Privacy notice
Version public-privacy-v3 · 27 October 2026
ArugaMatch is operated by Tawilis, a Singapore-registered sole proprietorship. For privacy, correction, access or deletion requests, contact info@arugamatch.com. Incoming messages are forwarded to the operator's existing business inbox. Replies may initially come from that inbox.
What we collect and why
We collect your contact email, passkey public key, professional category, consent declarations, general location, experience, work preferences, asking hourly rate, availability and other information you choose to include in your professional profile. We use these to maintain your account and build a professional database. Do not enter patient names, diagnoses, medical records, full residential addresses, certificate/licence numbers or identity-document images.
ArugaMatch does not receive or store your fingerprint, face scan, device PIN or passkey private key. Your email address is a contact field and is not independently verified. We also store hashed session and recovery tokens, account events, request-rate counters and security metadata to protect the service.
Privacy and sharing
Professional registration requires a separate, unchecked agreement to share the matching-profile fields below with care seekers after they search. Consent records include the account, notice version and acceptance time. Existing registrants who have not already accepted the matching-sharing notice must accept it before appearing. A profile does not appear on the homepage or before a care search. Completing an account alone does not publish an incomplete profile. After a care seeker submits a search, opted-in available profiles can show display name, general location, rate, work preferences, availability and self-reported experience and qualification status. Email, account IDs, free-text notes and credential documents are excluded. Searches do not require an account; these selected profile fields can therefore be viewed by any visitor who submits a search. Uncheck the matching option and save, or mark yourself unavailable, to stop future appearances. Previously viewed information cannot be recalled. Search preferences are processed to rank results and are not saved as care records. Only aggregate registration totals appear before searching. Messaging and contact requests are not open. We do not sell your data or send marketing messages without separate permission.
Cloudflare provides website hosting, database and infrastructure services. Support email is routed through Cloudflare to the operator's existing inbox provider. These providers may process data outside the Philippines or Singapore; no country-exclusive storage guarantee is made.
Retention and account closure
Sign-in requests expire within 5–10 minutes, sessions after eight hours and invitations after 24 hours. Expired sign-in artifacts are cleaned daily. Your profile is retained while your account is active. You can close your account from your signed-in account page: this removes the live profile, contact email, passkeys, active sessions and recovery codes. De-identified security events and consent versions, acceptance times and withdrawal records remain for accountability and abuse prevention. Copies may remain in backups until their configured retention expires. Support communications may be retained as necessary to handle your request.
You may request access, correction, withdrawal or deletion through info@arugamatch.com. We may ask for appropriate proof of account control. Your recovery code and device PIN should never be emailed to us. You may also contact the relevant privacy regulator, including the Philippine National Privacy Commission or Singapore Personal Data Protection Commission, as applicable.
Your choices
Registration is optional and free. Keep only relevant professional information in your profile. Closing your account stops further use of the live profile for the professional database. Questions or concerns: info@arugamatch.com.