Privacy Notice
Last updated: 2 May 2026
Who we are
RightPatch is an AI-powered career discovery platform for students and early professionals in Southeast Asia. Contact: privacy@rightpatch.app.
What data we collect
- Anonymous session ID (rp_session cookie) — links your quiz answers to your result page. Not linked to a name or email until you sign up.
- Quiz answers — your responses to the personality and interest scenarios. Used to compute your top-3 career matches.
- Result token (in the /r/ URL) — a random 12-character ID, not personally identifying.
- Authentication data (optional) — if you sign up to save your results: email + Firebase user ID. We do not store passwords (Firebase handles authentication).
- What we do NOT collect — name, age, gender, nationality, IP address, or any other demographic data during the quiz.
Analytics (PostHog)
We use PostHog for server-side analytics — counting funnel events such as quiz_started, result_viewed, signup_completed, and roadmap_unlocked. This data helps us improve RightPatch.
Analytics fires only if you accept cookies. If you decline or have not yet decided, no PostHog events are captured. You can change your preference at any time by clearing the rp_consent cookie in your browser. PostHog processes data per their privacy policy.
Error tracking (Sentry)
We use Sentry to capture JavaScript exceptions so we can fix bugs quickly. We consider error tracking strictly necessary for service operation, so it runs independently of your analytics-cookie preference. Error payloads contain stack traces and browser/device metadata. We do not include your quiz answers, email, or other personal data in error reports — by design, our error boundaries strip raw error messages from the user-facing UI.
Your rights
PDPA — Singapore (PDPA 2012) & Thailand (PDPA 2019)
Right to withdraw consent for analytics, right to access your data, right to correction, right to erasure. Email privacy@rightpatch.app with your request.
UU PDP — Indonesia (Law No. 27 of 2022)
Right to information about how your data is processed, right to correction, right to deletion, right to withdraw consent. We aim to respond within 30 days.
Philippines Data Privacy Act of 2012 (Republic Act 10173)
Right to be informed, right to access, right to object, right to erasure, right to data portability. You may also lodge a complaint with the National Privacy Commission (NPC).
Cookies we use
- rp_session — anonymous quiz state, session-scoped.
- rp_auth — authentication cookie (5 days) when you sign in.
- rp_consent — your analytics-cookie preference (180 days).