Privacy Policy · Philippines

Your photo stays with you

RUSH ID processes your photo and optional name tag only in your browser. It does not send them to RUSH ID, Cloudflare, or Google. Cloudflare handles ordinary request data to deliver and protect the site. Cloudflare Web Analytics and Google Analytics 4 measure visits and performance.

Photo boundary

  1. 01Your deviceYou choose a finished portrait.
  2. 02Browser memoryYou crop and arrange it locally.
  3. 03Your downloadThe finished 4R file returns to you.
No photo upload
Plain-language summary

You can use the photo generator without an account. RUSH ID has no application database or photo upload endpoint. Finishing a shop job removes its photo and settings. Replacing the photo, refreshing the page, or closing the tab also removes the working photo.

What this policy covers

This policy explains the limited processing connected with the RUSH ID website and photo generator.

RUSH ID is a product of EDVENTURE WEB DEVELOPMENT SERVICES and is available at https://rushid.app/. Mark Anthony Llego is the personal information controller (PIC) for the processing described in this policy.

Republic Act No. 10173, or the Data Privacy Act of 2012, treats an identifiable portrait and a person’s name as personal data. RUSH ID follows transparency, legitimate purpose, and proportionality when the app handles that data.

The app runs on your device. This policy also covers technical data processed by Cloudflare for hosting, security, and website performance measurement.

National Privacy Commission registration

The personal information controller is registered with the National Privacy Commission under registration number IND-001-268-2026.

Scanned National Privacy Commission Certificate of Registration for Mark Anthony Llego.
National Privacy Commission registration certificate. A readable transcription appears below.

Republic of the Philippines

National Privacy Commission

NPC Registration No.IND-001-268-2026

Certificate of Registration

This is to certify that

Mark Anthony Llego

with business address at (Poblacion), BASEY, SAMAR

has duly complied with the registration requirements of the Data Privacy Act of 2012, its Implementing Rules and Regulations, and all related issuances. This certificate was issued under the seal of the Commission and serves only as proof of registration and not a verification of the contents of any document submitted in relation thereto.

The information on this certificate has been made part of the records of the Commission.

Effective until
25 May 2027
Signatory
ATTY. JOHANN CARLOS S. BARCENA, CESO IIIPrivacy Commissioner and Chairman
Certified true copy
National Privacy CommissionCompliance and Monitoring Division · Signed / Initialed

Data RUSH ID processes

RUSH ID uses only the information needed to create your selected photo sheet and operate the website.

Local only

Your source photo

The app decodes your JPG, PNG, or WebP file in browser memory. It uses the pixels for cropping, previewing, downloading, and printing.

Local only

File name and name tag

The interface shows the source file name. An optional name tag becomes part of the output image. Neither value enters application storage.

Saved on this device

Printer calibration profiles

A profile stores the printer name you enter, the measured width and height of the 90 mm test square, and an update time in this browser’s local storage. It never contains a customer photo, file name, or name tag.

Saved on this device

Shop counter

The app stores only the current job number in this browser’s local storage. The counter contains no customer name, photo, file name, crop, or output.

Provider data

Site request data

Cloudflare may process Internet Protocol addresses, routing data, system configuration, and request information to deliver and secure the site.

Aggregate metrics

Website performance

Cloudflare Web Analytics measures page views, referrers, device details, country, and browser performance. It does not receive your photo or name tag.

RUSH ID also stores your optional-tool choices and light or dark theme preference in your browser’s local storage. Customer job settings remain in memory for the current tab. RUSH ID does not create an account, collect payment details, use advertising profiles, or sell personal data.

How Cloudflare and Google process site data

Cloudflare delivers and measures the site. Google Search Console supports indexing, and Google Analytics 4 measures usage.

