Privacy Policy

1. Who we are

Ăn Hạnh Phúc is a non-profit project run by Ly Phi Lan (Founder). For any privacy question, write to lanlp.personal@gmail.com.

2. Information we collect

• Account: email, password (stored only as a one-way hash that nobody can read back), display name, profile picture, phone number if you sign in with it or add it yourself.
• Signing in with Google, Facebook or Apple: the account ID, email and name the provider sends us (with Apple this may be a private relay address). We never receive your Google / Facebook / Apple password.
• What you submit: vendor suggestions (name, items, the vendor’s phone number, location, photos or proof documents), information updates, comments and messages, reports, feedback (with photos if any) and your saved vendors.
• Visits (Notebook): when you tap “I visited”, the app asks for your location to confirm you are at the vendor. We only store the distance to the vendor (rounded to 5 m), the date and which vendor. We do not store your coordinates.
• Location for finding nearby vendors: sent with the search to sort results; it is not linked to your account and is not stored.
• Vendors: profile information (name, items, prices, hours, selling location, area, photos, story, contact phone) and proof of ownership when registering.
• Push notifications: if you turn them on, your browser / phone gives us an address to deliver notifications to (in the Android / iOS app, a Firebase Cloud Messaging device token), which we store together with the app version to send you notifications.
• Blocking: when you block someone we store the pair “you – blocked person” so their content is hidden from you. The blocked person is not notified.
• Technical information: anonymous usage events (tied to a temporary per-tab session ID, not to your account) and page-speed measurements. We also count the total number of times each shop page is opened per month and how many images failed to load (by type of image) — totals only, never tied to a viewer. Your IP address is used only briefly to prevent abuse (rate limiting) and is not stored in your profile.
• Logs: important actions (sign-ins, email changes, publishing / hiding profiles, administrator actions…) are recorded for security and to handle complaints.

3. What is stored in your browser

The app keeps a few things in your browser so it can work: your sign-in session, language, tutorial progress, saved vendors when you are not signed in, and some display choices. We do not use advertising or third-party tracking cookies.

4. How we use information

• Create and keep your account and let you sign in securely.
• Show the map and vendor lists and find vendors near you.
• Record visits and work out medals and badges.
• Review suggestions, updates and reports, and moderate content to keep the community safe.
• Send necessary emails (email verification, password reset, email change) and in-app / push notifications you turned on.
• Protect the service and detect and prevent abuse.
• Understand how the app is used (from anonymous data) to improve it.

5. What is shown publicly

• A vendor profile is public only after the vendor agrees to it. Vendors can withdraw that agreement at any time, and the profile is hidden immediately.
• Public comments and messages show your display name (and your medal, if you choose to show it).
• Feedback picked as a "featured testimonial" shows the author’s name. If you have not set a display name, the part of your email before the @ is used as your name. You can set a display name on the Account page to change this.
• Your email, sign-in phone number, password and visit history are never shown publicly.

6. Who we share with

We do not sell or rent your data. To run the service we use a few providers, who process data only to provide their service to us:

• Hosting: Vercel (website), Render (server), Neon (database), Supabase Storage (photos).
• Backups: every day we back up the database (encrypted, only we hold the key) and photos to Cloudflare R2, kept for up to 12 months and used only to recover from incidents.
• Email delivery: Brevo.
• Maps: Google Maps, CARTO, MapTiler, Esri. Your browser loads map tiles directly from them, so they see your IP address, as with any online map.
• Sign-in: Google, Facebook, Apple (only if you choose to sign in that way).
• Push notifications: the notification services of your browser / operating system (Google, Apple, Mozilla, Microsoft); in the Android / iOS app, Firebase Cloud Messaging (Google) and the Apple Push Notification service.
• App stores: Google Play and the App Store only know that you installed the app; we never receive your store account details.
• Competent authorities, when required by law.

7. How long we keep information

• Your account information and content are kept until you delete your account.
• When you delete your account: it is locked and your content is hidden immediately; after 30 days your personal information and all your content are permanently deleted. Within those 30 days you can contact us to restore it.
• In-app notifications: read notifications are removed after 7 days and all notifications after 30 days.
• Security logs are kept for security and complaint handling; old logs may be archived separately and then removed from the system.

8. Your rights

• View and edit your information on the Account page; change your email, display name and profile picture.
• Turn push notifications off at any time.
• Block other users so you no longer see their content; unblock on the Account page.
• Vendors: withdraw public consent for their profile at any time.
• Request a copy of your data or make a complaint: email us.
• Delete your account directly on the Account page.

9. How to delete your account

• Sign in, open the Account page, choose "Delete account" at the bottom and confirm.
• Your account is locked immediately and you are signed out everywhere (notification device tokens are deleted); your vendor profiles and messages are hidden right away. If you signed in with Apple, we also ask Apple to disconnect the link.
• After 30 days, your personal information and all your content (vendors you own, suggestions, messages, updates, reports, visits, feedback, saved list) are permanently deleted and cannot be recovered.
• Cannot sign in? Email lanlp.personal@gmail.com from your registered address and we will delete it for you.

10. Security

Connections are always encrypted (HTTPS). Passwords are one-way hashed. Only a few operators have administrator rights, and every administrator action is logged. No system is perfectly secure; if an incident affects you, we will let you know.

11. Children

Ăn Hạnh Phúc is not designed for children. If you are under 16, please use the app with the consent of a parent or guardian.

12. Changes to this policy

When this policy changes, the date at the top of the page changes too. Important changes are announced in the app.

13. Contact

Email: lanlp.personal@gmail.com