Privacy

Last updated: 2 September 2026.

This is written plainly because you should be able to read it. It says what we collect, why, how long we keep it and how to make us delete it. Where the honest answer is "we do not collect that", it says so.

The short version. The app collects nothing and cannot — it has no internet permission at all. The website collects only what a purchase needs, plus, if you choose to register, an ID photograph that a person looks at once and then deletes. We never see your card. We publish nobody's name without them ticking a box that they were free to leave alone.

Who is responsible

Shorepass is operated from the Philippines and is the personal information controller for what is described here, under Republic Act 10173 (the Data Privacy Act of 2012).

Questions, corrections, or a request to delete: privacy@seamanapp.com. We answer within a few days. If you are not satisfied you may complain to the National Privacy Commission (privacy.gov.ph).

The app on your phone collects nothing

This is the part most study apps cannot say, so it is worth being precise about. The Shorepass Android app declares no internet permission. It is not a promise not to send your data — it is a technical inability to send anything anywhere, and the app's manifest is the proof.

Your answers, your scores, your speed, your ink and drawings, your starred questions and your whole history stay on your handset. They are included in your phone's own backup if you have one turned on, and they reach nobody else. We could not read them if we wanted to, and we have never wanted to.

What the website collects, and why

What	Why	Kept for
Device code eight characters	A licence is issued to one handset. The code names the phone so the licence can be bound to it. It is a one-way hash — it carries no serial number, no phone number, no account and nothing about you.	With the order record, so a lost licence can be reissued
Email address optional at checkout	To send you your licence, and to send it again when you lose it. If you leave it blank we cannot help you later, and the purchase still works.	With the order record
What you paid, and when	To know the licence was actually bought, and for our own accounts.	As long as tax records require
Registration: full name, rank, email, phone, and one photograph of an ID	Only if you choose to register. It lets us prove a licence is yours when a phone is lost or replaced, which is the commonest thing that goes wrong.	Name, rank and contact stay; the ID photograph is deleted once a person has checked it

Your card details never reach us

Payment is taken by PayMongo on their own pages. We receive a yes or no and an amount. We never see, hold or store a card number, a GCash PIN or a bank login. PayMongo's handling of your payment is governed by their own privacy policy.

The ID photograph, specifically

It is stored outside the public web directory under a random filename, and the row in our database holds only a path — so deleting your document is deleting one file. It is served to nobody by any public address; the only way to look at it is an internal page behind a separate token.

There is no automatic reader and there will not be one. A person looks at it. An automatic approval on an identity document is a mistake nobody notices until it lands on a real seafarer's name.

Being congratulated publicly is optional

When you register there is a box asking whether we may congratulate you publicly if you pass. You are free to leave it alone — it is not a condition of registering, of buying, or of anything else, and a registration without it is an ordinary registration.

If you do tick it, what we may publish is your name and your rank. What we will never publish, with or without the box:

Your ID photograph or any number on it
Your email address or phone number
Your device code
Anything at all about how you scored, how fast you answered, or what you got wrong — which we do not have in the first place

You can withdraw it at any time, by email, without giving a reason. We stop, and we take down what is still ours to take down.

What we do not do

No advertising, and no selling your details to anyone. Not now and not as a change of plan later.
No trackers or analytics on this website. No Google Analytics, no Facebook pixel, no third-party scripts of any kind — the pages load nothing from anywhere but this site, and the browser is told to enforce that.
No cookies for tracking. The pages keep your device code and your order reference in the browser's own session storage so that coming back from the payment page finds your licence. It is erased when you close the tab, and it never leaves your browser.
No profiling and no automated decisions that have any effect on you.

Who else sees any of it

PayMongo, our payment processor, for the payment itself.
Our email provider, to deliver your licence to your inbox.
The company hosting the server.

Nobody else. There is no analytics company, no advertising network and no data broker in this list, because there is none in the system.

Your rights, and how to use them

Under the Data Privacy Act you may ask us to:

Tell you what we hold about you — we will send it.
Correct anything wrong.
Delete it, including your ID photograph, at any time.
Withdraw your permission to be congratulated publicly.
Object, or complain to the National Privacy Commission.

Write to privacy@seamanapp.com from the address you registered with. Deleting your details does not switch off a licence you have already paid for: the licence lives on your phone and works to its expiry date whatever we delete at our end.

Keeping it safe, and what we cannot promise

The site is served over HTTPS. Identity documents are stored outside the public directory and are reachable only through an authenticated internal page. Uploads are decoded and checked before they are written, so a file pretending to be a photograph is refused.

What we will not tell you is that any of this is unbreakable, because nobody can honestly say that. What we can say is that we hold as little as the job needs, that the most sensitive thing we ever take is deleted as soon as it has served its one purpose, and that if something did go wrong we would tell you and the National Privacy Commission rather than hope you did not notice.

Children

Shorepass is for candidates sitting professional maritime licensure examinations. It is not intended for anyone under 18 and we do not knowingly collect anything from a child.

Changes

If this policy changes, the date at the top changes with it. If a change means we would use something you have already given us for a genuinely new purpose, we will ask you first rather than announce it here and hope.