Privacy Policy

1. Data controller

FLUVIAS CO., LTD ("we", tax code 0111073733) operates the service at flutionai.com and app.flutionai.com. For any privacy-related questions, please contact: flutionai@gmail.com.

2. Data we collect

• Account data: full name and email address when you register.
• Usage data: voice recordings (only when you use speaking mode), text you submit for analysis, and your practice session history.
• Technical data: IP address, browser type, device, and traffic analytics data.

3. Purpose of processing

• Providing and improving our language-practice features.
• Personalizing content and tracking your learning progress.
• Communicating about your account and service updates (no promotional spam).
• Aggregate statistical analysis to improve the product.

4. Legal basis for processing

We process your data on the basis of your consent (Article 11, Decree 13/2023/ND-CP) and performance of the service contract. You may withdraw your consent at any time.

5. Data storage and security

Data is stored on servers located in the United States (Vercel, cloud services). We apply TLS encryption in transit and strict access controls. Account data is retained for as long as the account is active, and for up to 12 months after account deletion.

6. Cross-border data transfer

Your data is processed and stored in the United States by third-party service providers (Vercel, PostHog). This transfer is carried out under appropriate data-protection safeguards, to ensure a level of security equivalent to that required by Vietnamese regulations.

7. Your rights

Under Decree 13/2023/ND-CP, you have the right to:

• Access and receive a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your data (except where the law requires retention).
• Receive your data in a portable format.
• Object to processing of your data for marketing purposes.

To exercise these rights, contact: flutionai@gmail.com. We will respond within 30 days.

8. Data breach notification

In the event of a personal data breach, we commit to notifying the competent authority (Department A05 – Ministry of Public Security) within 72 hours as required under Article 23, Decree 13/2023/ND-CP, and to notifying affected users where possible.

9. Cookies and analytics

We use PostHog to measure site traffic and aggregate product usage. It runs when you visit the site and stores a few cookies in your browser. We do not use this data for advertising. You can opt out by blocking or clearing cookies in your browser settings.

10. Contact

For any questions or complaints regarding data privacy, please email flutionai@gmail.com.