PRIVACY POLICY — PHÒNG THỜ VIỆT
1. WHO HANDLES YOUR DATA?
Phòng Thờ Việt is operated by Công Ty TNHH Di Sản Số. Address: Số 1 ngách 61, phường Bồ Đề, Long Biên, Hà Nội, Việt Nam. Privacy contact: contact@disansohoa.com.
This policy covers the app, accounts, family trees, digital worship rooms and related support requests.
2. WHAT DATA IS USED, AND WHY?
Account: login details, email, phone number, name, birth date, account identifier and profile information you provide, to create, authenticate, manage and protect your account.
Family tree: names, gender, birth/death dates, death anniversaries, hometown, residence, family relationships, roles, photographs and notes, to build and manage family trees, display members and support reminders.
Worship room: room configuration, items, images and content you select, to display, save and synchronize your space. Some data is stored on your device; online family-tree photographs may be uploaded when saved or synchronized.
Transactions: products, rental plans, transaction identifiers/receipts, purchase status and balances, to verify payments, provide entitlements, reconcile purchases and offer support. Payment details are handled through your chosen payment channel.
Support: contact details and messages you send, to answer support requests or real-world construction inquiries.
Data is also processed for appropriate system security, fraud prevention and legal obligations. When the app contacts our servers, we record the IP address, time and type of request, the session token, a duplicate-payment guard and technical errors, to operate the service, keep it secure and fix problems. On your device the app stores your login session, settings (sound, language, display), altar layout, death-anniversary reminders and changes waiting to sync while offline. The app currently uses no third-party behavioural analytics and does not read your device advertising ID. Reminders are local notifications scheduled by the device itself.
Legal bases: (1) performing our agreement to provide the service you ask for — account, family tree, altar, purchases and support; (2) your consent — camera and photo library access, notifications, entering information about relatives, and advertising if it is enabled later; you can withdraw it at any time without affecting earlier processing; (3) legal obligations — keeping transaction records and responding to lawful requests from authorities; (4) protecting the security of the service and preventing fraud, where the applicable law allows.
You may choose not to provide optional information; features that need missing data may not work. Reading this policy or opening the app does not replace separate consent where consent is required.
3. WHO CAN RECEIVE OR SEE DATA?
Family information may be supplied by you or another member, including information about people without an account. Only provide another person's data where you have the appropriate authority or legal basis; family-tree administration does not replace each person's privacy rights.
Your personal altar is visible and editable only by you. A family tree and its family altar are shown only to members approved by the family head or tree administrator: members can see the names, relationships, dates of birth and death, death anniversaries, photos and notes of people in the tree; only the family head and delegated administrators can add, edit, approve or invite people and change the family altar. Share invite codes only with relatives you trust: anyone with a code can ask to join, but gets in only after approval. The nickname you give a family altar is visible only to you.
We do not sell personal data. Data is passed only to: our server hosting and storage providers (processing on our behalf, under contract and only on our instructions); an email delivery service, to send verification codes and replies; Google Play or the Apple App Store when you buy something — they process the payment and we receive only the transaction ID, product and status, never your card number; and competent public authorities where the law requires it. Our staff may access only the data their support or operations work needs.
Servers, backups or service providers (including Google and Apple for payments) may be located outside Vietnam. When personal data is transferred abroad, we prepare and keep the transfer impact assessment required by Vietnamese law, use only recipients bound by contractual data-protection commitments, and apply safeguards equivalent to this policy. Contact our privacy contact to learn where your data is currently processed.
If someone else has added your information, you may contact us to request review, correction or deletion without creating an account. Avoid including unnecessary sensitive information or family secrets in notes.
4. ADVERTISING AND YOUR CHOICES
The app does not show ads yet and shares no data with ad networks. Before advertising is enabled we will update this policy with the provider's name, the data involved and your choices, and we will use personalised ads or tracking only with your consent where the law or the app store requires it.
Family-tree content, memorial images, private notes and inferred religious beliefs are not to be used to create advertising audiences. Where advertising or tracking requires consent, the choices are explained separately; you may refuse or withdraw consent under applicable rules. Non-personalized advertising does not necessarily mean no data is processed.
5. HOW LONG IS DATA KEPT?
Account, family-tree and altar data are kept while your account is active. After a confirmed account deletion request, data is removed from live systems within 30 days and from backups within 90 days (backups are overwritten on a rolling cycle and never used to restore deleted data). Transaction records are kept for 10 years as accounting law requires, separated from your profile where possible. Technical logs are kept for up to 12 months; support requests for 24 months after they are resolved. Information about relatives that you added to a shared family tree stays in that tree after you leave, unless the person concerned or an administrator asks for it to be removed. Data on your device is removed when you uninstall the app or clear its data.
Deleting an account, leaving a family tree and hiding an item on screen are different actions. Deletion requests consider your data, other people's rights and information lawfully retained. If some data cannot be deleted, you receive an explanation and the relevant retention period or criteria. Independent copies exported by others may be outside our ability to retrieve.
6. YOUR RIGHTS AND DELETION REQUESTS
Depending on applicable law, you may request information, access, correction, deletion, a copy or portability of data; withdraw consent; restrict or object to processing; and complain to a competent authority. These rights may have legal conditions and exceptions.
Contact contact@disansohoa.com. External deletion-request page: https://legal.disansohoa.com/delete-account. In the app: Cài đặt (Settings) → Bảo mật (Security) → Xóa tài khoản (Delete account).
We request only necessary verification information and handle requests within applicable legal time limits, explaining any extension or partial refusal. Do not email passwords, verification codes or card details.
7. CHILDREN
Accounts are for people aged 12 or over. Users aged 12 to 15 need the consent of a parent or guardian to create an account, as children's data-protection rules require; in-app purchases need a guardian's approval if you are under 18. Information about children in a family tree (name, relationship, date of birth, photos) should be provided only by a parent or guardian. Children's data is never used for advertising. If we learn we hold a child's data without the required consent, we delete it.
An adult adding a child's information does not replace any required consent or authority. Children's data is not to be used for behavioral advertising. Contact our privacy contact if you believe a child's information has been provided inappropriately.
8. SECURITY AND UPDATES
Release builds connect to our servers only over HTTPS (encrypted in transit). Your password is not stored on the device; sessions use an access token specific to your account. Permission to view or edit a family tree is checked on the server according to your role, and purchases are verified with the app store before anything is granted. Data on your device is kept in the app's private storage. If a data breach affects you, we will notify you and the competent authority within the time limits the law sets.
You can manage camera, photo and notification permissions in your device settings. Refusing permission may limit the related feature. No system can guarantee absolute security.
Material changes are communicated appropriately, with renewed consent where required. Public policy: https://legal.disansohoa.com/privacy.