SohiVI

Privacy Policy

Last updated: October 11, 2026

This policy explains what Sohi collects when you use the app and the sohi.vn website, how we use it, who can see it and what your rights are. We collect only what Sohi needs to work, we don't sell your data and we don't use it for advertising.

1. What we collect

  • When you join an album as a guest: an anonymous account ID kept on your device or browser, and the display name you type. We don't ask guests for a phone number or email.
  • When you sign in with Google or Apple: the name, email address and profile picture they share with us. If you hide your email with Apple, we only receive Apple's relay address.
  • Photos you upload, with the uploader's name and upload time. Photos are resized and compressed on your device before upload.
  • Event details the host enters: title, date and time, venue, cover photo.
  • Guest lists and gift ledgers the host enters: guest names, phone numbers (optional), side, relationship, notes, RSVP status, gift givers, amounts and how the gift was given.
  • Your personal gift book: the events, amounts and notes you record.
  • Purchases: the plan bought, the event it applies to and the transaction ID. Apple or Google handles the payment; we never see your card details.
  • Technical information: IP address, device and browser type in server logs, used for security and fixing problems.

The app asks for camera access (to scan QR codes and take photos) and photo library access (to pick photos to upload and save photos to your device) only when you use those features. Sohi doesn't collect your location or contacts, and doesn't track you across other apps or websites.

2. How we use it

  • To run your albums, guest lists, gift ledgers and gift book.
  • To show who took each photo next to it.
  • To verify purchases and apply plans to the right event.
  • To prevent abuse (for example, limiting uploads per hour), keep the service secure and fix bugs.
  • To reply when you contact us.

3. Who can see your information

  • Album photos: the host and co-hosts always see every photo. Other guests see yours when the album is shared with everyone; in private mode, each guest sees only their own photos.
  • An event's guest list and gift ledger: only the host and co-hosts.
  • Your personal gift book: only you.

Note that each photo is delivered through its own link. Anyone with the direct link to a photo can open it, even when the album is in private mode.

4. Service providers

We use a few providers to run Sohi. They process data only on our instructions:

  • Supabase: database, sign-in and server functions.
  • Cloudflare: photo storage and delivery.
  • Google and Apple: sign-in, and payment through the App Store and Google Play.
  • RevenueCat: verifying in-app purchases.

Data may be stored and processed on servers outside Vietnam. We don't share data with anyone else unless the law requires it.

5. How long we keep it

  • An event's photos are kept for its plan's storage period (30 days on the Free plan, 1 year or lifetime on paid plans). After expiry, the event is read-only for 30 days, then its photos are permanently deleted.
  • Deleted photos (by you or the host) are removed from storage.
  • Account information is kept until you delete your account.
  • Backups may hold data for a short time before they're overwritten.

6. Your rights

Under Vietnamese personal data protection law, you can access, correct and delete your data, and withdraw your consent. In practice:

  • Edit your display name in Profile.
  • Delete photos you uploaded, right in the album.
  • Delete your account from Profile in the app. This deletes your profile, gift book, the photos you uploaded, and events you host (with all their photos).
  • If you're listed in an event's guest list or gift ledger, ask the host, or email us and we'll help.

For anything else, email [email protected]. We'll reply within 30 days.

7. Children

Sohi isn't meant for children under 16 to sign up for on their own. If a child appears in an album photo, a parent or guardian can ask the host or us to remove it.

8. Security

Data travels over encrypted connections (HTTPS). Access rules are enforced inside the database itself, so only the right people can read guest lists, gift ledgers and gift books. No system is perfectly secure, but we work hard to protect your data.

9. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we'll tell you in the app about significant changes.

10. Contact

For any privacy question, email [email protected].