Privacy policy
Last updated:
Mua Việt Nam is a product transparency app. You scan a barcode, photograph a label or type a product name; the app returns the manufacturing country, brand origin, ultimate parent company and barcode registration country, with the evidence behind each answer.
This policy sets out what we collect, why, where it is stored, for how long, and how you ask us to delete it. It is written from what the code actually does rather than from a template.
1. Who is responsible
Mua Việt Nam is a Celesnity product. Celesnity decides the purposes and means of the processing described here.
Any question or request about your data can be sent to the address in the Contact section below.
2. What we collect
The app has no accounts. No email, no phone number, no social login. Everything collected is tied to an opaque server-issued device token, not to your identity.
| Data | Purpose | Where it lives |
|---|---|---|
| The label photo, barcode or product name you submit | Recognising the product you are asking about | Not stored. The image is passed to the recognition service and discarded; no database column holds it. |
| An opaque device token | Preventing abuse and enforcing rate limits | On the server, in the devices table. No name, email or phone number attached. |
| A one-way hash of your IP address | Rate limiting, and attributing an install to the share link that caused it | On the server. The raw IP address is never stored anywhere. |
| A scan log: device token, product scanned, input mode, timestamp | Counting scans per product and improving provenance data quality | On the server. This is server-side data, separate from the history shown inside the app. |
| The recognised product name | Queuing a background lookup for sources | On the server, in the job record. The image never enters this queue. |
| Feedback and correction proposals you submit | Human review and fixing incorrect data | On the server, with the device token and the text you wrote. |
| The scan history shown inside the app | So you can review, export or erase it | On your device only. It is not uploaded. |
3. What we do not collect
- No account, no email, no phone number, no social login.
- No location. Photos are compressed and stripped of EXIF data on the device before being sent, so they carry no GPS coordinates.
- No contacts, calendar, messages or list of installed apps.
- No microphone. The record-audio permission is removed from the app by a manifest directive, even though the camera library declares it.
- We do not sell data, share it with advertising networks, or build behavioural profiles for advertising.
4. Third parties
To recognise products and search public sources, what you submit — a label photo, a barcode or a product name — is passed to the language-model provider we use. We send only what recognition requires, without your device token.
On Android the app reads the install-referrer information provided by Google Play, so an install can be attributed to the share link that caused it. This is counted, never used to change how the app behaves for you.
We embed no advertising SDKs and no third-party behavioural analytics inside the app.
5. Device permissions
Declining camera access still leaves the app usable: you can type the barcode by hand or look the product up by name.
- Camera — to read barcodes and photograph product labels. Photos are used only to recognise the product.
- Photo library — only when you pick an existing label photo yourself.
- Network access — required, because every provenance report comes from the server.
- Microphone — not used, and the permission is removed from the app.
6. Retention
- Photos you submit: not stored, discarded as soon as recognition finishes.
- Product provenance records: kept indefinitely, because they describe a product rather than you.
- Scan logs and device records: kept while they serve abuse prevention and statistics, and deleted on request.
- Feedback and corrections: kept for review and for later cross-checking.
- In-app history: stays on your device until you erase it or uninstall the app.
7. Security
- All traffic between the app and the server travels over an encrypted connection.
- IP addresses exist only as one-way hashes that cannot be reversed.
- The device token is a random server-issued string containing nothing about you or your handset.
- Internal access to data is limited to what the work requires.
8. Your rights
- Review and export your scan history from the History screen in the app.
- Erase individual entries or the whole history on your device, at any time.
- Ask us to provide or delete the server-side data tied to your device token.
- Withdraw camera or photo library access in your operating system settings.
9. Data deletion
Data on your device: open the History screen and choose to clear the whole history. This takes effect immediately and cannot be undone once confirmed. Uninstalling the app also removes all local data.
Data on the server: because there are no accounts, we identify your data by the device token. Email the address in the Contact section with the device token shown in the app settings. We will delete the device record, the scan log and any feedback tied to that token within 30 days, and confirm by email.
Product provenance records are not deleted by such a request, because they describe a product and do not identify you.
10. Children
The app is for shoppers generally and is not directed at children. We do not knowingly collect data from children. If you believe we hold such data, contact us and we will delete it.
11. Changes to this policy
When something changes we update this page and change the date at the top. For material changes to how data is handled, we give notice inside the app before the change takes effect.
12. Contact
Questions about this policy, or requests to access or delete your data, can be sent to the address below. We reply within 30 days.
Celesnity