Privacy Policy

01. Scope & Data Controller

This Policy applies to all Apps published by Hien Nguyen on the Apple App Store and other distribution channels. The data controller responsible for your personal information is:

• Name: Hien Nguyen (Indie Mobile Developer)
• Email: contact@hiennv.dev

Specific Apps may publish additional, App-level privacy notices (for example, the “Privacy” section of an App’s Settings or its App Store listing). Where those notices conflict with this Policy, the App-level notice prevails for that App only.

02. Information We Collect

A. Information you provide directly

• Account information — only if an App offers an account (email address, display name, optional profile data);
• User content — journal entries, bookmarks, notes, photos, timer history, or other content you create inside the App;
• Support correspondence — messages you send when contacting us, including any information you choose to include.

B. Information collected automatically

• Device information — device model, OS version, language, timezone, App version;
• Diagnostic data — anonymized crash logs and performance metrics;
• Usage events — aggregated, non-identifying interactions (e.g. feature opened, screen viewed) — only if you have not disabled analytics.

C. Information stored on your device or in iCloud

Many of our Apps store your content locally on your device or sync it via your personal Apple iCloud / CloudKit account. We do not have access to data stored solely on your device or in your private iCloud database.

03. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Apps and their core features;
• Sync your content across your devices (where you opt in to sync);
• Diagnose, fix, and prevent technical issues, crashes, and security threats;
• Understand which features are used to prioritize improvements (in aggregate);
• Respond to your support requests and feedback;
• Comply with legal obligations and enforce our Terms of Use;
• Send essential service-related notices (we do not send marketing emails unless you explicitly sign up).

We do not use your personal information to train machine-learning models, and we do not sell, rent, or trade your personal information to third parties.

04. Legal Bases (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract — to provide the App you requested;
• Legitimate interests — to keep Apps secure, prevent abuse, and improve product quality;
• Consent — for optional analytics, push notifications, or any data sharing for which we ask explicitly. You may withdraw consent at any time;
• Legal obligation — to comply with applicable laws and lawful requests from public authorities.

05. Sharing & Disclosure

We share personal information only in the following limited circumstances:

• Service providers — vetted vendors that host servers, deliver crash analytics, or process payments on our behalf, bound by confidentiality obligations and acting only on our instructions;
• Legal compliance — when required by valid legal process, to protect our rights, or to investigate fraud, abuse, or security incidents;
• Business transfers — if our Apps are acquired or merged, your data may be transferred subject to this Policy;
• With your consent — when you direct us to share data (e.g. exporting to another service).

We never sell personal information.

06. Third-Party Services We Use

Depending on the App, the following categories of third-party services may process limited data on our behalf. Each link below points to that provider’s privacy policy.

• Apple — App Store, iCloud, CloudKit, StoreKit, TestFlight, App Analytics (account, sync, crash logs, anonymized usage);
• Google Firebase (crash reporting, anonymous analytics for some Apps);
• Supabase (backend storage where used);
• Sentry or equivalent (crash and performance diagnostics).

We configure these services to minimize the data collected and, where possible, anonymize identifiers.

07. Tracking & App Tracking Transparency

We do not track you across other companies’ apps or websites. Where Apple’s App Tracking Transparency (ATT) framework requires it, our Apps will request your permission before any activity that would qualify as “tracking.” If you decline, the App will continue to function normally.

We do not use third-party advertising SDKs by default. If a future App includes ads, that App’s in-product privacy notice and App Store privacy labels will disclose this clearly.

08. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Policy:

• On-device data — kept until you delete it or uninstall the App;
• iCloud-synced data — managed by your Apple account; deleting the App or your iCloud data removes it from sync;
• Account data — retained while your account is active and deleted within 30 days of an account-deletion request, except where we must retain it for legal or security reasons;
• Diagnostic logs — typically retained for 90 days, then deleted or anonymized.

09. Security

We use industry-standard safeguards to protect your data, including encryption in transit (TLS), encryption at rest where supported, scoped credentials, and the principle of least privilege. No security control is perfect, but we work hard to keep your data safe and to address vulnerabilities quickly.

If we become aware of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Your Rights

Subject to your local law, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information (the “right to be forgotten”);
• Restrict or object to certain processing;
• Port your data to another service in a structured, machine-readable format;
• Withdraw consent at any time where processing is based on consent;
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email contact@hiennv.dev. We respond within 30 days. We may need to verify your identity before fulfilling certain requests.

For most Apps, you can also delete your data directly inside the App via Settings → Account → Delete Account, or by uninstalling the App and removing it from your iCloud Storage.

11. Children’s Privacy

Our Apps are not directed to children under the age of 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at contact@hiennv.dev and we will delete it promptly.

Apps in the App Store’s Kids Category, if any, comply with additional Apple Kids Category guidelines, including no third-party advertising and no behavioral tracking.

12. International Transfers

We are based in Vietnam, and our service providers may operate in the United States, the European Union, or other countries. When personal data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses or rely on the data importer’s certified frameworks where applicable.

13. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any “sale” or “sharing” of your information for cross-context behavioral advertising. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise your California rights, email contact@hiennv.dev with the subject line “CCPA Request.” You may also designate an authorized agent to submit a request on your behalf.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version is always posted at this URL with the updated “Last updated” date. Material changes will be communicated through the Apps or via email where appropriate. Continued use of the Apps after changes take effect means you accept the updated Policy.

15. Contact

Questions, requests, or just want to know what we’re doing with a specific data point? Reach out — I read every email myself.