewal billing where applicable. Xendit is used for specific annual payment offers and one-time transactions — it does not manage recurring subscription renewals. When you pay, the applicable provider collects your payment details (such as card or e-wallet information) directly. We do not receive or store your complete card numbers, CVVs, e-wallet passwords, or other complete payment credentials. Depending on the provider and transaction, we may receive information such as payment status, amount, transaction or reference IDs, payment method type, subscription or access status, and a billing or customer identifier assigned by that provider, so we can activate and manage your membership.
d. Usage and technical information:
Basic technical data needed to run the App, such as session/login timestamps, device/browser type, streak and habit-activity data, and app interaction data used to display your personal insights. The App may use cookies or local storage to keep you signed in, remember your preferences, and support security and fraud-prevention. We also use Google Analytics (GA4) to understand app usage through interaction events (such as which screens or features are used); we do not use it for ad personalization or remarketing.
If you enable reminders or notifications, we process the technical information needed to deliver them, including your device's push subscription endpoint, the encryption/public keys used by your browser's push protocol, your timezone, basic device/browser information (user-agent), and your chosen reminder preferences (such as reminder times). This information is used solely to deliver the notifications you've asked for — it is not an advertising identifier and is not used for ad targeting.
2. How We Use Your Information
We use your information to:
- Create and manage your account and subscription
- Provide the App's features, including mood tracking, journaling, insights dashboards, streaks, Journey progress, and personalized daily content
- Process and manage payments, subscriptions, renewals, refunds, and access status through applicable third-party payment providers (Lemon Squeezy and/or Xendit, depending on your plan or offer)
- Deliver reminders and notifications you've chosen to enable
- Send you service-related communications, such as account notices and payment confirmations
- Send you optional updates and encouragement emails if you opt in, which you can unsubscribe from at any time
- Respond to your questions and support requests
- Maintain the security of the App and prevent fraud or misuse
- Comply with legal obligations
We use your wellbeing content (journals, moods, gratitude entries, saved reflections) to display it back to you, generate your personal insights, track your Journey progress, and support the App's core features based on your activity. We do not read it for marketing purposes, we do not sell it, and we do not use it to make automated decisions that produce legal effects about you.
3. Legal Bases for Processing
We process your personal information based on: (a) your consent, given when you create an account and accept this Policy; (b) the necessity of processing to perform our contract with you (providing the App and your subscription); (c) our legitimate interests in securing and improving the App; and (d) compliance with legal obligations under Philippine law. For sensitive personal information, we rely on your specific consent, which you may withdraw at any time by deleting the relevant content or your account.
4. Who We Share Information With
We do not sell, rent, or trade your personal information. We share it only with:
- Lemon Squeezy and Xendit (payment processing), which handle your payment data under their own privacy policies, depending on the plan or offer you use
- Supabase (secure database and authentication hosting), which stores App data on our behalf
- MailerLite, to deliver optional newsletter and marketing emails to members who explicitly opt in — not every member is subscribed
- Google Analytics (GA4), to understand app usage through interaction events
- Professional advisers or authorities, when required by law, court order, or lawful request of government agencies, or to protect our legal rights
All service providers process data only on our instructions and are bound by contractual and legal confidentiality obligations.
5. International Data Transfers
Our cloud service providers may store data on servers located outside the Philippines. Where data is transferred abroad, we ensure it remains protected by safeguards consistent with the Data Privacy Act, including contractual commitments from our providers and industry-standard encryption.
6. How We Protect Your Information
We use reasonable organizational, physical, and technical security measures, including encryption of data in transit (HTTPS/TLS) and at rest, hashed passwords, role-based access controls, and row-level security so that your wellbeing content is accessible only to your own account. No system can be guaranteed 100% secure, but we work continuously to protect your data and will notify you and the NPC of any data breach as required by law.
7. How Long We Keep Your Information
We keep your personal information for as long as your account is active. If you request deletion of your account (see Section 8), we delete or irreversibly anonymize your personal information and wellbeing content within a reasonable period after verifying your request, except for records we are legally required to keep (such as payment and transaction records, which are retained in accordance with Philippine tax and accounting regulations) and information needed to resolve disputes or enforce our Terms.
8. Your Rights Under the Data Privacy Act
As a data subject, you have the right to:
- Be informed about how your data is processed
- Access the personal information we hold about you
- Correct inaccurate or outdated information
- Erase or block your information, including withdrawing consent
- Object to processing, including for direct marketing
- Data portability — receive a copy of your data in a usable format
- Damages — be indemnified for damages due to unlawful processing
- Lodge a complaint with the National Privacy Commission (www.privacy.gov.ph)
To exercise any of these rights, or to request deletion of your account, email us at support@learningwhilehealing.com. We will act on your request within the timelines required by law. Account deletion is handled by our team upon request rather than as an automatic, instant, in-App action. You can update your profile details directly in the App at any time.
9. Age Requirement
SPACE is intended for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that personal information from someone under 18 has been collected, we will take reasonable steps to delete it. If you believe someone under 18 has created an account, contact us at support@learningwhilehealing.com and we will investigate and delete the account and its data as appropriate.
10. Marketing Communications
If you opt in to our newsletter or updates, we will send you occasional emails through MailerLite. Every marketing email includes an unsubscribe link. Unsubscribing does not affect essential service emails such as payment receipts and account notices.
11. Third-Party Links
The App may contain links to other Learning While Healing websites or third-party services, such as a checkout page operated by Lemon Squeezy or Xendit, depending on the applicable plan or offer. This Policy applies only to the App. We encourage you to review the privacy policies of any third-party services you use.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised "Last Updated" date, and we will notify you of material changes in the App or by email. Continued use of the App after changes take effect means you accept the updated Policy.
13. Contact Us
For privacy questions, requests, or concerns, contact:
Data Protection Contact — Learning While Healing
PNL Life Coaching Services
Unit 1702 High Street South Corporate Plaza Tower 2, 26th Street, Bonifacio Global City, Taguig City, Philippines
Email: support@learningwhilehealing.com
Website: https://start.learningwhilehealing.com
App: https://space.learningwhilehealing.com
You may also contact the National Privacy Commission: https://privacy.gov.ph