Legal documentDraft
Personal Data Processing Notice
Draft pending review, not yet in effect. Highlighted fields will be filled in by the product owner.
DRAFT — pending review by the product owner and a qualified legal reviewer. This text is not legal advice. Every
{{PO: ...}}placeholder must be filled in before publication. The Vietnamese version prevails if the two versions differ.
Document version 0.1.0-draft · Notice version (consent_version): 2026.11.0-draft · Effective {{PO: ngày hiệu lực (YYYY-MM-DD)}}
This notice is shown before you choose your consent in the Đỗ Lái app or on the Đỗ Lái website, in accordance with Decree 13/2023/ND-CP and the Law on Personal Data Protection. Full details are in the Privacy Policy.
1. Controller and processor
The individual Hiep Nguyen, developer and operator of Đỗ Lái. Contact: {{PO: email liên hệ quyền riêng tư}}; {{PO: địa chỉ liên hệ của bên kiểm soát dữ liệu}}.
2. Purposes and data types by consent group
| Consent group | Purpose | Data types |
|---|---|---|
| Required to operate (on by default) | Provide lessons, practice exams, review schedule and "pass readiness"; sync progress; sign-in and security (including sending sign-in one-time codes by Zalo ZNS or SMS when you request them); handle question error reports; send the study notifications you turned on (including new question sets); share progress with an instructor if you choose | Random device identifier (Keychain, Android Keystore or IndexedDB on the web); sign-in cookie and data stored in the browser (web); licence class, exam date, settings; learning data and practice-exam results; phone number, email, display name, Apple/Google identifier (if signed in); referral code; push token; server logs with IP address; anonymous crash reports |
| Product analytics (off by default) | Understand how the app is used in order to improve it | Usage events linked to an internal user ID, never containing phone number, email or name; on the web, session recordings (session replay) of about 10% of randomly selected sessions, containing your actions and the page content displayed |
| Marketing (off by default) | Send Zalo ZNS reminder messages (exam-date reminders, news of a new official question bank; not including sign-in one-time codes) and promotional or feature-announcement push notifications | Verified phone number, licence class, exam date, "pass readiness" level |
3. How data is processed
Collected from the app and website; stored on servers and a database in Singapore; review schedule and "pass readiness" are computed automatically on your device and on the server; notifications are delivered via Apple, Google and Zalo; one-time codes are sent by SMS ({{PO: nhà cung cấp SMS brandname (eSMS hoặc VietGuys)}}) when Zalo delivery fails. No automated decision produces legal effects for you. We do not sell personal data.
4. Related organisations and individuals
The service providers listed in section 6 of the Privacy Policy (Cloudflare, the server provider, DigitalOcean, Vercel, Zalo, the SMS provider, Apple, Google, PostHog, Sentry, the email provider, the server-log provider); the instructor whose code you entered (only if you agree to share); competent state authorities upon lawful request. Data is transferred abroad (Singapore and wherever providers process data).
5. Possible unwanted consequences and damage
Despite security measures (encryption of connections and sensitive data, access control), there remains a risk of unauthorised access, leakage or loss of data due to technical incidents or attacks. If you do not agree to the required group, you cannot use the service. If you decline analytics or marketing, all learning features keep working in full.
6. Start and end of processing
Processing starts when you consent. It ends when you withdraw consent (for the relevant group) or when your account is permanently deleted (7 days after the deletion request). Server logs and encrypted backups are kept for at most 30 days, so deleted data may remain in backups for up to 30 days. Review history is anonymised after account deletion and used only for aggregate statistics.
7. Your rights and how to exercise them
You can view, change or withdraw consent in Settings → Account & privacy → Privacy & data consent; download your data and delete your account in Settings → Account & privacy → Account. If you cannot use the app, you can request account deletion at dolaiapp.com/xoa-tai-khoan or by email (section 9 of the Privacy Policy). For other requests, contact {{PO: email liên hệ quyền riêng tư}}. Each time you consent or change your choice, we record the selected groups, the notice version and the time. When a new notice version changes purposes or data types, the app will ask for your consent again.
Source: DoLaiGPLX/content@5f4a08d5d796 · legal/en/data-processing-notice.md