Your Privacy Matters

BAHABA is designed with privacy first. No ads, nothing personal attached to a flood report, and an account that is optional and buys only a better place search.

We collect only what’s absolutely necessary to serve you

Last updated: August 21, 2026

Introduction

BAHABA (“Baha ba?”) is committed to protecting your privacy while providing real-time flood monitoring services for the Philippines. This privacy policy explains our minimal data collection practices and how we safeguard any information you choose to share.

Key Point: We collect only what’s absolutely necessary to show you relevant flood information. No personal data is attached to reports. Accounts exist but are optional, and nothing about reading the map, reporting flooding or planning a route requires one.

Information We Collect

Location Data (Optional)

We request access to your device’s GPS location solely to:

  • Show flood reports near your current location
  • Center the map on your position
  • Provide relevant emergency hotlines for your area
  • Display location-specific weather advisories

Important: Location sharing is completely optional. If you decline, BAHABA defaults to showing Metro Manila area and remains fully functional.

Local Storage Data

We store minimal data in your browser’s local storage:

  • Language preference - English or Tagalog selection
  • Onboarding status — Whether you’ve seen the welcome guide
  • Report confirmations - 30-minute cooldown between upvotes
  • Map preferences - Last zoom level and position

This data never leaves your device and can be cleared anytime through your browser settings.

Flood Report Submissions

When you submit a flood report, we collect:

  • Location of the flood (coordinates)
  • Flood severity level
  • Whether vehicles can pass
  • Optional text description
  • Timestamp of the report

No personal information is attached to reports. We don’t collect names, email addresses, phone numbers, or any identifying information.

Account Information (Optional)

You do not need an account to read the map or to report flooding. Accounts are optional and nothing requires one. If you create one, we store:

  • Email address — to confirm the account and to sign you in
  • Username — shown publicly on any report you file while signed in
  • Full name — stored privately and never displayed publicly
  • Password — stored only as a hash by Supabase; we never see it

Signup is protected by Cloudflare Turnstile, which checks that a person rather than a script is submitting the form. Turnstile receives your IP address and basic browser information for that check. We use no advertising or tracking cookies for it.

You can ask us to delete your account and everything attached to it at any time, and reports you filed anonymously are unaffected because nothing links them to you.

Place Search and Route Planning Logs

Place search is the only part of BAHABA that costs money to run, and it has been abused. To keep it working we record, for each search request:

  • Your IP address
  • A general device category (mobile, desktop or automated)
  • Which feature you were using, and whether the request reached a paid provider
  • Your username, if you were signed in

We do not record what you searched for. Only the length of the text is kept. These logs are held by our hosting provider for a short operational period and are used to detect abuse and control cost — never to build a profile of you and never sold or shared.

❌What We Don’t Collect

BAHABA does NOT collect:

  • Personal identification information, unless you create an optional account (see above)
  • Photos or media from your device
  • Contact lists or social media information
  • Payment or financial information
  • Phone numbers, contact lists or social media profiles

What changed, and when: this page previously said BAHABA collected no analytics, no cookies and no IP or network information. As of 19 August 2026 that is no longer accurate, and it is corrected above rather than quietly left standing. Google Analytics was added on that date to measure how many people reach the site and which pages they use. It sets a cookie and receives your IP address, which Google uses to derive an approximate city and then discards. It is not used for advertising, it is not linked to any flood report you submit, and it does not identify you by name. On 21 August 2026 two more were added, and they are named here for the same reason: Vercel Web Analytics and Speed Insights, which count page views and page speed without a cookie and without an identifier that follows you between visits. On the same date the optional flood-hazard overlay began fetching its map data from Hugging Face, which sees your IP address for as long as you leave that overlay switched on.

Note: When you make donations, payment processors may collect financial information, but this data is not shared with or stored by BAHABA.

⚙️How We Use Information

The minimal information we collect is used exclusively to:

  1. Display flood reports on the map
  2. Show weather advisories for affected areas
  3. Provide location-relevant emergency contacts
  4. Aggregate anonymous flood data for public safety
  5. Expire old reports based on weather conditions

💝Donation Data

What We Don’t Collect

BAHABA does not collect, store, or process any payment or financial information when you make donations. All payment processing is handled entirely by third-party services.

  • We do not see or store your payment card details
  • We do not collect your financial account information
  • We do not track donation amounts or frequency
  • We do not link donations to individual users or identities

Payment Processor Data Collection

When you donate through our supported payment methods, the following third-party processors handle your payment data according to their own privacy policies:

  • GCash: Globe Fintech Innovations, Inc. privacy policy applies
  • Maya (PayMaya): PayMaya Philippines, Inc. privacy policy applies
  • PayPal: PayPal Holdings, Inc. privacy policy applies
  • Cryptocurrency: Your wallet provider’s privacy policy applies

We recommend reviewing these processors’ privacy policies before making donations.

Anonymous Donations

All donations to BAHABA are processed anonymously from our perspective. We have no way to identify who made specific donations or track donation patterns, ensuring your financial privacy is protected.

🌐Third-Party Services

BAHABA uses the following third-party services to function:

Vercel

  • Hosting: Serves the site and runs the API
  • Web Analytics and Speed Insights: Added 21 August 2026. Counts page views and measures how fast pages load on real devices. Both are cookieless, are served from this domain rather than a third-party script, and record no identifier that follows you between visits.

Hugging Face & BetterGov

Added 21 August 2026. The optional “Flood-prone areas” overlay draws UP Project NOAH hazard mapping from a public archive that BetterGov hosts on Hugging Face. It is off unless you switch it on; while it is on, your browser requests parts of that file directly and Hugging Face therefore sees your IP address. Turning the overlay off stops those requests.

Google Services

  • Google Places: Place search, only once your typing settles
  • Google Analytics: Visitor counts, as described above

Corrected 21 August 2026: this page previously listed Google Maps, a Google Weather API and Firebase. None of those are used. The map is MapLibre with CARTO tiles, weather comes from Open-Meteo, and reports are stored in Supabase.

Payment Services

  • GCash: Philippine mobile payments
  • Maya (PayMaya): Philippine digital wallet
  • PayPal: International payment processing
  • Cryptocurrency wallets: Digital currency transactions

Other Services

  • Open-Meteo: Weather and rainfall
  • Vercel: Website hosting and request logs
  • Supabase: Database and, if you create one, your account
  • Photon on our own server: Place search, self-hosted
  • Nominatim (OpenStreetMap): Fallback place lookup
  • CARTO + MapLibre: Map tiles and rendering
  • OSRM: Driving directions for the route planner
  • PAGASA: River levels and flood bulletins
  • Cloudflare Turnstile: Bot check on the signup form only

These services may collect technical information like IP addresses for operational purposes. Please refer to their respective privacy policies for details.

Data Retention

Flood reports are automatically expired based on weather conditions:

  • Clear weather: Reports expire after 1 hour
  • Rainy conditions: Reports remain active for up to 6 hours with community confirmations
  • Resolved reports: Removed immediately when marked as resolved

This ensures the map always shows current, relevant information during emergencies.

⚖️Your Rights

You have the right to:

  • Use BAHABA without providing any personal information
  • Deny location permissions and still access flood data
  • Clear your local storage data anytime
  • Submit flood reports anonymously
  • Access all features without creating an account

👶Children’s Privacy

BAHABA does not knowingly collect personal information from anyone, including children. The service is designed to be used anonymously by anyone who needs flood information, regardless of age.

🔄Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with an updated revision date. Continued use of BAHABA after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this privacy policy or BAHABA’s data practices, please contact:

Nio Martinez
Creator of BAHABA

Connect on LinkedIn →