Политика конфиденциальности

Last updated: July 10, 2026

This Privacy Policy (the "Policy") describes how information is collected, used, stored, and protected when you use the Red Star mobile application (the "App"), which provides reference information about venues located in various cities of the Socialist Republic of Vietnam and lets you sign in, submit requests, and contact our managers. By using the App, the User agrees to the terms of this Policy.

1. General Provisions 1.1. The App is primarily informational and reference in nature. 1.2. To use the App, the User signs in using a third-party sign-in provider — Apple ("Sign in with Apple") or Google ("Sign in with Google"). When you sign in, the App creates a user account that is stored on the Owner's servers. 1.3. The App also lets you submit requests (bookings) and provides a chat/support feature that lets you send messages, photos, and files to our managers. 1.4. The data operator (controller) is the Owner of the App.

2. What Data Is Collected 2.1. Account Data (via Apple / Google sign-in) When you sign in, the App receives from Apple or Google and stores on the Owner's servers: • a unique identifier associated with your Apple or Google account; • your email address (Apple may provide a private "relay" email address instead of your real one, if you choose to hide your email); • your name, where the provider makes it available. The App does not receive your Apple or Google password. Authentication is performed by Apple or Google, and the App only receives the confirmation (token) and the data listed above. If you set or change your display name in the App, that name is also stored on the Owner's servers so that managers can see who they are talking to.

2.2. Request and Booking Data When you submit a request or booking in the App (for example, an excursion, transfer, Fast Track, or ticket request), the following is stored on the Owner's servers and transmitted to our managers through our customer-relationship service (Kommo — see Section 5) so that they can process it: • the details of your request (for example, dates, number of guests, route, hotel, and other information you enter in the form); • the name and contact details you provide (for example, name, phone number, or messenger username); • the identifier of your account, so a manager can respond to the correct User. Each request also opens a dedicated chat with our managers (see Section 2.3).

2.3. Chat, Support, and Media Data When you use the chat/support feature, the following is transmitted to and processed by the Owner and by Kommo (see Section 5) so that our managers can receive and reply to your messages: • the content of the messages you send; • any photos or files you choose to attach in the chat, which are uploaded to the Owner's servers and forwarded to Kommo; • the name and contact details you provide; • the identifier of your account, so a manager can reply to the correct User.

2.4. Documents from Managers Files that a manager sends you in connection with your request (for example, tickets, vouchers, or confirmations) are stored on the Owner's servers so that you can view and download them in the App.

2.5. Technical and Anonymized Information While the App is in use, anonymized technical data may be collected automatically, including: • device type and model; • operating system version; • device interface language; • App crash and error data; • in-app usage events (for example, which screens are opened and which features are used); • a randomly generated app-instance / device identifier used for analytics; • approximate region (at the country or city level), determined from the IP address. Part of this data is collected using Google Firebase Analytics (see Section 5) and is used solely for technical and analytics purposes.

2.6. Push Notification Tokens (mobile app only) Push notifications are available only in the Red Star mobile application (the Apple / iOS version). The website does not send push notifications. If you allow notifications in the app, it registers a push-notification token (provided by the Apple Push Notification service) so that we can send you notifications related to your requests and the service. You can disable notifications at any time in your device settings.

2.7. Favorites, Preferences, and Local Data • The list of your favorite venues is stored on the Owner's servers and linked to your account, so it stays available after you sign out, sign in again, or switch accounts. A copy is also kept in the local storage of your device for faster display and offline access. • The following are stored exclusively in the local storage of your device: the selected city, interface language, theme, your sign-in session tokens (kept in the device's secure storage to keep you signed in), and a display name and profile photo if you choose to provide them. (Your display name is also stored on the server as described in Section 2.1.) To set a profile photo, or to attach a photo in the chat, the App requests access to the device camera or photo library — only at the moment you select a photo and only with your consent; the App does not access the camera or photo library in the background. To save a picture from the chat or from your documents to your device, the App requests permission to add it to your photo library, only at the moment you choose to save it. Locally stored preferences (city, language, theme) are removed together with the App. You may change or delete them at any time.

3. Purposes of Processing The information collected is used to: • authenticate the User and keep the User signed in; • create and maintain the User's account; • receive, process, and fulfil the User's requests and bookings; • enable the chat/support feature and let our managers receive and reply to the User's messages, photos, and files; • store and deliver documents related to the User's requests; • link the User's requests, messages, and favorites to the User's account; • send notifications related to the User's requests and the service; • ensure the proper operation of the App; • analyze stability, performance, and how the App is used; • fix errors and improve the quality of the service; • ensure the security of the App.

