Privacy Policy

Last updated: 2026-06-14 · Effective date: June 14, 2026

This Privacy Policy ("Policy") describes how Vinacash Co., Ltd (Business Reg. No.: 0110128080; "Vinacash", "we", "us") collects, uses, stores, shares and protects information when you use the Vinacash mobile app (iOS and Android), the vinacash.vn website, and related services (collectively, the "Services").

By installing, registering for, or using the Services, you confirm that you have read and understood this Policy. If you do not agree, please stop using the Services.

This Policy is designed to comply with the laws of Vietnam, in particular Decree 13/2023/ND-CP on Personal Data Protection (PDPD), the Law on Cyber-information Security and the Law on Cybersecurity, and to meet the requirements of the Apple App Store and Google Play. For users in other regions, we apply equivalent principles (e.g., GDPR-style rights where applicable).

1. Data processing roles

Vinacash is a Software-as-a-Service (SaaS) platform for lending/pawn businesses ("Shop Owners").

• For Shop Owner account data (registrant, staff), Vinacash is the Data Controller.
• For borrower data entered by the Shop Owner (names, identity documents, photos, contract data, etc.), the Shop Owner is the Data Controller and Vinacash acts only as a Data Processor, acting on the Shop Owner's instructions. The Shop Owner is responsible for having a valid legal basis/consent from borrowers before entering their data.

2. Information we collect

2.1. Information you provide at registration

Full name, phone number, email, username, password (stored encrypted), shop name and initial shop configuration, and staff information you create.

2.2. Business data you enter while using the Services

Including personal data of borrowers entered by the Shop Owner, for example:

• Borrower's full name, phone number, address;
• National ID / Citizen ID number, issue date, issue place (sensitive personal data);
• Customer photos, asset and contract documents/photos;
• Contract data for pawn, lending, rotating credit (bát họ) and capital: amounts, interest rates, terms, payment history, outstanding balances;
• Communications with customers (Conversations feature): text, images, audio, attachments.

2.3. Information collected automatically

• Device information (model, OS, app version), device/app identifiers;
• Log data (access times, actions, crashes), IP address;
• Push token to deliver notifications via Firebase Cloud Messaging (FCM).

2.4. Data accessed via device permissions

Depending on the feature and your permission, the app may access: Camera and Photo Library (capture/attach photos of IDs, assets, documents), Microphone (voice messages in Conversations), Contacts (look up/contact customers), Location (optional, to show relevant information), and Notifications. See Permissions & Data Safety.

2.5. Biometric data

If you enable login via Face ID/Touch ID (iOS) or fingerprint (Android), authentication is performed by the device operating system. Vinacash does not collect, store or transmit your biometric data.

2.6. Payment information

When you purchase/upgrade a plan, the transaction may be processed via the App Store/Google Play or a third-party payment gateway. Vinacash does not store full card numbers; we only retain necessary plan, status and transaction history information.

3. Purposes and legal bases

We do not sell your personal data.

4. Data sharing & third parties

We share data only in the following cases:

• Service providers (sub-processors): hosting/server infrastructure, Google Firebase (FCM push notifications, crash analytics), SMS delivery services, payment gateways. These parties process data only under our contracts and instructions.
• Apple/Google: when you install and make in-app purchases.
• Legal requirements: in response to lawful requests from competent authorities.
• Business transfers: in the event of a merger, acquisition or restructuring, with equivalent data-protection commitments.

5. International data transfers

Some providers (e.g., Google/Firebase) may process data on servers outside Vietnam. In such cases we apply appropriate safeguards and comply with Vietnamese requirements on cross-border transfer of personal data.

6. Data retention

We retain data while you use the Services and for as long as necessary to: (i) fulfil the stated purposes, (ii) comply with legal obligations (e.g., financial records), and (iii) resolve disputes. After account deletion, data is handled per Account Deletion.

Data is also stored on your own device (a local database) to enable offline operation, and is removed when you uninstall the app or log out/clear local data.

7. Security

We apply reasonable technical and organisational measures: encryption in transit (SSL/HTTPS), password encryption, role-based access control, and periodic backups. No system is perfectly secure; you are responsible for keeping your login credentials confidential.

8. Your rights

Under Decree 13/2023/ND-CP, you have the rights to: be informed, consent, access, rectify, delete, restrict/object to processing, withdraw consent, request data portability, and lodge a complaint.

• You can view/edit most of your data directly in the app.
• To delete your account and data, see Account Deletion.
• For any other request, contact [email protected]. We respond within the time limits required by law.

9. Children

The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect children's data. If we discover such data, we will delete it.

10. Shop Owner responsibilities

When entering borrowers' personal data, the Shop Owner undertakes to: have a valid legal basis/consent, inform borrowers about the processing, collect only necessary data, and use it for lawful purposes only. Vinacash is not responsible for a Shop Owner's unlawful processing of data.

11. Cookies & website

The vinacash.vn website may use cookies/similar technologies to operate and measure performance. You can manage cookies through your browser.

12. Changes to this Policy

We may update this Policy. Updates will be posted at vinacash.vn with a new effective date; for material changes, we will notify you via the app or email.

13. Contact

If you believe your rights have been violated, you may lodge a complaint with the competent authority in accordance with the law.