Privacy Policy

App: Tài Nguyên Nước (Water Resources) | Last updated: July 3, 2026 | Version: 1.0

This policy describes how the Tài Nguyên Nước mobile application (“App”, “we”, “us”) collects, uses, stores, and protects your information when you use our hydrological document and water-resources data service.

1. Data controller

Operator: ITAES
Contact: tranduythuc1@gmail.com

2. Information we collect

Data type	Source	Purpose
Email address, password	You provide at sign-up / sign-in	Account creation and authentication
Full name, organization	Your profile	Display author information on documents
Uploaded documents (title, description, river basin, year, file content)	You upload via the App	Storage, search, and sharing of hydrological documents
Geographic coordinates (latitude, longitude) — optional	You enter manually when uploading	Attach location to documents on the map
Session tokens	Generated when you sign in	Keep you signed in on your device

We do not:

Collect GPS location from your device (no location permission is requested)
Access your camera, microphone, or photo library
Sell your personal data to third parties
Use your data for advertising or cross-app tracking

3. Maps and third-party content

The App displays maps and basin data loaded from servers we operate or partner with (e.g. hochua.vn). When you view a map, your device may request map tiles from those servers. Standard technical information (such as IP address) may be logged by the server.

Account and document data is stored using Supabase (cloud infrastructure provider). Supabase processes data under its own terms and privacy policy: supabase.com/privacy.

4. How we use your information

Provide sign-in, profile management, and document features
Enable full-text search within uploaded documents
Display documents and map markers when coordinates are provided
Protect accounts and prevent unauthorized access
Respond to support requests

5. Storage and security

Data is transmitted over encrypted HTTPS/TLS connections.
Passwords are handled by Supabase Auth (not stored in plain text on our servers).
Sign-in tokens are stored locally on your device (AsyncStorage / OS secure storage).
We retain data only as long as needed to provide the service or as required by law.

6. Sharing with third parties

We may share data with:

Supabase — database, authentication, and file storage
Expo / EAS — app distribution (does not access your document content)
Government authorities — when required by law

We do not share data for advertising purposes.

7. Your rights

You may:

Access and update your name and organization in Profile
Reset your password using “Forgot password” on the sign-in screen
Delete documents you have uploaded
Request account deletion by emailing us (see below)
Withdraw consent by stopping use of the App and requesting account deletion

To request deletion of your account and associated data, email tranduythuc1@gmail.com from the address registered on your account. We will process requests within 30 days.

8. Children

The App is intended for professionals and research organizations, not children under 13. We do not knowingly collect information from children.

9. Changes to this policy

We may update this policy from time to time. The revised version will be posted at the same URL with an updated “Last updated” date. Continued use of the App after changes means you accept the updated policy.

10. Contact

Privacy questions or requests:
tranduythuc1@gmail.com