Service data practices
ServiceStatusWhat it does
Cloudflare hostingActiveDelivers the site, routes requests, and protects network availability. Cloudflare acts as a service provider for customer logs.
Cloudflare Web AnalyticsActiveMeasures visits and page performance. Its beacon does not use cookies, local storage, session storage, or browser fingerprinting.
Google Search ConsoleActiveReports how pages appear in Google Search. It does not add an analytics cookie or receive uploaded photos through this app.
Google Analytics 4ActiveMeasures visits, sessions, device details, approximate location, and interactions. It does not receive your uploaded photo or name tag.

Google Analytics 4 collects user counts, session statistics, approximate location, browser details, device details, and interaction events. Its default web setup uses first-party cookies named _ga and _ga_<container_id>.

You can block or delete these cookies in your browser settings. Google also provides a Google Analytics opt-out browser add-on.

Cloudflare and Google operate global infrastructure. Their processing may occur outside the Philippines under their own data protection terms and safeguards.

Purposes and lawful basis

Each processing activity supports a defined function and uses no more data than that function needs.

Create your photo sheet
Your request to use the generator supplies the purpose. Processing remains on your device and stops with the browser session.
Calibrate a printer
Your request to save a profile supplies the purpose. The stored printer label and measurements provide print-scale guidance for later jobs on this device.
Deliver and protect the site
Technical request processing supports the service and its legitimate interest in reliability, abuse prevention, and security.
Measure and improve the site
Cloudflare and Google Analytics metrics support the legitimate interest in finding problems and understanding how visitors use the site.
Understand search visibility
Search Console data helps maintain indexing and discoverability. The site receives reports from Google rather than collecting search data from your photo session.

A privacy notice is not a request for consent. If a future feature needs consent, RUSH ID will request it separately and explain the specific purpose first.

Retention and security

The app keeps working data for the shortest practical period and avoids application-side photo storage.

Retention follows these limits:

  • Source photo: held in browser memory until you finish the job, replace or clear the photo, refresh the page, or close the tab
  • Name tag and job settings: held in browser memory until you finish or clear the job, refresh the page, or close the tab
  • Printer calibration profiles: kept in your browser’s local storage until you delete a profile or clear site data
  • Shop counter: kept in your browser’s local storage until you clear site data
  • Optional-tool preferences: kept in your browser’s local storage until you change them or clear site data
  • Theme preference: kept in your browser’s local storage until you change it or clear site data
  • Downloaded 4R file: kept wherever your browser saves it until you delete it
  • Print data: handled by your browser, operating system, and printer under their settings
  • Cloudflare Web Analytics: provider documentation states that unsampled beacon data is retained for seven days, then aggregated for longer-term reporting
  • Cloudflare request data: retained under the site’s Cloudflare service settings and Cloudflare’s Privacy Policy
  • Google Analytics 4: analytics data follows the property’s retention settings, while its default _ga cookies can remain for up to two years

Security measures include local photo processing, temporary object URLs, prompt URL revocation, encrypted HTTPS delivery, and data minimization. No internet service can promise absolute security, but the app removes the main photo-upload risk by keeping image processing in your browser.

Your privacy rights

The Data Privacy Act gives you control over personal data held by a personal information controller.

You may ask to be informed, object, access data, correct data, erase or block data, obtain portable data when applicable, seek damages, and file a complaint. The National Privacy Commission explains each data subject right.

RUSH ID cannot retrieve, correct, or delete a source photo that never left your device. You control that data by finishing or clearing the job, replacing the photo, refreshing or closing the page, and managing downloaded files on your device. You can delete a printer calibration profile from Settings or remove all local settings by clearing the site’s browser data.

Contact and complaints

Contact the personal information controller for privacy questions, rights requests, or concerns about this policy.

Personal information controllerMark Anthony LlegoEDVENTURE WEB DEVELOPMENT SERVICES · rushid.app
support@edventure.com.ph

Describe your request and the part of the site involved. Do not attach an ID photo, passport scan, or government identifier unless it is necessary for the request.

You may also contact or file a complaint with the National Privacy Commission of the Philippines. RUSH ID will revise this page when data practices or service providers change.