At Ramen Kuroda, we respect your privacy and are committed to protecting your personal information. This Mobile App Privacy Notice (“Notice”) explains how MEAPECA Enterprise Inc. (“MEAPECA,” “Ramen Kuroda,” “we,” “us,” or “our”), as the Personal Information Controller (“PIC”), collects, uses, stores, shares, protects, and otherwise processes personal information when you use the Ramen Kuroda Mobile App (“App”).

 

This Notice is a concise, App-specific notice and should be read together with our full Privacy Policy, which provides more comprehensive information about our privacy practices, including our Privacy Management Program, retention and disposal practices, data sharing, security measures, and procedures for exercising data subject rights.

 

1. Personal Information We Collect

 

Depending on how you use the App, we may collect and process the following categories of personal information. We will collect only information that is adequate, relevant, necessary, and proportionate to the applicable purpose.

 

A. Account and Identity Information

• Full name

• Mobile number

• Email address

• Birthdate or age information, where necessary for age assurance, account eligibility, rewards, or other lawful purposes

• Account credentials, authentication information, and account identifiers

• Information necessary to create, maintain, secure, and verify your account

​

Note: Birthdate and age information are treated with heightened care because “age” is included within sensitive personal information under the Data Privacy Act of 2012 (“DPA”). Where exact birthdate is not necessary, we may use a less granular age or age-range indicator instead.

 

B. Transaction and Rewards Information

• Transaction details and purchase history

• Branch or store information

• RK Points earned, redeemed, transferred, or adjusted

• Vouchers, promotions, rewards, and member-benefit information

• RK Gift transactions, where applicable

• RK Wallet balances, top-ups, redemptions, and related records, where applicable

 

C. Delivery and Fulfillment Information

• Delivery address

• Contact information

• Order details

• Information reasonably necessary to fulfill delivery or other requested services

 

D. Device, Technical, and Usage Information

• Device type and operating system

• App version

• Device identifiers or similar technical identifiers

• IP address

• Diagnostic, log, and crash information

• App activity, interaction, and performance information

 

E. Information You Provide Through Support or Other App Features

We may process information you voluntarily provide when you contact customer support, submit requests, report concerns, participate in promotions, or use other App features. We will identify the purpose and applicable lawful basis for such processing where required.

 

2. Age Restrictions, Children, and Minors

 

The App may be accessible to persons below eighteen (18) years of age. For purposes of this Notice, a “child” includes a person below eighteen (18) years of age and, consistent with applicable NPC guidance, a person eighteen (18) or older who is unable to fully care for or protect himself or herself from abuse, neglect, cruelty, exploitation, or discrimination because of a physical or mental disability or condition.

 

If you are below eighteen (18), or otherwise fall within the applicable definition of a child, you should use the App only with the involvement of a parent or legal guardian where required by the nature and risk of the processing. Where processing is based on consent and applicable law requires authorization by a parent or legal guardian, the required authorization will be obtained through an appropriate mechanism.

 

We may use proportionate age-assurance measures where necessary to determine eligibility for particular features or to apply age-appropriate privacy controls. We will not collect more information for age assurance than is reasonably necessary for that purpose.

 

Where children’s personal data is processed, we will apply enhanced safeguards appropriate to the risk, including child-appropriate privacy information, high-privacy settings by default where applicable, data minimization, appropriate parental or guardian involvement, and enhanced security measures. Children will not be deliberately steered or pressured through deceptive design to disclose more information than is necessary.

 

Where a product or feature is intended for, or likely to be accessed by, children, Ramen Kuroda may provide a separate child-friendly or layered privacy notice and just-in-time notices appropriate to the child’s age and the particular processing activity.

 

Unless separately assessed as lawful and appropriate, we will not use children’s personal data for behavioral profiling, targeted advertising, or similar processing that is inconsistent with the child’s best interests.

 

3. How We Collect Your Information

 

We may collect personal information:

• Directly from you when you register for an account or use an App feature

• When you update your account information

• When you make or record transactions through the App

• When you earn, redeem, or otherwise use RK Points, vouchers, rewards, or other benefits

• When you request delivery or other fulfillment services

• When you contact customer support or submit a request

• Automatically through the App, device, SDKs, analytics, security, and diagnostic technologies, as described below

• From authorized service providers or other sources where collection is lawful, necessary, and proportionate to the stated purpose

 

4. How We Use Your Information

 

We may process personal information for the following declared and legitimate purposes:

• Creating, maintaining, and administering your RK account

• Verifying identity, account ownership, age or eligibility for particular features

• Processing, recording, reconciling, and supporting transactions

• Administering RK Points, rewards, vouchers, promotions, and other account benefits

• Processing delivery and other fulfillment requests

• Providing customer service, including the use of AI-assisted tools where appropriate and subject to applicable safeguards

• Sending service-related, transactional, security, and account communications

• Maintaining the security, integrity, availability, and reliability of the App

• Detecting, preventing, investigating, and addressing fraud, unauthorized activity, abuse, and misuse

• Troubleshooting, testing, monitoring, and improving App functionality and performance

• Conducting analytics and generating operational or business insights, subject to applicable privacy requirements and appropriate safeguards

• Sending promotional or marketing communications where permitted by law and based on the applicable lawful basis

• Complying with legal and regulatory obligations, responding to lawful requests, and establishing, exercising, or defending legal claims where applicable

 

We will not process personal information for purposes that are incompatible with the declared purposes unless a lawful basis exists and, where required, you are informed and given the opportunity to exercise applicable rights.

