Privacy Policy

Cập nhật

Product: Pyro mobile app (Pyro.vn, Pyro Staging, and related versions on Google Play / App Store)
Entity: PYRO VIETNAM TWO MEMBER COMPANY LIMITED (CÔNG TY TNHH HAI THÀNH VIÊN PYRO VIỆT NAM)
Version: 1.0
Effective date: May 20, 2026
Last updated: May 20, 2026

1. Introduction

This Privacy Policy (“Policy”) explains how PYRO VIETNAM TWO MEMBER COMPANY LIMITED (“Pyro,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use the Pyro mobile application (“App”) on Android and iOS devices.

The Pyro App is a mobile client that connects to the Pyro web platform at domains such as pyro.vn, app.pyro.vn, staging.pyro.vn, hung.pyro.vn, and other subdomains operated by Pyro. Sign-in, account management, and core business features run on the web platform. This Policy also describes how the App handles data on your device and when communicating with Pyro servers.

By installing, registering for, or continuing to use the App, you confirm that you have read, understood, and agree to this Policy. If you do not agree, do not use the App and uninstall it.

2. Scope

This Policy applies to:

  • Users who download and use the Pyro App from Google Play or the Apple App Store;
  • Data processed on the device (system permissions, local App storage);
  • Data transmitted between your device and Pyro servers when you access services via WebView or API.

This Policy does not govern websites or services owned or controlled by third parties that Pyro does not own or control, except where expressly identified as a data processor under contract with Pyro.

3. Data processing roles

  • For data you provide to use Pyro services (registration, sign-in, transactions on the platform): PYRO VIETNAM TWO MEMBER COMPANY LIMITED is the primary responsible party under applicable Vietnamese personal data protection law.
  • For certain technical activities (infrastructure hosting, SMS OTP delivery via carriers/partners, app distribution through app stores): Pyro may use data processors under contract. They may process data only on Pyro’s instructions and subject to appropriate security obligations.

4. Types of data we collect

4.1. Data you provide directly

When you register, sign in, or use Pyro services through the App, you may provide:

  • Full name, phone number, email address;
  • Account information, password, one-time verification codes (OTP);
  • Profile information, support requests, feedback, and complaints;
  • Transaction data and service usage history (depending on the Pyro product or service you use).

We only request data that is necessary and appropriate for providing the service.

4.2. Data collected automatically

When you use the App, our systems may record:

  • App version, operating system, device model, language, and time zone;
  • Technical logs (errors, incidents, response times) for operations and troubleshooting;
  • IP address and network connection information;
  • Cookies, session tokens, and local storage created by the Pyro website or WebView to maintain sign-in state and preferences.

4.3. Device permissions

The App may request the permissions below. You may deny them in system settings; some features may not work:

Permission Purpose
Internet access
Load web content, sync data, sign in, and use Pyro services
Camera
Scan QR codes when you actively use the scan feature (not required in every flow)
SMS (Android – SMS Retriever / Google Play Services)
Help auto-fill OTP codes from eligible verification messages per Google’s mechanism; the App does not read your entire SMS inbox outside the OTP scope of this feature

We do not request access to contacts, precise location, or the microphone in the current Pyro App scope, unless we provide separate notice when new features are added.

5. How we use your data

We use personal data to:

  1. Provide, maintain, and improve the App and Pyro services;
  2. Verify identity, manage sessions, protect accounts, and prevent fraud and unauthorized access;
  3. Provide customer support and handle requests and complaints;
  4. Send service-related notices (maintenance, security updates, terms changes)—we do not send unrelated advertising if you have not agreed to receive marketing;
  5. Comply with legal obligations (record retention, accounting, tax, and cooperation with competent authorities as required by law);
  6. Perform technical analysis as needed to ensure system stability and security.

We do not sell your personal data to third parties for their marketing purposes.

6. Legal bases for processing

We process data based on one or more of the following:

  • Performance of a contract or steps taken at your request before entering a contract;
  • Your consent (where required by law or when you voluntarily provide non-required information);
  • Legal obligations;
  • Pyro’s legitimate interests (security, fraud prevention, service improvement) that do not override your rights and legitimate interests.

7. WebView, cookies, and local storage

The App displays content from the Pyro web platform. During use:

  • The Pyro website may use cookies, localStorage, or similar technologies to remember your session and preferences;
  • You may clear session data by signing out on the platform, clearing App data in device settings, or uninstalling the App;
  • Links to third-party websites (if any) are governed by their own policies; Pyro recommends that you review them before providing data.

8. Sharing data with third parties

We may share limited data with:

  • Infrastructure providers (servers, storage, CDN, email, SMS/OTP gateways) under security contracts and only as necessary;
  • Google (Google Play, SMS Retriever, related Android services) and Apple (App Store, related iOS ecosystem services) for app distribution and system features;
  • Business partners acting on Pyro’s instructions when you use integrated services;
  • Competent government authorities when legally required by valid written request.

Partner lists may change over time. Recipients must meet security obligations and process data only for the assigned purpose.

9. Retention

We retain data for as long as:

  • Needed to provide services and manage your account;
  • Required by law (e.g., transaction and accounting records—often at least five years or as required by applicable sector law);
  • Until you request deletion and we have no lawful basis to retain it.

After retention periods end, data is deleted, anonymized, or stored with restricted access per internal procedures.

10. Security

Pyro applies appropriate technical and organizational measures, including:

  • Data transmission over encrypted connections (HTTPS);
  • Access controls and internal role-based permissions;
  • App signing and distribution through official channels (Google Play, App Store).

No system is completely secure. If we discover a data breach that may affect your rights, we will notify and handle it in accordance with Vietnamese law.

11. Your rights

Under applicable Vietnamese personal data protection regulations, you may have the right to:

  • Be informed about processing activities;
  • Access, correct, and update inaccurate data;
  • Withdraw consent (where processing is based on consent);
  • Request restriction or deletion of data where permitted by law;
  • Request data provision or object to processing within legal limits;
  • File complaints, reports, lawsuits, or claims for compensation as provided by law.

To exercise your rights, contact us under Section 14. We respond within 15 business days of receiving a valid request; complex cases may be extended with notice and reasons.

12. Children

The Pyro App is not directed to anyone under 16 and we do not knowingly collect children’s data. If you are a parent or guardian and believe a child has provided data to Pyro, contact us so we can delete appropriate information.

If you declare on Google Play that your app is not directed at children under 13, that declaration must align with this section.

13. International data transfers

Data is primarily stored in Vietnam. If we use cloud services or partners with servers outside Vietnam, Pyro applies appropriate safeguards (contracts, security commitments) as required by law on cross-border personal data transfers.

14. Contact us

For privacy and personal data requests, contact:

  • Entity: PYRO VIETNAM TWO MEMBER COMPANY LIMITED
  • Address: 100/1 Thich Quang Duc, Ward 05, Phu Nhuan District, Ho Chi Minh City, Vietnam
  • Email: huniel65535@gmail.com
  • Phone: +84 356 468 699
  • Hours: 8:00 AM–5:30 PM, Monday–Friday (excluding public holidays)

15. Changes to this Policy

We may update this Policy when App features, law, or our business model changes. New versions will be posted at the same website URL with an updated effective date. Continued use of the App after an update means you accept the new Policy, unless law requires additional confirmation.

16. Governing law and disputes

This Policy is governed by the laws of Vietnam. Disputes will first be resolved through good-faith negotiation. If not resolved within 30 days after one party sends a dispute notice, disputes will be submitted to a competent People’s Court in Ho Chi Minh City, unless mandatory law provides otherwise.

If any provision is invalid, the remaining provisions remain in effect.