Privacy Policy · Da Nang Guide

1. About this policy

Da Nang Guide is a city guide app and website for Da Nang and the surrounding area. It helps people find restaurants, cafés, hotels, apartments, shops, activities, services and events, and lets businesses manage their own listings.

Da Nang Guide is operated by [operator name not yet provided], [operator address not yet provided], tax code [tax code not yet provided] ("we", "us"). We decide why and how the personal data described here is processed.

This policy applies to everyone who uses Da Nang Guide:

Visitors, who browse without an account.
Users, who sign in with a personal account to save places, write reviews, submit events or contact us.
Business owners and their staff, who sign in with a business account to claim and manage listings and buy plans.

It explains what personal data we collect, why, who can see it, who we share it with, where it is stored, how long we keep it, and the rights you have. It is written for an international audience; the app is operated from Vietnam, and Vietnamese law applies, in particular Law No. 91/2025/QH15 on Personal Data Protection and Decree 356/2025/ND-CP.

This is version 2.0. It replaces version 0.1. [Effective date: set when this version is published after legal review.]

2. Information we collect

We collect only what the app needs. Some information you give us; some is created automatically when you use the app. We do not collect passwords, payment card numbers or bank account details.

A. Account information (you provide)

Email address: used to sign in. We send a one-time code to it; there is no password.
Display name: optional. Until you change it, it is "Guide member". It is shown with your reviews.
Home city: the city you choose in the app.
Account identifiers: a random account ID created when you sign up.
Your agreement to our Terms and this policy: which version you accepted, in which language, and when.

B. Business owner information (you provide)

When you claim a listing: your name, email, phone number, your role at the business (owner, manager or authorised staff), verification details you give us (for example a business licence number), a message, and, if you choose, a proof document or photo.
Your role on each business you manage (owner or staff), and a history of when access to a business was given or removed.
Business details you add or change: description, opening hours, contact details, website and social links, photos, menu pages, amenities, promotions and apartment listings.
Plan requests and billing records: the plan, term, agreed price, discounts, whether you asked us to contact you about renewal, and, when a payment is recorded, the amount, method (bank transfer, cash or other) and payment reference. Payments are made outside the app; we do not receive card or bank account numbers.

C. Content you post (you provide)

Reviews and ratings, shown with your display name.
Reports you make about reviews or events, and people you block.
Events you submit: the event details, an optional organiser name, phone and email, and a cover image.
Help & Feedback messages: the subject, your message, an optional contact email, screenshots or photos you attach, and any business or event you mention. This includes problem reports, suggestions, business suggestions and complaints.
Saved places.

The app does not have comments, direct messages between users, videos or livestreams.

D. Location information (only if you allow it)

The app asks for your device's location only when you tap a location feature, such as "My location" or "Find nearby" on the map, or sorting by distance. You can refuse; the rest of the app keeps working.
For "Find nearby", your coordinates are sent to our server to find places close to you. They are used for that search and are not saved with your account or in our database.
Centring the map and sorting by distance happen on your device.
We do not track your location in the background.

E. Technical and usage information (collected automatically)

Sign-in sessions: when you sign in, our hosting provider's sign-in service records the session, including the IP address and the device or browser type it came from.
Server logs: our hosting provider keeps request logs that include IP addresses, for a limited period set by its service. [Log retention period: to be confirmed.]
Usage counts: to show businesses how often their page is viewed and their contact buttons are used, and to share sponsored places fairly, the app counts views and taps on business pages, sponsored places, advertisements and partner booking links. These counts use a random identifier created on your device. It is not your name, email or account, and it is not linked to your account. Each item is counted at most once per device per day.
On your device, the app stores your sign-in session, your language choice, the random identifier above, and a plan a business owner chose before their claim was approved.
The app does not collect your device model, operating system version, advertising ID or contacts. It contains no analytics, crash-reporting or advertising tools, and uses no tracking cookies. The website version keeps the same items in your browser's local storage.

3. How we use personal data, and why

We use personal data only for the purposes below. Each purpose has its own legal basis; accepting this policy is not a general consent to everything. [Counsel to confirm the legal basis for each purpose under Law 91/2025/QH15.]

