Privacy Policy

1. Data Controller & Scope

This Privacy Policy governs the collection, processing, and protection of personal data across the Dấu Mốc mobile application (on Android and iOS) and the official website https://daumoc.com (collectively, the "Service").

• Operator & Data Controller: Lucas Tran (Dấu Mốc development team)
• Operating Country: Vietnam
• Privacy Contact Email: [email protected]

This Policy is drafted in accordance with Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP) as well as Google Play and Apple App Store data safety requirements.

2. Personal Data We Collect

Depending on the features you use, Dấu Mốc collects and processes the following categories of data:

2.1. Account & Profile Information

• Email address, display name, username, and unique authentication identifier when you sign in with Google or Apple.
• Profile photo, cover photo, short bio, and riding preferences that you voluntarily provide.

2.2. Location Data (GPS)

• On-site Stamp Coordinates: Precise latitude, longitude, altitude, accuracy radius, speed, and timestamp at the moment you tap Drop a Stamp at a landmark.
• Journey & Route Tracks: Sequential GPS coordinates recorded while you actively enable Journey Recording or Active Route Mode, or imported from GPX files you select.

2.3. Photos, User Content & EXIF Metadata

• Photos you upload for Photo Verification, journey albums, or landmark reviews.
• When you use Photo Verification, our server reads the photo's embedded EXIF metadata (capture timestamp and GPS coordinates) to verify that the photo was taken at the landmark.
• Reviews, ratings, comments, likes, and social connections (followers/following) you create inside the app.

2.4. Technical & Diagnostic Data

• Device model, operating system version, app version, language setting, push notification token (Firebase Cloud Messaging), and crash/error logs to maintain stability and prevent GPS spoofing.

3. Purposes of Processing

We process your data strictly for the following purposes:

1. Core Service Delivery: Verifying on-site GPS stamps, validating photo EXIF coordinates, drawing your Vietnam province map, and recording your motorbike journeys and routes.
2. Anti-Cheat & Integrity: Detecting mock locations, coordinate tampering, or abnormal movement speeds so that GPS-verified stamps remain trustworthy for the entire community.
3. Community & Sharing Features: Displaying public journeys on the Activity feed, generating shareable Passport/Journey cards, and showing landmark reviews according to your privacy settings.
4. Safety & Route Alerts: Calculating stage progress, off-route warnings, fuel reminders, and sunset alerts while you are actively riding a Route.
5. Service Improvement & Support: Diagnosing bugs, responding to support inquiries, and notifying you of important account or app updates.

4. Location Permissions & Background GPS

Location is the heart of a Rider's Passport, and we handle it with strict transparency:

• Foreground Location (While Using the App): Used to display nearby landmarks on the map and verify your position when you tap Drop a Stamp.
• Background Location (During Active Journey / Route Recording Only): When you explicitly tap Start Journey or Start Route and put your phone in your pocket, the app uses a persistent foreground notification to continue recording your road track and provide off-route/fuel alerts while the screen is off.
• Full Control: As soon as you pause or finish a Journey/Route, background location tracking stops immediately. We never track your location silently in the background when you are not recording a ride.

5. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data to any third party or advertising network. We only share data in two situations:

• With other users according to your visibility settings: Your public profile, public journeys, landmark reviews, and exported share cards. (You can set journeys to Private or hide non-GPS stamps at any time.)
• With essential infrastructure providers bound by strict confidentiality and data processing agreements:
  • Cloud hosting, database,authentication, and object storage (Supabase / AWS).
  • Map tile rendering (Mapbox / Vietmap).
  • Push notifications and crash diagnostics (Google Firebase).

6. Data Storage, Security & Retention

• All data transmitted between the Dấu Mốc app and our servers is encrypted via HTTPS / TLS 1.2+.
• Database access is protected by row-level security (RLS) policies and strict authentication tokens.
• Your data is retained for as long as you maintain an active Dấu Mốc account, or until you delete specific items or request full account deletion.

7. Your Privacy Rights

You have the right to:

• Access, view, and update your profile information and privacy preferences inside the app.
• Revoke location, camera, or notification permissions at any time through your device settings.
• Delete individual journeys, photos, or reviews without deleting your account.
• Request a copy of your data or request permanent deletion of your account and personal data.

8. Account & Data Deletion

You can delete your account directly inside the app (Profile → Settings → Account & Security → Delete Account) or submit a request via email. For full step-by-step instructions and retention details, please see our dedicated page: Account & Personal Data Deletion Request.

9. Children’s Privacy

Dấu Mốc is designed for riders and road-trip enthusiasts aged 16 and older. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided personal data without parental consent, we will delete that account promptly.

10. Changes to This Privacy Policy

When we update this Privacy Policy, we will revise the "Last updated" date at the top of this page and notify you inside the app for any material changes.

11. Contact Us

For any questions, requests, or complaints regarding privacy and personal data protection, please contact:

• Data Controller: Lucas Tran (Dấu Mốc)
• Email: [email protected]
• Website: https://daumoc.com