1. Personal Information Controller

The selected Local Government Unit, acting through its authorized Quick Response administrators, is the Personal Information Controller. Privacy requests may be sent to the official LGU contact shown for your selection.

2. Information collected

Quick Response will collect your name, email, mobile number, LGU and barangay, account credentials, government ID type and images of its front and back, a one-way fingerprint and last four characters derived from the ID number, a live verification selfie, the randomized liveness actions and result, consent record, IP address, browser/device information, and later account activity and incident reports you voluntarily submit. The complete ID number is not retained. Government IDs and facial images may contain sensitive personal information.

3. Purposes and legal basis

The information is processed to create and secure your account; confirm that an applicant is a real, present person; allow an authorized LGU administrator to compare the selfie and ID; prevent duplicate, fraudulent, or abusive registrations; communicate about verification and incidents; support public-safety and emergency-response functions; maintain security/audit records; and comply with applicable law. Sensitive identity evidence is processed with your explicit consent and, where applicable, under the LGU's lawful public-service mandate.

4. Automated liveness screening and human review

Face landmarks are analyzed in your browser to detect the requested blink and head turn. A randomized, slowly changing screen-color sequence is also compared with color changes measured in the camera's face region as an additional reflection signal. The final selfie, challenge sequence, measurements, and pass result are sent to Quick Response. This screening is only an anti-spoofing aid: it does not identify you, search a face database, or solely approve or reject your account. An authorized administrator makes the account decision after reviewing the evidence. No advertising profile is created.

5. Access and disclosure

Access is limited to authorized LGU personnel and service providers supporting secure hosting, email, and system operations under appropriate safeguards. Information may also be disclosed to emergency services, another government authority, or law enforcement only when necessary for the stated public-service purpose or when authorized or required by law. It will not be sold or used for unrelated marketing.

6. Retention and protection

Identity and liveness evidence will be kept only while necessary for account verification, security, audit, dispute handling, or a legal requirement, under the LGU's approved records-retention schedule, and will then be securely deleted or anonymized. Account, incident, and audit records may be retained for the applicable public-records or legal period. Evidence files are stored in protected server storage and are not directly published on the website.

7. Your rights

Subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and lawful exceptions, you may request access or correction, object to or withdraw consent from consent-based processing, request erasure or blocking when legally available, request data portability where applicable, seek damages, and lodge a complaint with the National Privacy Commission. Withdrawal does not invalidate processing already lawfully performed and may prevent identity verification or continued account use when the information is necessary for the service.

8. Accuracy and authority

You confirm that the details and ID belong to you, or that you are the lawful representative specifically authorized to act for the data subject. Providing another person's ID or falsified evidence may result in rejection, account restriction, investigation, or referral when required by law.