Privacy Policy

01Who we are

MON GROUP VIETNAM JSC (“MON GROUP”, “we”, “us”) is a joint stock company registered in Vietnam under enterprise code 0108715772, with its registered office at NV08, Zone 12, Lane 13 Linh Nam, Vinh Tuy, Hanoi, Vietnam.

For the purposes of applicable data protection law, MON GROUP VIETNAM JSC is the controller of the personal data described in this policy. Questions about it can be sent to ketoan.mongroup@gmail.com.

02What this policy covers

This policy applies to:

• this website at mongroup.org;
• the mobile applications we publish under the MON GROUP VIETNAM JSC developer account;
• the web applications and services we operate on our own account.

It does not apply to third-party websites or services we link to, or to software we build under contract that a client operates and controls under its own privacy policy. Where an individual application collects data beyond what is described here, that application publishes its own privacy notice, linked from its store listing, which applies in addition to this one.

03Information we collect

Information you give us

• Contact details — name, email address, phone number or company name, when you write to us or request support.
• Account information — where an application requires an account: an email address or phone number, a display name, and either a securely hashed password or an identifier from a third-party sign-in provider.
• Content you create — the records, notes, files, images and other data you enter into our applications in order to use them.
• Correspondence — the messages you send us and our replies.

Information collected automatically

• Device and technical data — device model, operating system version, application version, language, and the general region inferred from your IP address.
• Usage data — which features are opened and which actions are taken, together with the time of those actions.
• Diagnostics — crash reports, error logs and performance measurements.

What we do not collect

We do not collect precise location, contacts, photos, microphone or camera data unless a specific feature requires it — and then only after you grant that permission on your device. You can withdraw any of those permissions at any time in your device settings.

04How and why we use it

• To provide the service — creating and maintaining your account, storing and synchronising your data, and delivering the features you ask for. Basis: performance of a contract.
• To support you — answering questions, investigating faults and restoring access. Basis: contract and our legitimate interest in supporting our users.
• To keep the service safe — detecting abuse, fraud and unauthorised access, and enforcing our Terms of Use. Basis: legitimate interests and legal obligation.
• To improve our products — understanding which features are used, diagnosing crashes and measuring performance. Basis: legitimate interests, or your consent where the law requires it.
• To communicate with you — service notices, security notices and changes to our terms. Marketing messages are sent only with your consent and can be stopped at any time.
• To meet legal obligations — accounting, tax, and lawful requests from competent authorities. Basis: legal obligation.

05Sharing and disclosure

We share personal data only in the following circumstances:

• Service providers — hosting, storage, error reporting, email delivery and payment processing. They act on our instructions under written agreements, and only to the extent needed to perform their service.
• App stores — Apple and Google process purchases, subscriptions and refunds under their own privacy policies. We never receive your full payment card details.
• Legal requirements — where disclosure is required by law, court order or a lawful request from a competent authority, or is necessary to protect our rights, our users or the public.
• Business transfer — if the company or part of it is reorganised, merged or acquired, personal data may transfer as part of that transaction. We will give notice before your data becomes subject to a different policy.

06How long we keep data

We keep personal data only as long as it is needed for the purposes set out above. Account data is kept while your account is active, and for a limited period after it is closed so that an accidental deletion can be reversed and so that we can meet legal and accounting obligations. Diagnostic logs are kept for a short period and are then deleted or reduced to aggregate statistics. When data no longer needs to identify anyone, we delete it or anonymise it.

07Security

We apply technical and organisational measures appropriate to the risk: encryption in transit (TLS), encryption at rest where our platform supports it, access limited to the members of our team who need it, passwords stored only as salted hashes, and regular updates to our dependencies and infrastructure.

No system is perfectly secure. If a breach affects your personal data and creates a significant risk to you, we will notify you and the competent authority within the time frames the law requires.

08International transfers

We operate from Vietnam and use established cloud providers whose data centres may be located outside Vietnam. Where personal data crosses a border, we take the steps required by applicable law — including contractual protections with our providers — so that the data continues to receive an appropriate level of protection.

09Your rights and choices

Depending on where you live, you may have the right to:

• access a copy of the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data;
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw a consent you gave earlier, without affecting processing that already took place.

To exercise any of these, write to ketoan.mongroup@gmail.com from the address associated with your account. We reply within 30 days, and we may need to verify your identity before we act. If you are not satisfied with our response, you may complain to the data protection authority in your country.

10Deleting your account and your data

You can delete your account, and the data attached to it, at any time:

• In the application — where an application supports in-app deletion, the option is under Settings → Account → Delete account.
• By email — write to ketoan.mongroup@gmail.com from your account email address, with the subject “Delete my account”, naming the application concerned.

Deletion removes your profile and the content stored under your account from our production systems. Backups rotate on a fixed schedule and residual copies are removed within 30 days. We keep only the limited records the law requires us to keep — for example invoices and transaction records — for the period set by Vietnamese law.

11Children's privacy

Our products are intended for people aged 13 and over, and are not directed at children under that age — or under 16 where local law sets a higher threshold. We do not knowingly collect personal data from children below the applicable age. If you believe a child has given us personal data, write to ketoan.mongroup@gmail.com and we will delete it.

12Third-party services

Our applications may rely on third-party components for hosting and infrastructure, crash and performance reporting, authentication (for example Sign in with Apple or Google), push notifications, and payment processing through the app stores. These providers process data under their own privacy policies. Where an application uses a service that is not covered here, it is listed in that application's own privacy notice.

13Cookies on this website

This website is a set of static pages. It sets no advertising cookies and does not track you across other sites. It stores one preference in your browser's local storage — your choice of language — which never leaves your device and can be cleared from your browser settings at any time.

Web fonts on this site are served by Google Fonts, which receives your IP address as part of that request and processes it under Google's own privacy policy.

14Changes to this policy

We may update this policy as our products change or as the law requires. For material changes we give notice inside the application or by email before the change takes effect. Continuing to use our services after a change takes effect means you accept the updated policy.

15How to contact us

Write to us about anything in this policy, or about a request concerning your personal data: