Privacy Policy, Terms of Use and Support for the Vung app
App: Vung (the “App”) · Last updated: 9 November 2026 · Effective from: 15 November 2026
Tiếng Việt · Suomi · Svenska · Deutsch
The App is provided by:
Thinh Dinh Kytötie 71, 04430 Järvenpää, Finland Email: tikki.dinh@gmail.com
We call ourselves “we” below. For the personal data described in section 4 that reaches us or our service providers, we are the controller under the EU General Data Protection Regulation (GDPR).
When you set up and use the App you may enter: country, language, currency, age, gender (optional), occupation, whether your income is stable, number of dependents, monthly income and spending, savings and investment amounts, debts (balances, interest rates, payment and extra-payment amounts, payment days), assets, savings goals, big expenses, and your notification preferences.
Because the data stays on your device, we cannot recover it if you delete the App, reset or lose your phone and have no device backup.
Purchases are processed by Apple through the App Store (or by Google on Android). We do not receive your payment card or Apple ID details. To confirm whether Plus is active, the App uses RevenueCat, which receives the App’s random ID (see 4.2), your purchase and subscription status, the App version, device model and operating system, your App Store country, and your IP address. RevenueCat acts as our processor.
Support ID. When you first open the App, it creates a random ID (for example vung_3f9a…). It is not derived from your name, phone number, Apple ID or any hardware identifier. You can see it in Profile → Support ID. The same ID is used with RevenueCat (4.1).
Invite friends. When you open Invite friends, the App sends your support ID to our server, which creates your invite code. When someone enters a code, their App sends:
Our server then stores: both support IDs, the invite code, which ID invited which, the status, the free days granted and when. It asks RevenueCat to add the free Plus time to the inviter’s ID (it sends the support ID and the end date).
Free Plus from us. If you contact support and send us your support ID, we may give you free Plus or lifetime Plus. We then store your support ID, the type and length of the grant, a short reason (for example “support request”), when it was given and the database account that recorded it. The grant reaches the App through RevenueCat.
What the server never receives: your financial data, anything you entered in the App, your contacts, your location or your advertising ID.
Server logs. Like any internet service, our server and its hosting provider see your IP address and the time of each request. We use this only for security and to prevent abuse, and keep it for up to 30 days.
Hosting. The server and its database run with Heroku (Salesforce, Inc.), in its EU region (data centres of Amazon Web Services in Ireland). The provider acts as our processor.
If you track a mortgage linked to Euribor, the App may request the latest reference rate from a public data service (the European Central Bank’s data portal). Like any internet request, this reveals your IP address and device type to that service. The request contains none of your financial data.
The free version shows ads labelled “Sponsored”, provided by Google AdMob (Google Ireland Limited / Google LLC). While an ad is requested and shown, Google may process your IP address (from which an approximate location is derived), device and operating-system information, an app-specific or device identifier, and information about how you interact with ads. Google may use this for ad delivery, frequency limits, measurement, fraud prevention and security.
What we do to limit this:
Google’s own handling of this data is described in the Google Privacy Policy and How Google uses information from sites or apps that use its services.
If you email us for support, we receive your email address, what you write, and your support ID if you include it. Please do not send financial details you do not want us to see.
If you choose to share analytics with app developers in your device settings, Apple may give us anonymous, aggregated crash and usage reports. We cannot identify you from them.
We do not use analytics or advertising-profiling software of our own, we do not use fingerprinting, we do not build a profile of you, we do not buy data about you, and we do not sell, rent or trade personal data.
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the App on your device | Data you enter (on device only) | Not collected by us. Processed on your device at your request |
| Confirm and manage your Plus subscription | Support ID, purchase status, IP, device info | Performance of a contract (Art. 6(1)(b)) |
| Run Invite friends and give its rewards | Support IDs, invite code, invite records, free days | Performance of a contract: the invite terms in our Terms of Use (Art. 6(1)(b)) |
| Stop fake and automated invites | App Attest key ID, IP address, request times | Legitimate interest in keeping the programme fair and the service secure (Art. 6(1)(f)) |
| Give free Plus at your request or as goodwill | Support ID, grant type, reason, time | Performance of a contract (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) |
| Show ads in the free version | Data Google processes for ad delivery | Your consent (Art. 6(1)(a)) where the law requires it; otherwise Google’s own legal bases |
| Fetch interest-rate data | IP address, device type | Legitimate interest in providing the feature you asked for (Art. 6(1)(f)) |
| Answer support requests | Email, message, support ID | Legitimate interest (Art. 6(1)(f)) and, if it concerns your purchase, contract |
| Meet accounting and tax duties | Purchase records from Apple/Google | Legal obligation (Art. 6(1)(c)) |
We do not sell personal data. We have no other advertising or data partners.
Our server and database are in the EU. Some providers above (for example Google, Apple, RevenueCat and Salesforce, the company behind Heroku) are based in or process data in the United States or other countries. Where this happens we rely on safeguards required by the GDPR, such as the EU–US Data Privacy Framework (if the provider is certified) or the EU Standard Contractual Clauses.
In the App (Profile):
Delete or see your data on our server: email us your support ID (before using “Delete all data”, if you can) and tell us what you want. We delete or send the invite records, codes and grants linked to it within one month. A free Plus grant ends when we delete it.
On your phone: delete the App; reset your device’s advertising identifier or limit ad tracking in iOS Settings; manage or cancel your subscription in Settings → your name → Subscriptions.
Legal rights. If the GDPR applies to you, you have the right to access, correct, erase, restrict or object to processing of personal data we hold about you, to data portability, and to withdraw consent at any time (withdrawal does not affect earlier processing). Our server knows you only by your random support ID, so we need that ID to find your data. To exercise rights relating to data processed by Google, Apple or RevenueCat you can also contact them directly.
Email us at tikki.dinh@gmail.com. We reply within one month.
Complaints. You may complain to the supervisory authority in your country of residence or work. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). In Sweden it is IMY (imy.se), in Germany the data protection authority of your federal state.
The App is for people aged 18 or over. It is not directed at children, and we do not knowingly collect their personal data. If you believe a child has used the App, contact us and we will help remove any data.
The App is a personal tracking and education tool. The score, charts, estimates and tips are general and based only on what you enter. They are not financial, investment, credit, tax or legal advice. See the Terms of Use.
If we later add features that move your financial data off your device (for example sign-in or cloud backup), we will first update this policy, tell you in the App, and ask for your consent before any of it is sent. Until then, your financial data remains only on your device.
We may update this policy. The date at the top shows the latest version, and earlier versions are kept in this repository’s history. For material changes we will tell you in the App before they apply.
Thinh Dinh, Kytötie 71, 04430 Järvenpää, Finland · tikki.dinh@gmail.com