 

5. Lawful Bases for Processing

 

Depending on the specific processing activity, we may rely on one or more lawful bases under Sections 12 and 13 of the DPA and applicable NPC issuances:

 

• Performance of a Contract – where processing is necessary to provide the App, products, services, transactions, rewards, or other services you request or to take steps at your request before entering into a contract.

• Legal Obligation – where processing is necessary to comply with a legal or regulatory requirement.

• Consent – where consent is the appropriate lawful basis. Consent will be freely given, specific, informed, and evidenced by written, electronic, or recorded means. Where consent is relied upon, you may withdraw it subject to applicable legal limitations.

• Legitimate Interests – where applicable to personal information and after the required assessment that the legitimate interest is necessary and is not overridden by the fundamental rights and freedoms of the data subject. Legitimate interest will not be used as a lawful basis for processing sensitive personal information where the DPA requires a Section 13 lawful basis.

• Vital Interests / Other Lawful Bases – where processing falls within another lawful basis recognized by the DPA or applicable law.

 

The applicable lawful basis may differ by processing activity. We will not treat acknowledgment of this Notice as blanket consent to all processing activities.

 

6. Marketing Communications

 

Where applicable, we may send promotional communications about promotions and special offers, new products or services, rewards and member benefits, events and campaigns, and other marketing communications from Ramen Kuroda.

 

Where consent is the applicable lawful basis, marketing consent will be obtained separately from acknowledgment of this Notice or our Privacy Policy. Marketing choices will not be bundled with acceptance of the Notice where separate consent is required.

 

You may withdraw marketing consent or change your marketing preferences through available App mechanisms or by contacting our designated privacy channel. Withdrawal will not affect processing lawfully carried out before withdrawal.

 

You may also object to direct marketing in accordance with your data subject rights. We will honor applicable opt-out or objection requests within the periods required by law.

 

7. App Permissions

 

Certain App features may require access to device functions or information. Depending on the features you use, the App may request permission to access:

 

• Notifications

• Camera

• Photos or media

• Location

• Other device functions

 

We will request only permissions that are necessary and proportionate for the applicable feature or service. Where a permission is optional, the App will not make access to unrelated functions a condition for using a service. You may manage permissions through your device settings. Restricting a permission may affect the availability of the corresponding feature.

 

8. Cookies, SDKs, Analytics, and Similar Technologies

 

The App may use software development kits (SDKs), analytics tools, diagnostic tools, security technologies, and similar technologies to support functionality, security, performance monitoring, troubleshooting, fraud prevention, and service improvement.

 

These technologies may collect technical or usage information. Where an SDK or similar technology involves disclosure to or processing by a third party, we will assess the applicable lawful basis, necessity, proportionality, security, and contractual safeguards. Where required, additional information or controls will be provided through the App, a just-in-time notice, or our Privacy Policy.

 

We will not use tracking or analytics technologies in a manner inconsistent with the declared purpose or applicable privacy requirements.

 

9. Sharing and Disclosure of Personal Information

 

We may disclose or provide access to personal information to authorized parties where necessary for lawful and legitimate purposes, including service providers supporting:

 

• App development, maintenance, and technical support

• Cloud, database, and infrastructure hosting

• Authentication and OTP services

• Payment processing

• Delivery and fulfillment

• Customer support

• Analytics, security, fraud prevention, and performance monitoring

• Other services necessary to operate and secure the App

 

Where a third party processes personal information on our behalf, we will require appropriate contractual, organizational, and technical safeguards consistent with the DPA and applicable NPC issuances. MEAPECA remains accountable for personal data processing outsourced to its Personal Information Processors, subject to applicable law.

 

We may also disclose personal information when required or permitted by law, pursuant to lawful government or regulatory requests, or when reasonably necessary to protect our rights, users, property, security, or operations, subject to the requirements of the DPA.

 

Payment Information: MEAPECA does not intentionally store complete credit card numbers, PINs, or other full payment credentials on its servers. Payment information is processed through authorized third-party payment service providers under their applicable security and privacy arrangements. We may retain transaction references, masked information, tokens, or other records necessary for reconciliation, fraud prevention, customer support, accounting, or legal compliance.

 

10. Data Storage, Retention, and Cross-Border Transfers

 

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to comply with applicable legal and regulatory requirements, resolve disputes, enforce agreements, maintain necessary business records, prevent fraud, or establish, exercise, or defend legal claims.

