Privacy Policy
Updated: 23 October 2026
This Privacy Policy describes how Grindict Company Limited collects, uses, and protects personal information of Users on the Grindict system.
This policy is built to comply with the laws of Vietnam, including Decree 13/2023/ND-CP on personal data protection, the Cybersecurity Law 2018, and the Law on Protection of Consumer Rights.
Capitalized terms in this Policy have the same meanings as in the Terms of Use, unless this document provides otherwise.
Purposes of collecting personal information
- Create, maintain, and manage the User account (including profile, access rights, sign-in sessions, and account deletion).
- Provide the Service, store learning data, User-created content, usage results, and statistics on the system.
- Determine Membership, account role, and apply corresponding benefits and features.
- Process payment transactions, confirm orders, reconcile, and handle refund requests.
- Send notices and emails needed for Service operation, account verification, system safety, and legal policy updates.
- Send emails with periodic reports, support content, experience sharing, and learning improvements according to the User’s choices.
- Receive and handle error reports, content suggestions, feedback, and complaints, and address breaches of the Terms of Use.
- Ensure safety and cybersecurity, protect accounts, and detect and prevent fraud or damage to the system.
- Store vouchers and figures as required by accounting, tax, and related legal obligations.
Scope of personal information collected
- Email address, password (encrypted), display name, and other profile information the User provides or updates on the system.
- Personal settings, learning progress, practice results, User-created data, and statistics arising from use, to support the User’s tracking needs and improve the Company’s Service.
- Order codes, transaction codes, amounts, payment times, Membership status, and related transaction vouchers.
- Information, messages, and attachments the User sends through content error report, content suggestion, feedback, complaint, and technical support features.
- Technical information and parameters arising from connection, maintaining sign-in sessions, and remembering access state, to ensure safety, cybersecurity, and account protection.
Retention period for personal information
- The User’s personal information is stored for the entire time the account is active on the system.
- When the User requests account deletion, personal information is permanently deleted or converted to the system’s anonymized form; any remaining learning data (if any) is no longer linked to the User’s personal identity.
- For vouchers and data related to payment transactions, retention follows accounting, tax administration, and related laws.
Recipients and sharing of personal information
The Company does not sell, rent, or share the User’s personal information with third parties for an independent commercial purpose. Personal data is shared only in these limited cases:
- Partners that provide technical infrastructure, server hosting, and email services used directly to operate the system and send notices to the User.
- Payment intermediaries or transaction processors that carry out payment or refund instructions at the User’s request.
- Competent state authorities when there is a lawful written request under the laws of Vietnam.
Measures to protect and secure personal information
- The system applies suitable data encryption, transmission encryption, and necessary technical measures to keep information safe and minimize unauthorized access or leaks.
- Strict internal access management and control, with limited permissions by role and job responsibility of operating staff.
- The User must actively protect the email account and personal password. The Company is not responsible for loss or incidents caused by the User disclosing sign-in information to a third party.
User rights and duties regarding personal data
Under personal data protection law, the User has the following rights and duties:
- The right to view, edit, or update account and profile information on the system.
- The right to withdraw consent, request restriction or objection to processing, or request deletion of the account and personal data under the Platform’s guided process.
- The right to send feedback, complaints, denunciations, or claim damages under the law when a breach of personal data protection is found.
- The duty to protect one’s own personal data, respect others’ data, and provide accurate information when registering for the Service.
Address of the unit that collects and manages personal information
For questions, support requests, or comments about personal data processing, please contact the Company using the details below:
Tax code: 0319450613
Address: 2665/13/8A Do Muoi, Dong Hung Thuan Ward, Ho Chi Minh City, Vietnam
Email: contact@grindict.com
Receiving and resolving complaints about personal information
- All feedback or complaints about processing of personal information are received first through features on the Platform or sent directly to contact@grindict.com.
- The Company will check, handle, and reply by email to the User as soon as possible in accordance with the law after receiving a valid request.
- If no agreement is reached, the dispute is resolved under the Terms of Use and the laws of Vietnam.
Updates and effect
- This Privacy Policy may be adjusted or updated to match changes in Service operations or the law. The updated version is published on the Platform and takes effect from the publication date.
- Continued use of the Service after an updated policy takes effect means acceptance of those changes.