GHealth
Privacy Notice

G-Xchange, Inc. (“GXI”) respects your right to privacy and is committed to protecting the security and confidentiality of your personal data. We are bound to comply with the Data Privacy Act of 2012 (DPA) and relevant regulations issued by the National Privacy Commission, Bangko Sentral ng Pilipinas, and other regulatory authorities.

We adopt appropriate and reasonable organizational, physical, and technical measures to protect and prevent the loss, misuse, and alteration of your personal data under our control.

This privacy notice tells you how we handle your personal data in our GHealth feature.

For more information on how GCash processes your personal data in general, check out the GCash Privacy Notice.

What We Collect and Why We Collect It?

To provide the GHealth feature securely and accurately, we collect data from two distinct sources: 1) Your existing GCash account (specifically your verified GCash Account); and 2) Your fitness app (Google Fit or Apple Health), when you connect it to GHealth.

We will collect the following information for the purposes stated:

  • Basic Information (Date of Birth and Sex Assigned at Birth): We collect your Date of Birth and Sex Assigned at Birth directly from your verified GCash account. This is used to accurately calculate your Actual Age for comparison against your Health Age, and to normalize baselines and model outputs.
  • Steps, Activity, and Timezone Data (Timezone, Step Count, Distance, Start/End Dates from Native Health App/Device): Your timezone, steps, and activity data are collected directly from your connected native health app (Google Fit or Apple Health) or your device. This is used to define daily cycles for accurate activity and sleep analysis alignment, to define the score observation period, to calculate the total volume of activity (the primary component score metric), and to supplement step data for a more accurate estimation of overall activity levels.
  • Device Information (Device Source/Name from Native Health App): Collected directly from your native health app to identify the source of activity data and to support device-level interpretation.

Note: We use your personal data to calculate your Health Age Score and determine your wellness status (e.g., "Wellness Achiever"). We won't use this data to decide if you qualify for insurance or to calculate how much you need to pay for GInsure products, unless you give us separate permission.

Who Do We Share It With?

We share your personal data with the following parties, only when necessary to process your GHealth score, provide rewards, and comply with legal obligations:

  • Scoring Partner (KNOWTIONS RESEARCH INC. operating Lydia AI): We share your relevant activity data and necessary identity data (age and Sex Assigned at Birth) with KNOWTIONS RESEARCH INC. solely to utilize their proprietary model to calculate your personalized Health Age Score.
  • GCash Group and Affiliates: We may share your data with affiliates, including Mynt, Inc., for analytics, improving our services, and recommending products and services that may be relevant to you. 
  • Service Providers & Partners: We may share your information with authorized third-party service providers (such as cloud storage providers) who assist us in data processing and business operations that enable the continued operation of the GHealth feature.
  • Law Enforcement Agencies and Regulatory Bodies: We may share your personal information with public authorities (such as the NPC or AMLC) when required by law, or to protect our legal rights.
How Long We Keep It?

Your personal data collected for this feature will be kept for at least 5 years from the date of collection or until you withdraw your consent, whichever comes first, unless a longer period is required by law or regulatory requirement.

We may also keep records associated with legal or business purposes for as long as we are required by applicable regulations. After this period, we shall securely dispose of your personal data, unless we are legally required to retain it further.

How We Protect It?

All data collected through the GHealth feature will be securely stored and protected. We and our partners employ appropriate and reasonable organizational, technical, and physical security measures, including encryption and access controls, to protect your personal data—particularly sensitive health data—from misuse, interference, loss, unauthorized access, modification, and unauthorized disclosure.Access is strictly limited to authorized personnel.

Data Subject Rights?

We uphold your privacy rights under the DPA and will handle your requests to access, delete, or correct your personal data. You have the right to withdraw your consent by disconnecting GHealth in your settings, which will result in the immediate termination of your access to the feature.

To learn more about managing your personal information, visit the Privacy Choices feature on our GCash app, speak with Gigi, or visit our Help Center.

If you need to talk to us, call us at 2882 (Customer Care).