 

Retention periods may differ by category of information. We maintain retention and disposal rules designed to ensure that personal information is not retained in identifiable form longer than necessary. When personal information is no longer required, it will be securely deleted, destroyed, or anonymized in accordance with our retention and disposal procedures, subject to lawful preservation requirements.

 

Personal information may be transferred to, processed, or stored outside the Philippines where necessary for the operation and provision of the App or services. Where cross-border transfers occur, we will implement appropriate safeguards required by applicable law, which may include contractual, organizational, and technical measures and, where appropriate, applicable model contractual clauses or other recognized transfer mechanisms.

 

11. Data Security

 

We implement reasonable and appropriate organizational, physical, and technical measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, destruction, or other unlawful processing. Security measures are selected based on the risks associated with the processing and may include access controls, secure authentication, encryption or equivalent safeguards where appropriate, logging and monitoring, personnel confidentiality and training, incident response, backup and recovery measures, and vendor security controls.

 

Access to personal information is limited to authorized personnel, systems, and service providers based on legitimate business and security requirements and the principle of least privilege. Security measures are periodically reviewed and updated as appropriate.

 

12. Personal Data Breaches and Security Incidents

 

We maintain procedures for identifying, assessing, containing, investigating, documenting, and responding to personal data breaches and security incidents. Where a personal data breach is subject to mandatory notification under the DPA and applicable National Privacy Commission (NPC) issuances, we will notify the NPC and affected data subjects within the applicable period and in the manner required by law.

 

Where affected data subjects are children and notification is required, we will provide notice to the children and their parents or guardians, using language and methods appropriate to the child’s age and circumstances, consistent with applicable NPC guidance.

 

13. Your Data Subject Rights

 

Subject to the DPA and applicable legal limitations, you may have the right to:

• Be informed about the processing of your personal information

• Access your personal information and information about its processing

• Correct or rectify inaccurate or incomplete personal information

• Object to processing in circumstances allowed by law, including certain direct marketing, automated processing, or profiling

• Request erasure, blocking, or removal of personal information where applicable

• Withdraw consent where consent is the lawful basis, subject to legal limitations

• Request data portability where applicable

• Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unlawfully processed personal information, subject to the requirements and limitations of law

• Lodge a complaint with the NPC

 

We may take reasonable measures to verify the identity and authority of a person making a data subject request. Parents or legal guardians may exercise or assist in exercising applicable privacy rights of minors in accordance with law and applicable NPC guidance.

 

Some rights may be subject to lawful exceptions, retention requirements, third-party rights, legal claims, or other limitations under the DPA and other applicable laws.

 

14. Account Deletion

 

You may request deletion of your RK Mobile App account through the available account-management function or by contacting our designated privacy channel. Deleting an account does not necessarily require immediate deletion of all personal information. Information may be retained where necessary to comply with legal or regulatory obligations, resolve disputes, prevent fraud or abuse, enforce agreements, maintain required transaction records, or establish, exercise, or defend legal claims. Where retention is no longer necessary, the information will be securely deleted, destroyed, or anonymized.

 

15. Data Protection Officer / Privacy Contact

 

For questions, concerns, requests, or complaints relating to your personal information or privacy rights, please contact:

 

Data Protection Officer / Privacy Team

MEAPECA Enterprise Inc.

 

Email: milanes.jomalene@gmail.com

Contact Number: 09175662908

 

Email: roland093011@gmail.com

Contact Number: 09177133651

 

Address: U509 REACH BLDG., DIOSDADO MACAPAGAL BLVD., PASAY CITY

 

When contacting us, please provide sufficient information for us to understand and respond to your request. We may request reasonable information to verify your identity or authority.

 

16. Complaints Before the National Privacy Commission

 

If you believe that your privacy rights have been violated or that your personal information has been processed unlawfully, you may contact us first through the privacy channel above. You may also lodge a complaint with the NPC, subject to its applicable rules and procedures. The current NPC contact and complaint-filing information is available through the NPC’s official website.

 

17. Relationship to Our Full Privacy Policy

 

This Mobile App Privacy Notice provides information specifically relating to personal data processing through the Ramen Kuroda Mobile App. Our Full Privacy Policy provides more comprehensive information, including our governance and accountability measures, data processing systems, retention and disposal practices, data sharing, security, data subject rights, and other applicable privacy matters.

 

18. Updates to This Notice

 

We may update this Notice from time to time to reflect changes in the App, our processing activities, applicable laws, regulations, NPC issuances, or privacy practices. Where appropriate, we will provide notice of material changes through the App or other appropriate channels and will obtain consent again where a change in processing requires a new or renewed consent.

 

19. Child-Friendly Privacy Information

 

Where the App or any feature is intended for, or likely to be accessed by, children, MEAPECA will make child-oriented privacy information readily accessible. This may include simplified text, layered notices, just-in-time explanations, infographics, video, audio, or other age-appropriate formats. Child-oriented notices will explain, in understandable terms, what information is collected, why it is used, the applicable lawful basis, relevant risks and safeguards, privacy settings, and how privacy rights may be exercised.

​