Văn bản này cấu thành Chính sách bảo vệ dữ liệu cá nhân chính thức áp dụng cho các cá nhân, tổ chức truy cập hoặc vận hành dịch vụ trên các nền tảng kỹ thuật số và ứng dụng di động được quản lý bởi Cục Thể dục Thể thao (SAV) – Bộ Văn hóa, Thể thao và Du lịch, trực thuộc chiến dịch quốc gia "Vì một Việt Nam khỏe mạnh".
General Information about Sports Authority of Viet Nam (SAV)
The Sports Authority of Viet Nam (SAV), as an agency under the Ministry of Culture, Sports and Tourism of the Socialist Republic of Viet Nam, takes the responsibility of assisting the Minister in performing state administration and exercising authority over physical training, sports campaigns, and related national health initiatives.
Headquarters: No. 36, Tran Phu Street, Ba Dinh District, Ha Noi, Viet Nam.
Official Telephone: (84-24) 3733 2058 / 0243 747 2958.
Commitment of the SAV Regarding the Protection of Personal Data
The Sports Authority of Viet Nam (SAV) commits to upholding the following fundamental principles when processing users' personal data across all digital touchpoints:
Data Subject Rights: SAV fully respects and facilitates the exercise of all statutory rights conferred upon data subjects under applicable privacy legislation, including the rights to access, rectify, restrict processing, and delete personal data.
User Obligations: Users are responsible for safeguarding their login credentials and account activities on platforms provided by SAV. Users must promptly notify our administration of any unauthorized access, security incident, or suspect activity for timely mitigation.
Incident Reporting: If abnormal platform behavior is detected, users should suspend usage immediately to prevent unintended risk and report the incident to our technical support team.
Categories of Personal Data Collected and Processed
While using SAV's digital platforms and mobile applications published on the Apple App Store (iOS) and Google Play (Android), users may be requested to provide or permit the collection of specific data categories essential for service delivery:
| Category | Permission / Technical Source | Operational Purpose | Third-Party Sharing | User Control |
|---|---|---|---|---|
| Account Credentials & Identity | User Registration (Direct Input) | Account creation, session authentication, and cross-device sync of workout records. | None. No commercial broker sharing. | Self-service modification or complete deletion via in-app settings or email. |
| Photos & Camera Access | iOS NSCameraUsageDescription, NSPhotoLibraryUsageDescription | Allow users to capture or select images for avatar profiles and community fitness activities. | None. Only user-selected images are transmitted; local photo library is never scanned. | Optional permission. Can be revoked at any time in device system settings. |
| Precise / Coarse Location | iOS NSLocationWhenInUseUsageDescription | Locate nearby sports facilities, public clubs, and running routes on interactive maps. | None. Location data is processed ephemerally and is not tracked across third-party apps. | Optional permission. User may manually browse facilities without enabling GPS. |
| Device Diagnostics & Telemetry | System-provided OS Identifiers (Read-only) | Application crash diagnostics, system stability, and non-commercial aggregate statistics. | None. No cross-app tracking identifiers (IDFA) or third-party ad networks used. | Governed by general device OS diagnostic settings. |
3.1 Account Registration & Identity Data
- To utilize authenticated features, users register an account by providing basic contact and identity credentials (such as email address, full name or username, and encrypted password).
- This information is strictly utilized to authenticate user sessions, maintain training history, and deliver essential account notifications.
3.2 Camera and Photo Library Access (Apple iOS & Android)
- The mobile application requests runtime permission to access the device camera and photo gallery exclusively when the user actively elects to take a picture or select an existing photo (e.g., updating a user profile avatar or uploading workout milestone images).
- SAV does not continuously access, monitor, scan, or background-upload photos or videos from the user device. All media uploads are solely user-initiated.
3.3 Location Services (Nearby Facilities & Clubs)
- The mobile application may request permission to access device location (while using the app) to display the user location on interactive maps and highlight neighboring physical training centers, public clubs, or designated sports routes.
- Location coordinates are processed ephemerally on-device or during the active session. SAV does not sell, license, or transmit user location data to data brokers or third-party advertising networks.
3.4 Device Telemetry and Technical Identifiers
- Non-sensitive technical telemetry (such as device model, operating system version, and system event logs) may be collected to resolve application crashes, ensure screen layout compatibility, and optimize network performance.
- These diagnostic data are aggregated for non-commercial system maintenance and are not utilized for cross-app tracking.
3.5 Compliance with Apple App Store Guidelines, Google Play Policies, and Vetted SDKs
Our mobile applications and digital platforms strictly comply with all relevant platform developer policies and regulations, including:
- Apple App Store Review Guidelines: Strict adherence to Guideline 5.1 (Legal: Privacy), the Apple Developer Program License Agreement, and the requirement for explicit permission prompts with transparent purpose declarations.
