Privacy Policy

1. Introduction

Localis is a non-profit cultural knowledge platform that helps people understand Vietnam through the people who live it. This Privacy Policy explains how Localis collects, uses, stores, shares and protects your personal data when you use the Localis mobile application, the localis.vn website and related services (together, the “Service”).

This Policy is prepared in accordance with Vietnam’s Law on Personal Data Protection No. 91/2025/QH15, Decree 356/2025/ND-CP and other applicable Vietnamese regulations. By creating an account or using the Service, you confirm that you have read and understood this Policy. For each processing activity that requires consent, we will ask for your consent clearly and separately for each purpose, within the app.

2. Data controller and contact

3. Personal data we collect

We follow a data-minimization principle: we collect only what we need for the features you use.

3.1. Data you provide directly

• Account information: name or display name, email address (used for registration and verification), optional profile photo, preferred language.
• Personalization information: the role you choose at onboarding (e.g., international traveler, Vietnamese rediscovering your homeland) and your interests (food, festivals, craft villages, etc.).
• Content you submit: questions to the Ask Localis assistant (text or voice), photos you take to scan dishes or translate menus, saved collections and trip plans.
• Support communications: the content of messages you send to our support team.

3.2. Data collected with your device permissions

• Location: precise or approximate device location, only with your permission, to show places near you (Nearby), nearby events, local weather, and the nearest official support point in the safety feature. You can revoke location permission at any time in your device settings; location-based features will then be unavailable.
• Microphone: voice recordings only when you actively tap to speak to Ask Localis or use the interpreter feature. The app does not listen in the background.
• Camera / photo library: images you actively capture or select to scan dishes or translate menus.

3.3. Data collected automatically

• Technical data: device type, operating system, app version, operational device identifiers, system language, time zone.
• Usage data: features used, crashes and error logs, to keep the Service stable and improve it.

3.4. Data we do NOT collect

• We do not collect payment data (the Service is currently free with no in-app transactions).
• We do not intentionally collect sensitive personal data (such as health status, political opinions, religion, or biometric data for identification). Please do not include such information in your submissions.

4. Purposes and bases of processing

• Providing the Service (creating and managing your account, displaying content, saving collections, syncing across devices) — based on your consent and the performance of our agreement to provide the Service.
• Personalizing your experience (recommending places and events based on your chosen interests and language) — based on your consent; you can adjust or delete your interests at any time.
• Operating location-based features — based on your consent via the device location permission.
• Operating AI assistant features (Section 5) — based on your consent when you use the feature.
• Keeping the Service safe: preventing fraud and abuse, and enforcing our Terms of Use.
• Improving the Service using aggregated, non-identifying statistics.
• Complying with lawful requests from competent Vietnamese authorities.

5. Artificial intelligence features

Some Localis features use AI technology: the Ask Localis assistant, trip planning (Build my trip), dish recognition from photos, and translation/interpretation.

• When you use these features, we process the content you provide (questions, voice, images) to generate a response. Our AI model provider, Alibaba Cloud, may process it as our data processor under contract.
• AI-generated content is labeled or clearly presented as AI content. It is for reference only and may be inaccurate or out of date. Please verify important details (opening hours, prices, local rules) before relying on them.
• We do not use your private content to train AI models for purposes other than providing the Service, unless you give separate consent.

6. Sharing personal data

• With data processors that provide infrastructure for the Service: HOSTVN Technology Solutions Joint Stock Company (server hosting) and Alibaba Cloud (AI model processing). They may only process data on our instructions and under data protection agreements.
• With competent state authorities upon lawful request under Vietnamese law.
• In a corporate reorganization (merger, transfer), provided the recipient commits to equivalent data protection and you are notified.

We do not otherwise share your personal data with any third party.

7. Cross-border data transfers

Your account data is stored on servers located in Vietnam. Content you submit to AI features (Section 5) may be processed on our AI model provider’s infrastructure outside Vietnam. In that case, we transfer it in accordance with the Law on Personal Data Protection and its implementing regulations, including preparing a cross-border transfer impact assessment and applying appropriate safeguards.

8. Retention

• Account data: for as long as your account is active and up to 30 days after you request deletion (a recovery window in case you change your mind), unless a longer period is required by law.
• Voice recordings and images submitted to AI features: retained only as long as needed to process your request and assure service quality, for a maximum of 30 days, then deleted or anonymised.
• Technical logs: up to 12 months for system security.

9. Your rights

Under Vietnam’s Law on Personal Data Protection, you have the right to know about the processing of your data; to give or refuse consent; to access and obtain a copy of your data; to rectify inaccurate data; to delete your data (see the Account Deletion guide at localis.vn/support); to withdraw consent without affecting the lawfulness of prior processing; to restrict or object to processing in cases provided by law; and to complain, denounce, initiate lawsuits, claim damages and self-protect under the law.

To exercise these rights, use the tools in the app’s Settings (edit profile, revoke permissions, delete account) or contact kimanh.nguyen@localis.vn. We respond within statutory time limits and may need to verify your identity first to protect you.

10. Children’s data

The Service is not intended for children under 16 to create their own accounts. We do not knowingly collect personal data of children under 16 without parental or guardian consent as required by law. If you believe we have collected a child’s data improperly, please contact kimanh.nguyen@localis.vn so we can delete it promptly.

11. Security

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit, role-based access control, and periodic security reviews. No transmission or storage method is completely secure; please also protect your login credentials.

12. Data incident notification

If a personal data protection violation occurs that affects you, we will notify the competent authority and you in accordance with the procedures and time limits required by law, together with remediation measures.

13. Changes to this Policy

We may update this Policy. For material changes, we will notify you in the app and/or by email before the change takes effect, and re-obtain consent where required by law. The current version is always available at localis.vn/privacy.

14. Contact