4. Cookies and Similar Technologies 4.1. The App does not use cookies in the traditional web sense. 4.2. In the mobile environment, similar technologies built into the operating system or third-party SDKs (including Google Firebase Analytics) may be used solely for technical analytics and diagnostics.

5. Disclosure to Third Parties 5.1. The Owner does not sell Users' personal data and does not share it with third parties except as described in this Policy or as required to operate the service. 5.2. Sign-in providers. Authentication is performed by Apple Inc. ("Sign in with Apple") and Google LLC ("Sign in with Google"). Your interaction with these providers during sign-in is governed by their own privacy policies: • Apple: https://www.apple.com/legal/privacy/ • Google: https://policies.google.com/privacy 5.3. Chat / CRM. Requests, chat messages, and manager replies are handled through Kommo, a customer-relationship management service provided by QSOFT LLC. The messages, photos, files, and contact details you provide are transmitted to and stored in Kommo so that managers can respond. Processing by Kommo is governed by its own privacy policy: https://www.kommo.com/privacy/ 5.4. Analytics. The App uses Google Firebase Analytics (Google LLC) to collect anonymized usage statistics. For this purpose Google may process technical data such as a randomly generated app-instance identifier, device model, operating system version, in-app events, and approximate location (country/city) derived from the IP address. This data is not used to contact the User. Processing is governed by Google's Privacy Policy: https://policies.google.com/privacy 5.5. Push notifications (mobile app only). Push tokens are processed by the Apple Push Notification service (Apple Inc.) solely to deliver notifications in the Red Star mobile application (Apple / iOS version). The website does not send push notifications. 5.6. Hosting and infrastructure. Account, request, chat, and document data, as well as anonymized technical information, may be processed by infrastructure and hosting providers to the extent necessary for the App to function. 5.7. Reference information (cities, categories, venues, images) is loaded from the Owner's servers. When requests are made to the servers, anonymized technical data (for example, device type, operating system version, IP address) may be transmitted as necessary to deliver content and operate the service. 5.8. To display the weather for the selected city, the App sends that city's coordinates (latitude and longitude) to the Open-Meteo service (open-meteo.com). Device geolocation is not used, and no personal data of the User is transmitted. Open-Meteo processes the request in accordance with its own privacy policy. 5.9. When the external contact features are used (for example, opening Telegram or WhatsApp), the App opens the corresponding third-party application or website. Any further interaction is governed by the privacy policy of that service. 5.10. Information may also be disclosed only in cases provided for by applicable law.

6. Data Storage, Protection, and Retention 6.1. The Owner takes reasonable organizational and technical measures to protect information against unauthorized access, loss, alteration, or disclosure. 6.2. Account data, together with the requests, favorites, and documents linked to it, is stored for as long as the User's account exists. When the User deletes the account, the associated data is deleted (see Section 9). 6.3. Chat messages, photos, and files may be retained in the Owner's systems and in Kommo for as long as necessary to provide support and for reasonable record-keeping. 6.4. Anonymized technical data is stored for as long as necessary to achieve the purposes of its processing.

7. Cross-Border Data Transfer 7.1. Information may be processed using servers located outside the User's country of residence, including by third-party services such as Apple, Google, and Kommo. 7.2. By using the App, the User consents to such cross-border data transfer to the extent necessary for the App to function.

8. Children's Privacy 8.1. The App is not directed at children and does not knowingly collect information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. User Rights The User has the right to: • receive information about how their data is processed; • access, correct, or update the account data associated with their account; • delete their account and the associated account data directly in the App (Profile → account → delete account). Deleting the account removes the User's account record and the data linked to it (such as sign-in identifiers, session tokens, favorites, and requests stored on the server); messages, photos, and files already delivered to managers may be retained as described in Section 6.3; • disable notifications and withdraw consent by ceasing to use the App; • contact us with any privacy request using the details in Section 12.

10. Limitation of Liability 10.1. The Owner of the App is not liable for: • the actions of third-party services and platforms (including Apple, Google, and Kommo); • potential data breaches caused by factors beyond the Owner's control; • the consequences of the User's use of the App.

11. Changes to This Privacy Policy 11.1. The Owner of the App may make changes to this Policy. 11.2. The updated version of the Policy takes effect once it is published in the App or on its distribution page. 11.3. Continued use of the App constitutes the User's acceptance of the updated Policy.

12. Contact Information For any questions regarding the processing of information, this Privacy Policy, or to make a privacy request, the User may contact us by email: Email: info.red.star.service@gmail.com