- Zero Third-Party Advertising Tracking: Our services do not deploy tracking identifiers (IDFA/AAID) for targeted advertising or user profiling across unrelated applications.
- Vetted SDK Integration: All third-party software development kits (SDKs) embedded within our mobile applications are strictly audited to ensure they comply with Apple and Google developer policies and do not transmit unauthorized private telemetry.
SAV remains committed to maintaining a secure and transparent digital environment. Any inquiries regarding library dependencies or security verification will be promptly addressed by our engineering team.
3.6 Operational Usage Data
Diagnostic information transmitted during ordinary network requests (such as IP address, visited URL paths, and HTTP request headers) is logged for cybersecurity monitoring, abuse prevention, and non-commercial public health campaign metrics. Access to these logs is restricted exclusively to authorized systems engineers.
Personal data is never commercialized. SAV will only disclose personal data to law enforcement or judicial authorities when formally mandated pursuant to valid legal process under Vietnamese law.
Methods of Personal Data Collection
SAV collects the personal data delineated in Article 3 exclusively through direct user interactions on official SAV digital platforms and mobile applications, including voluntary registration form submission, permission grant dialogs, and platform engagement.
Purposes of Personal Data Collection and Processing
User personal data is utilized strictly in furtherance of user interests and the non-commercial public campaign mission of promoting community health across Viet Nam:
5.1 Service Delivery & User Inquiries
Personal information is processed to: (i) facilitate account access and data synchronization across devices, (ii) acknowledge, investigate, and respond to user feedback and inquiries, (iii) conduct anonymized statistical evaluation to optimize public fitness campaigns, and (iv) deliver expedited technical assistance.
5.2 Official Administrative Notices
SAV utilizes registered contact details to dispatch essential administrative notices, such as critical policy amendments, service maintenance schedules, or security notifications.
Data Retention and Account Deletion Policy (Apple Guideline 5.1.1(v))
SAV maintains personal data on secure internal infrastructure only for the duration necessary to deliver services, satisfy lawful campaign objectives, or until a formal deletion request is executed by the account holder.
Account Deletion Procedure (Quy trình xóa tài khoản)
Mở ứng dụng > Hồ sơ (Profile) > Cài đặt (Settings) > Xóa tài khoản (Delete Account).
Gửi thư từ email đăng ký đến support@tdtt.gov.vnvới tiêu đề "Request Account Deletion".
* Thời hạn thực hiện: Toàn bộ dữ liệu định danh, lịch sử tập luyện và hồ sơ người dùng sẽ được xóa vĩnh viễn khỏi máy chủ trong vòng 30 ngày.
Data Security Arrangements & Incident Notification
SAV enforces comprehensive physical, organizational, and technological security controls — including transport encryption (HTTPS/TLS), encrypted credential storage, and restricted role-based administrative access — to safeguard personal data against unauthorized disclosure or tampering.
Users acknowledge that while industry-standard precautions are maintained, no digital system connected to the public internet can be proclaimed entirely risk-free.
Data Breach Notification: In the event of a verified security incident affecting personal data, SAV will without undue delay notify impacted users and relevant regulatory bodies in accordance with Decree 13/2023/ND-CP, providing transparent particulars of the occurrence and remediation measures taken.
Protection of Children’s Personal Data (Under 13 Years of Age)
Our platforms and mobile applications do not knowingly collect, retain, or solicit personally identifiable information from individuals under thirteen (13) years of age without prior verifiable consent from a parent or legal guardian.
If a parent or guardian discovers that a child under 13 has registered an account or submitted personal data without authorization, please notify us immediately at support@tdtt.gov.vn. Upon verification, SAV will promptly delete the corresponding account and purge all associated records from our servers.
Amendments and Policy Updates
SAV reserves the right to amend this Privacy Policy periodically to reflect technological advancements, legislative updates, or revised Apple App Store and Google Play developer guidelines. When material updates are made, SAV will:
Continued utilization of SAV digital platforms and mobile applications following the publication of amendments constitutes acceptance of the revised terms.
Contact Information and Supervisory Authority
For inquiries, complaints, or to exercise statutory data subject rights (including access, rectification, or deletion requests), please direct correspondence to the designated authority:
SPORTS INFORMATION AND COMMUNICATION CENTER — SPORTS AUTHORITY OF VIET NAM (SAV)
Cơ quan trực thuộc Bộ Văn hóa, Thể thao và Du lịch
No. 36, Tran Phu Street, Ba Dinh District, Ha Noi, Viet Nam
March 2026
CỤC THỂ DỤC THỂ THAO (SAV) — BỘ VĂN HÓA, THỂ THAO VÀ DU LỊCH
Văn bản có hiệu lực kể từ tháng 03/2026. Mọi sửa đổi sẽ được công bố công khai trên trang này.