Vung – Legal

Privacy Policy, Terms of Use and Support for the Vung app

View the Project on GitHub f1nl0wt3ch/vung-privacy

Privacy Policy

App: Vung (the “App”) · Last updated: 7 November 2026 · Effective from: [RELEASE DATE]

Tiếng Việt

1. Summary

2. Who is responsible

The App is provided by:

[Thinh Dinh], [Kytötie 71, 04430, Järvenpää], Finland · [tikki.dinh@gmail.com]

We call ourselves “we” below. For the small amount of personal data described in section 4 that reaches us or our service providers, we are the controller under the EU General Data Protection Regulation (GDPR).

3. Data you enter stays on your device

When you set up and use the App you may enter: country, language, currency, age, gender (optional), occupation, whether your income is stable, number of dependents, monthly income and spending, savings and investment amounts, debts (balances, interest rates, payment amounts and days), assets, big expenses, and your notification preferences.

Because the data stays on your device, we cannot recover it if you delete the App, reset or lose your phone and have no device backup.

4. Data that does leave your device

4.1 Subscription and purchase data (Vung Plus)

Purchases are processed by Apple through the App Store (or by Google on Android). We do not receive your payment card or Apple ID details. To confirm whether Plus is active, the App uses RevenueCat, which receives an anonymous, randomly generated App user ID, your purchase and subscription status, the App version, device model and operating system, your App Store country, and your IP address. RevenueCat acts as our processor.

4.2 Interest-rate data

If you track a mortgage linked to Euribor, the App may request the latest reference rate from a public data service (the European Central Bank’s data portal). Like any internet request, this reveals your IP address and device type to that service. The request contains none of your financial data.

4.3 Advertising (free version only)

The free version shows ads labelled “Sponsored”, provided by Google AdMob (Google Ireland Limited / Google LLC). While an ad is requested and shown, Google may process your IP address (from which an approximate location is derived), device and operating-system information, an app-specific or device identifier, and information about how you interact with ads. Google may use this for ad delivery, frequency limits, measurement, fraud prevention and security.

What we do to limit this:

Google’s own handling of this data is described in the Google Privacy Policy and How Google uses information from sites or apps that use its services.

4.4 Information you send us

If you email us for support, we receive your email address and what you write. Please do not send financial details you do not want us to see.

4.5 Technical reports from Apple

If you choose to share analytics with app developers in your device settings, Apple may give us anonymous, aggregated crash and usage reports. We cannot identify you from them.

4.6 What we do not do

We do not use analytics or advertising-profiling software of our own, we do not use fingerprinting, we do not build a profile of you, we do not buy data about you, and we do not sell, rent or trade personal data.

Purpose Data Legal basis
Provide the App on your device Data you enter (on device only) Not collected by us. Processed on your device at your request
Confirm and manage your Plus subscription Anonymous user ID, purchase status, IP, device info Performance of a contract (Art. 6(1)(b))
Show ads in the free version Data Google processes for ad delivery Your consent (Art. 6(1)(a)) where the law requires it; otherwise Google’s own legal bases
Fetch interest-rate data IP address, device type Legitimate interest in providing the feature you asked for (Art. 6(1)(f))
Answer support requests Email and message Legitimate interest (Art. 6(1)(f)) and, if it concerns your purchase, contract
Meet accounting and tax duties Purchase records from Apple/Google Legal obligation (Art. 6(1)(c))

6. Who receives data

We do not sell personal data. We have no other advertising or data partners.

7. Transfers outside the EEA

Some of the providers above (for example Google and RevenueCat) are based in or process data in the United States or other countries. Where this happens we rely on safeguards required by the GDPR, such as the EU–US Data Privacy Framework (if the provider is certified) or the EU Standard Contractual Clauses.

8. How long we keep data

9. Your choices and rights

In the App (Profile):

On your phone: delete the App; reset your device’s advertising identifier or limit ad tracking in iOS Settings; manage or cancel your subscription in Settings → your name → Subscriptions.

Legal rights. If the GDPR applies to you, you have the right to access, correct, erase, restrict or object to processing of personal data we hold about you, to data portability, and to withdraw consent at any time (withdrawal does not affect earlier processing). Because we hold almost no data that identifies you, we may need to ask you to confirm that you are the person concerned, for example by writing from the email address you used for support. To exercise rights relating to data processed by Google or RevenueCat you can also contact them directly.

Email us at [CONTACT EMAIL]. We reply within one month.

Complaints. You may complain to the supervisory authority in your country of residence or work. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). In Sweden it is IMY (imy.se), in Germany the data protection authority of your federal state.

10. Security

Your data is protected by the App’s private storage on your device, by the iOS or Android sandbox, and by your device’s lock screen and encryption features. The App does not add its own encryption on top of this, so we strongly recommend that you set a device passcode or biometric lock. Connections from the App to services described above use encrypted HTTPS.

11. Children

The App is for people aged 18 or over. It is not directed at children, and we do not knowingly collect their personal data. If you believe a child has used the App, contact us and we will help remove any data.

12. Not financial advice

The App is a personal tracking and education tool. The score and tips are general and based only on what you enter. They are not financial, investment, credit, tax or legal advice. See the Terms of Use.

13. Other regions

14. Future features

If we later add features that move your data off your device (for example sign-in or cloud backup), we will first update this policy, tell you in the App, and ask for your consent before any of your data is sent. Until then, your financial data remains only on your device.

15. Changes to this policy

We may update this policy. The date at the top shows the latest version, and earlier versions are kept in this repository’s history. For material changes we will tell you in the App before they apply.

16. Contact

[Thinh Dinh], [Kytötie 71, 04430, Järvenpää], Finland · [tikki.dinh@gmail.com]