Creating and running your account, and signing you in: to provide the service you asked for.
Keeping accounts secure and preventing abuse, fraud and spam: to provide the service safely, and to meet legal obligations.
Showing business listings, search, filters and maps: to provide the service.
Checking business ownership claims and giving owners access: to provide the service to business owners.
Handling plan requests, payments, renewals and reminders: to perform our agreement with the business, and to keep accounting records the law requires.
Publishing and moderating reviews, events, photos and other content: to provide the service and keep it lawful and safe.
Answering Help & Feedback messages, complaints and privacy requests: to provide the service and meet legal obligations.
Sending sign-in codes and in-app notices about your account, requests, plans and listings: to provide the service.
Usage counts for business statistics and fair sponsored rotation: [legal basis, and whether consent is needed, to be confirmed by counsel].
Location for nearby search: your permission, given in your device settings when you use the feature.
Meeting legal obligations and responding to lawful requests from authorities.

We do not sell personal data, and we do not use it for advertising profiles.

4. What other people can see

Some information is public by design. Anyone using the app or website can see:

Published reviews and ratings, with the reviewer's display name.
Published events, including any organiser name, phone and email shown on the event. Only include an organiser's contact details if they agreed.
Business listings, including the contact details, photos, menus, promotions and apartment listings the business or we added. For a sole trader, these details may be personal data.

Public content can be seen by anyone, may be shared from the app, and may be copied or found outside the app. Your email address, phone number and account details are never shown to other users unless you put them in public content yourself.

To remove your own review, delete it in the app. To ask us to remove other content about you, use Help & Feedback or email [privacy email not yet provided]; we will remove it when the law or our rules require.

5. Business owners

Claims: we check every claim by hand before anyone can manage a listing. A proof document is kept privately and seen only by you and our team. If we refuse a claim, we delete the proof file.
Managing a listing: changes, photos and promotions you submit are stored with the listing. Our team can see who made them.
Staff: owners and staff each sign in with their own email.
Plans: we keep plan requests, subscriptions and payment records to run your plan and for accounting.
Statistics: you see counts of views and clicks, never who viewed your listing.
Communication: we contact you about your claim, listing and plan through the app and by email.

If you stop managing a listing or close your account, the listing stays in the guide as a public directory entry with the business's public details. If a paid plan is running, you need to end it or ask us to transfer the listing before you can delete your account. When a plan ends or is cancelled, the listing moves to the free listing; nothing is deleted automatically. Subscription and payment records are kept as described in section 9.

6. Cookies, analytics and tracking

Da Nang Guide does not use analytics services, advertising networks, crash-reporting tools or tracking cookies. The only usage measurement is the anonymous-identifier counts described in section 2E. If we add any such tool, we will update this policy first and ask for your consent where the law requires.

7. Who we share data with

We share personal data only with the services that run the app, or when you choose to go to another service.

Supabase: hosts our database, sign-in and file storage, and runs our server functions. It processes all the data in section 2 on our behalf (processor). [Data processing agreement: to be confirmed.]
Email delivery: sign-in codes are sent through an email delivery provider, which receives your email address and the code (processor). [Provider for the live app: to be confirmed; Resend is being set up.]
Maps: Google Maps on Android and Apple Maps on iPhone display the map. When a map loads, they receive your device's IP address and map requests, and your location if you choose to show it. They act under their own privacy policies.
Booking partners (Agoda, Klook): some listings have a booking button that opens the partner's website or app. We do not send them your personal data; what you share with them is governed by their privacy policies. We may earn a commission.
WhatsApp, Zalo, phone and websites: contact buttons open those services; anything you send goes directly to them and the business.
App stores: Apple and Google distribute the app and process your download under their own policies. Plans are not sold through in-app purchase.
Banks: plan payments are made by bank transfer or cash; your bank and ours process the transfer under their own terms.
Authorities: when the law requires, for example a lawful request from a competent Vietnamese authority.
A buyer or successor: if our business is transferred, personal data may be transferred with it, under this policy.

We do not use hCaptcha or any other security check at sign-in at the moment. [If it is switched on, it will receive IP and device data; this policy will be updated first.]

8. International data transfers

Our database, sign-in and files are hosted by Supabase in Tokyo, Japan. This means personal data of users in Vietnam is transferred outside Vietnam. Our hosting and email providers may also access data from other countries to provide support. [Countries and safeguards to be confirmed.]

We transfer data abroad only to run the app. Under Law 91/2025/QH15, cross-border transfers require an impact assessment dossier. [Status of the cross-border transfer impact assessment: not yet prepared; to be completed before launch.]

For questions about international transfers, contact [privacy email not yet provided].

9. How long we keep data

We keep personal data only as long as needed for the purposes above, unless the law requires longer.

