Privacy Policy

Last updated: 13 September 2026 · Effective: 13 September 2026

1. Who is responsible for your data

LET360 (“we”, “us”, “our”) operates the website at let360.net and is the Personal Information Controller for the data described here.

For any privacy question or request, contact our Data Protection Officer at privacy@let360.net.

2. What personal data we collect

We collect only what the service needs to work. We do not ask for, and we never store, your Google password or any payment details — LET360 is free and sign-in is handled entirely by Google.

3. Why we use your data, and our legal basis

• To provide the service — sign you in, generate your practice tests, track your credits and scores, and run the referral program. Legal basis: performance of our service to you, and your consent.
• To protect the service — detect and block automated scraping and abuse of the question bank so the service stays free and available for genuine users. Legal basis: our legitimate interest in securing the service.
• To understand and improve usage — see which pages and features are used so we can make the service better. Legal basis: our legitimate interest, using privacy-protective analytics.

We do not sell your personal data, and we do not use it for advertising.

4. Who we share your data with

We share data only with the service providers that make LET360 work. They process it on our behalf and are not permitted to use it for their own purposes.

• Google (Google LLC / Google Cloud – Firebase) — sign-in (Firebase Authentication), website hosting, database (Firestore), and the server functions that build your tests. See the Google Privacy Policy.
• PostHog — privacy-protective, cookie-less product analytics. See the PostHog Privacy Policy.

We may also disclose data if required by Philippine law, a valid court order, or a lawful request from a government authority such as the National Privacy Commission.

5. Cookies and analytics

LET360 does not use advertising or tracking cookies, so you will not see a cookie-consent banner. Our analytics tool stores a small identifier in your browser's local storage to count visits and understand navigation. Analytics data is not linked to your name or email — signed-in users are identified only by an internal account ID.

On the signed-in dashboard we may record an anonymized replay of how the page is used to diagnose problems. All text you type is masked and is never captured. We do not record activity for site administrators.

6. Storage and international transfer

Your data is stored on Google Cloud (Firebase) and processed by PostHog. These providers operate global infrastructure, so your data may be stored or processed on servers outside the Philippines, including in the United States. Where this happens, the transfer is protected by the providers' contractual and security commitments, and we remain accountable for your data under the Data Privacy Act.

7. How long we keep your data

• Account and practice-test data — kept for as long as your account is active, so your history and credits are available to you.
• Analytics data — retained by our analytics provider on a rolling basis for usage analysis, then automatically expired.
• When you ask us to delete your account, we delete your personal data within a reasonable period, except anything we must keep to comply with law or to resolve disputes.

8. How we protect your data

We apply organizational, physical, and technical safeguards appropriate to a service of this size, including:

• Encryption of data in transit (HTTPS) and encryption at rest by our cloud provider.
• Access controls, so the raw question bank and account records are reachable only by authorized server functions and administrators.
• Automated abuse detection to prevent bulk extraction of data.

No system is perfectly secure, but we work to protect your data against unauthorized access, loss, or misuse.

9. Your rights as a data subject

Under Republic Act No. 10173, you have the right to:

• Be informed about how your personal data is collected and used.
• Access the personal data we hold about you.
• Correct (rectify) data that is inaccurate or out of date.
• Object to processing, or withdraw consent you have given.
• Erasure or blocking — ask us to remove or block your data where allowed by law.
• Data portability — receive a copy of your data in an electronic format.
• Lodge a complaint and seek redress for damages caused by mishandling of your data.

To exercise any of these rights, email privacy@let360.net. We will respond within a reasonable period. You can also delete your account at any time, which removes your personal data as described in Section 7.

10. Children

LET360 is intended for adults preparing for a professional licensure examination and is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has used the service, contact us and we will remove the data.

11. Data breach

If a security incident affecting your personal data occurs, we will act to contain it and, where the law requires, notify the National Privacy Commission and affected users within the prescribed timeframe.

12. Changes to this policy

We may update this policy as the service evolves. We will change the “Last updated” date above and, for significant changes, give notice on the site. Continuing to use LET360 after an update means you accept the revised policy.

13. Contact and complaints

Questions or requests about your data: privacy@let360.net.