Data is
precision.
At Lunas, processing isn't just about movement; it's about integrity. We handle every byte of your medical history with clinical precision.
Purpose-Limited Processing
We only process the data strictly necessary for your medical passport. Your information is never repurposed for marketing or unauthorized analytics.
Real-Time Integrity
Our processing engine ensures that the information displayed on your QR code is always the most recent version you have authorized.
DPA Compliance
Lunas operates in full compliance with the Data Privacy Act of 2012 (RA 10173), ensuring the highest standards of data protection and subject rights.
Processing Framework
Last Updated: May 14, 2026
Scope of Processing
We process personal and sensitive medical data provided by you. This includes identity details, medical conditions, allergies, and emergency contacts. Processing is limited to storage, retrieval for display via QR code, and necessary system updates.
Technical Measures
Data is processed using AES-256 encryption. Our servers employ strict access controls, multi-factor authentication for administrative tasks, and regular security audits to ensure your data remains untampered.
Data Retention
We retain your data only for as long as your account is active. Upon account deletion, all personal and medical records are permanently purged from our primary databases within 30 days.
Subject Rights
You have the right to object to processing, access your data in a portable format, and request rectification of any inaccuracies. For inquiries regarding your rights, please contact our Data Protection Office.