Privacy policy

Last updated 24 October 2026

Your data is yours. It is locked to your own account, exported whenever you want and deleted when you ask. We never sell it and never train AI on it.

1. Who is responsible

VIDA is a product of Herio Vietnam (in Vietnamese: Công ty TNHH Herio Vietnam), enterprise and tax code 0107389011, registered office: 2nd Floor, No. 5 Tu Mo Street, Yen Hoa Ward, Hanoi, Vietnam.

HERIO is the controller of your personal data in VIDA. Privacy questions: support@heriovietnam.com.

2. What we keep

• Account: email address, sign-in method, two-step sign-in status, settings and the devices you use.
• What you log: tiles (such as sleep, meals, weight, workouts, fasting), journal entries, calendar entries, trips, money entries, accounts and plans.
• Files you add: receipts and PDFs you attach, and what VID-AI reads from them.
• VID-AI: your questions, the photos you send and the answers.
• Connected calendar: the private calendar link you add and the events it holds.
• Security: sign-in events, IP address and technical logs.
• Payments: handled by Paddle. We receive what Paddle tells us about your purchase (package, date, country), never your card details.

3. Why, and on what basis

• To run VIDA for you: your account, your logs, sync between your devices, reminders (the contract).
• Health data, and anything about your life you choose to log, is processed only because you add it and give your explicit consent; you can withdraw it at any time by deleting that data.
• To keep VIDA secure and to stop fraud (legitimate interest).
• To keep payment records as tax law requires (legal duty).

4. VID-AI

When you ask VID-AI something, VIDA sends your question and the entries needed for the answer to our AI provider, Anthropic. When you add a receipt or a PDF, VIDA sends that file to read it. Records you lock as private are never sent. We never use your data to train AI, and our provider does not train on it under its commercial terms.

5. Where the data lives and how it is protected

Your data is stored with Supabase on servers in Sydney, Australia, and the app is served by Vercel. It is encrypted in transit and at rest. The database hands your rows only to your own signed-in account, two-step sign-in protects every account, and you can hide the front door of the app behind a PIN.

6. Who else receives it

• Supabase: database, sign-in and file storage (Sydney, Australia).
• Vercel: hosting of the app and this website.
• Anthropic: answers from VID-AI and reading the documents you add.
• Paddle: payments, invoices, taxes and refunds as merchant of record. Paddle decides for itself how it uses payment data and has its own privacy notice.
• The push service of your browser or device (Apple, Google, Microsoft or Mozilla), only to deliver the reminders you switch on.
• Your calendar provider, only when you add a calendar link, to read the events.
• Professional advisers and authorities, where the law requires it.

Gold, share and currency prices are fetched without any of your personal data. Our providers work under data processing terms. We transfer data outside the EU and outside Vietnam only with the safeguards the law requires: for the EU, the standard contractual clauses or another transfer tool of the GDPR; for Vietnam, the transfer impact assessment of Law 91/2025/QH15.

7. How long we keep it

• Your account data: as long as your account exists. Delete an entry and it is gone; ask us to delete your account and everything in it is removed within 30 days, including backups.
• Payment records: as long as tax law requires.
• Security logs: as long as needed to protect VIDA.

8. Your rights

Under the GDPR and Vietnam's Personal Data Protection Law (Law 91/2025/QH15, with Decree 356/2025) you may ask for access, correction, deletion, a copy to take elsewhere, restriction, and you may object or withdraw consent. Much of it is self-service: edit or delete any entry, export everything as CSV or JSON. Anything else: support@heriovietnam.com. We answer within one month, sooner where the law asks.

You may complain to your data protection authority. In Vietnam this is the Department of Cybersecurity and High-Tech Crime Prevention of the Ministry of Public Security (A05).

If a personal data breach puts your data at risk, we tell you and the authorities within the time the law sets.

9. Cookies and storage

This website sets no cookies and runs no analytics or tracking. The app keeps only what it needs on your device: your sign-in session, your settings and a copy of your data so it works offline. No advertising or tracking cookies.

10. Children

VIDA is for adults. It is not meant for people under 18 and we do not knowingly collect their data.

11. Changes

When this policy changes in a way that matters, we show the new version in the app before it applies.

12. Contact

support@heriovietnam.com. Herio Vietnam, 2nd Floor, No. 5 Tu Mo Street, Yen Hoa Ward, Hanoi, Vietnam.