Privacy Policy

We process your personal data based on explicit consent (Article 11, Law 91/2025/QH15). When registering an account, you are required to read and agree to this Privacy Policy before using our service. You may withdraw your consent at any time by deleting your account.

We collect account and destiny-profile information, content and results you create in the app, and technical data needed to provide the service. Technical data can include timezone, language, theme, push tokens, device or app identifiers, interaction data, and diagnostics. We do not collect real-time location, biometric, or financial information.

We use information to provide personalized interpretations and AI, subscribed notifications, account security, diagnostics, performance improvements, and campaign measurement. With the relevant consent and operating-system permission, we may deliver or measure relevant advertising. We do not sell personal data.

We share data only as needed with service providers: Google for OAuth, Firebase and AdMob; Liftoff Monetize (Vungle) for ad mediation; Google Gemini for AI; RevenueCat for subscriptions and entitlements; AppsFlyer for attribution; and cloud infrastructure for secure storage. We do not sell, trade, or provide user lists to third parties.

Firebase processes analytics, diagnostics, performance and notification data; RevenueCat manages subscriptions and transaction restoration. AppsFlyer measures install and campaign attribution and may process device or app identifiers and attribution events. On iOS, AppsFlyer starts only after an App Tracking Transparency decision: events and customer user ID are sent after login only when authorized; when denied, the app sends neither customer user ID nor events, blocks partner sharing, and uses an anonymized, limited session. AdMob and its mediation partners (including Liftoff Monetize/Vungle) may process Advertising ID, technical data and ad interactions according to consent, operating-system permission and ad settings. We do not sell personal data.

Personal data is retained while your account is active. Upon account deletion (in-app Settings or menh.guru/delete-account), the account is deactivated immediately and is no longer used for any service, notification, or marketing purpose. The account record is kept in a locked state for audit and statistics; remaining personal data is deleted or anonymized per the retention schedule, within 30 days.

With optional marketing-cookie consent, we store campaign parameters from landing URLs on your device for up to 30 days. In the app, AppsFlyer processes attribution according to the ATT choice; when denied, privacy-preserving mechanisms such as SKAN or AdAttributionKit may be used where configured. Marketing consent is optional; you can revoke cookie consent and change tracking permission in iOS Settings.

All data is encrypted in transit using TLS 1.3 and securely stored with strict access controls. Passwords are hashed and never stored in plaintext. We conduct regular security reviews.

You have the following rights: (1) Right of access: view and download all personal data from your Profile; (2) Right to rectification; (3) Right to erasure: permanently delete your account and all data; (4) Right to withdraw consent; (5) Right to data portability: download data in JSON format; (6) Right to complain: file a complaint with the Vietnamese Personal Data Protection Authority.

When adding relative information to the "Connections" feature, you confirm you have obtained their consent. Relative data is deleted when you remove the connection or delete your account.

Contact: privacy@menh.guru — We respond within 5 business days. You may also file a complaint with the Personal Data Protection Authority (Ministry of Public Security, Vietnam).