Account information: until you delete your account.
Business listings: kept as part of the guide; a business can ask us to archive its listing.
Claim proof documents: deleted if the claim is refused; otherwise kept until the account that uploaded them is deleted. [Retention period: to be decided.]
Reviews: until you delete them; after account deletion they stay without your name.
Events: kept as part of the events list; organiser contact details are removed when the submitter's account is deleted.
Help & Feedback messages: until you delete your account. [Retention period: to be decided.]
Usage counts: [retention period: to be decided].
Subscription and payment records: [period required by Vietnamese accounting and tax law: to be confirmed].
Records of our team's actions and moderation decisions: [retention period: to be decided].
Records of your acceptance of the Terms and this policy: until you delete your account. [Counsel to confirm whether these must be kept longer as proof.]

Where a period is marked "to be decided", it has not yet been set, and data is kept until it is deleted by you, by us, or by account deletion.

10. How we protect data

Access rules in our database decide who can read and change each kind of information. For example, only a business's owner and staff can manage it, and users can only see their own requests.
Our team's access is limited to the people who need it, by role (administrators and support staff), and their actions are recorded.
Private files, such as claim proofs and support pictures, are stored privately and are not public.
Data travels between the app and our servers over encrypted connections.
You sign in with one-time codes, so there is no password to steal.
[Backups: being set up.]

No system is completely secure. If you notice a problem, contact us.

11. Your rights

Under Vietnamese law, you have the right to:

Be informed about how your personal data is processed.
Give, refuse or withdraw consent where processing relies on consent.
Access your personal data and get a copy.
Correct your personal data.
Ask us to delete your personal data.
Ask us to restrict processing, or object to it.
Complain, and bring a claim, to a competent authority.
Any other rights the law gives you.

You can change your display name, delete your reviews, remove saved places and delete your account in the app. For any other request, use Help & Feedback ("Privacy request") or email [privacy email not yet provided]. We may ask you to confirm the request from the email address on your account. We confirm requests and answer within the time limits set by Decree 356/2025/ND-CP. [Exact time limits to be confirmed against the official text.] We may need to keep some data where the law requires it, and we will tell you if so.

12. Consent and withdrawing it

When you create an account after our Terms and this policy are published, you tick a box to agree to the Terms and acknowledge this policy. That record is kept separately from any consent for a specific purpose.
Location: your device asks for permission the first time you use a location feature. You can withdraw it at any time in your device settings; location features then stop working, and everything else keeps working.
[Usage counts: whether a separate consent is required is to be confirmed by counsel.]
Withdrawing consent does not affect processing that happened before.

13. Messages we send

We currently send only:

Sign-in emails with your one-time code.
In-app notices about your account, your Help & Feedback requests, your claims, your listings, plan reminders and renewals.

We do not send marketing emails or push notifications. If we add optional promotional messages, we will ask for your consent first and let you opt out at any time.

14. Children

[Minimum age to use Da Nang Guide: to be confirmed by the operator and counsel.] The app is not designed for children. If you believe a child has given us personal data without the required parental consent, contact [privacy email not yet provided] and we will delete it.

15. Deleting your account

You can delete your account at any time in the app: Profile, then Delete account. Deletion is permanent. If you own a business listing with an active paid plan, the app asks you to cancel the plan or transfer the listing first.

When you delete your account, we delete:

your account and sign-in details, including your email address,
your profile and display name,
your saved places,
your Help & Feedback requests, their messages and any files you attached,
event cover images you uploaded that were still waiting for review,
proof of ownership you uploaded with a business claim, and your claims,
your notifications and your memberships of business listings,
the organiser name, phone and email on events you submitted,
your acceptance records.

Some content stays, without your name:

Reviews you published stay visible but are shown as written by "Former member" and are no longer linked to your account.
Events you submitted stay, without the organiser contact details.
Business listings stay in the guide, including changes and photos added to them.
Subscription, payment, moderation and administration records are kept where we need them to run the service, keep accurate accounts or meet legal obligations, no longer linked to your account where possible.

[Backups: once set up, deleted data may remain in backups for a limited period before it is overwritten.]

16. Data breaches

If a personal data breach happens, we act to contain it, assess the risk, and notify the competent authority within 72 hours where the law requires. We tell affected people as soon as possible when it is likely to affect them, with what happened and what they can do.

17. Contact and complaints

General support: Help & Feedback in the app, or [support email not yet provided].
Privacy requests and questions: [privacy email not yet provided].
Business contact: [operator name not yet provided], [operator address not yet provided], phone [operator phone not yet provided].

If you are not satisfied with our answer, reply to it and a different person will review it. You can also complain to the competent authority for personal data protection in Vietnam.

18. Changes to this policy

When this policy changes, we publish a new version with its number and date, and keep earlier versions. For important changes, we tell you in the app, and you may be asked to read and acknowledge the new version before you continue using your account. We record which version each person acknowledged.