Privacy

Updated: 2026-10-18

Vemoki (`vemoki.com`) processes data needed to run the event platform and respond to interest registrations. Retention, residency, and support figures below are the current MVP policy.

Data we collect

Account / session identifiers (email, login provider Keycloak identifier / user ID); event and code/ticket data / display QR contents; check-in records; device push tokens (Apple Push) when notifications are enabled; interest or event form fields (name, email, org, phone if the event requires them); necessary technical logs (IP, browser, timestamps). We do not sell personal data; the MVP does not use advertising SDKs or cross-app tracking.

Purposes

Authenticate and authorize; issue / display / validate tickets; send transactional notices (email and, if enabled, push notifications); support and sales follow-up; security, audit logs, and abuse prevention; honor account-deletion requests as described below.

Camera and notifications

Camera (iOS Gate app): on-device scanning of ticket QR codes at the gate for authorized staff. Scanning is realtime on-device — by default we do not save photos to the library and do not upload scan images to our servers. Notifications: optional; used for ticket-delivery updates and event reminders; disable in iOS Settings.

Retention

Account deletion requests: we delete or de-identify related personal data within ≤ 30 days (not immediate erasure — we keep records needed for complaint handling under policy). Tickets / check-in: keep 365 days then delete or de-identify personal data; keep aggregates. Audit logs: retained up to 730 days. QR/export files: short-lived download links; files past business expiry are removed within ≤ 90 days. Backups respect deletion within the published recovery window; on-device caches clear on logout / user switch.

Account deletion requests

Signed-in users: on the web open Account (`/account`), or in the iOS app open Account → “Request account deletion” / «Yêu cầu xóa tài khoản». When you submit, the request has been received — that is not immediate erasure. We process deletion or de-identification within ≤ 30 days; audit logs may remain up to 730 days under policy. You do not need a phone call or support ticket to start a request.

Data residency

Single-region hosting: database, file storage, Keycloak, and email in the same country as the host. No multi-region split in MVP; host country is recorded in the data processing agreement when a real tenant onboard.

Contact

Privacy questions: Support (`/support`) or `support@vemoki.com` / `privacy@vemoki.com` (when the alias is ready). Interim contact: hangndat@gmail.com.

Figures match current policy (2026-10-18). Internal technical recovery targets are not published as support commitments until verified on the target host.