Privacy Policy

ReaDDy is operated by DDLAW.PH, a Philippine legal education initiative developed by HootNova. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the ReaDDy platform. We comply with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

We collect the following categories of personal data:

• Account data: Full name, email address, password (hashed — we never store plaintext passwords), bar exam year, law school.
• Invite code: The code used to register, which may be linked to a review center.
• Essay answers: All essay text you submit during practice sessions.
• AI critique results: Scores, rubric breakdowns, and feedback generated for your answers.
• Progress data: Session history, scores per subject, submission timestamps.
• Consent record: Timestamp and version of these policies you agreed to at signup.
• Usage data: Pages visited, session duration, and other standard web analytics data.

We use your personal data to:

• Create and manage your account.
• Deliver the ReaDDy training platform, including AI critique of your essay answers.
• Track and display your progress over time.
• Send transactional communications (account confirmation, password reset, feedback notifications).
• Allow your enrolled review center's reviewer(s) to annotate and score your submitted answers.
• Improve the platform and AI critique quality (using anonymized, aggregated data only).
• Comply with legal obligations.

We do not sell your personal data. We share data only in the following circumstances:

• Review center reviewers: If you enrolled via a center invite code, authorized reviewers of that center can view and annotate your submitted exam answers.
• Service providers: We use Supabase (database and authentication) and Google Gemini (AI critique). These providers process data under their own privacy policies and under agreements with us.
• Legal compliance: We may disclose data when required by law, court order, or government authority.

Your data is stored on Supabase infrastructure located in the ap-southeast-1 (Singapore) region. We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure, including encrypted connections (HTTPS/TLS), hashed passwords, and row-level security on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

We retain your account data and essay answers for as long as your account is active or as needed to provide the Service. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Anonymized, aggregated performance data (with no personal identifiers) may be retained indefinitely for platform improvement.

As a data subject under RA 10173, you have the right to:

• Be informed about how your data is processed.
• Access your personal data held by us.
• Correct inaccurate or incomplete personal data.
• Erase your personal data (subject to legal retention requirements).
• Object to the processing of your data in certain circumstances.
• Data portability — request your data in a structured, machine-readable format.
• File a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.

To exercise any of these rights, contact us at readdy@ddlaw.ph.

ReaDDy uses browser local storage to save in-progress exam answers, flags, highlights, and notes so that your work is preserved during a session even if you lose connectivity. This data is stored on your device only and is not transmitted until you submit your exam or trigger an auto-save sync. We also use cookies for session authentication (Supabase auth token). We do not use tracking or advertising cookies.

ReaDDy is intended for law students and bar candidates who are at least 18 years old. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 18, we will delete it promptly.

We may update this Privacy Policy as our practices change or as required by law. We will notify you by email or in-app notice. The "Effective date" at the top of this page indicates when the current version took effect.

Privacy questions or data subject requests: readdy@ddlaw.ph.
Data Protection Officer: Kristian Dematera, DDLAW.PH.