Privacy Policy

This policy explains how Hôm Nay Đi Đâu (the website and the “Whereto” mobile app, together the “Service”) collects, uses and protects your personal data. By using the Service you agree to the practices described here.

It applies to both the website and the iOS/Android apps, and should be read together with our Terms of Service.

We collect only the data needed to run the Service:

• Account information: when you sign in with Google or Apple we receive your name, email address and profile photo. You may add a nickname, bio and city.
• Location data: GPS coordinates are used to verify check-ins and suggest nearby places. Location is only read when you take an action that needs it.
• Photos & camera: photos you capture or pick from your library to attach to memories/check-ins.
• Microphone & voice: when you use voice search, your speech is converted to text via the operating system’s speech recognition (Apple/Google) to form a query for the AI.
• Content you create: check-ins, memories, trips, reviews, likes/upvotes, saved lists and follow relationships.
• Technical data: basic device and usage logs for operating and troubleshooting the Service.

We use data to:

• create and manage accounts and authenticate sign-in;
• verify check-ins and personalise place suggestions;
• store your memories, trips and journey;
• power leaderboards, public profiles and community features;
• keep the Service safe, prevent abuse and improve it.

We do not sell your personal data to third parties.

The app requests these permissions only when you use the related feature, and you can revoke them at any time in your OS settings:

• Location — to verify check-ins and suggest nearby places.
• Camera & Photo Library — to capture/pick photos for memories.
• Microphone & Speech Recognition — for voice search.

Declining a permission only disables that feature; the rest of the app keeps working.

We rely on a few trusted third-party services to operate, each with its own policy:

• Firebase Authentication (Google LLC) — Google/Apple sign-in.
• Apple — Sign in with Apple — sign-in on iOS.
• Mapbox and OpenStreetMap — map and journey rendering (processes coordinates).
• Foursquare — place data source (not your personal data).

We share data only as needed to provide the Service, with your consent, or where required by law.

Your data is kept while your account is active. When you delete your account, your personal data and the content tied to you is removed from our systems, except data we are legally required to retain.

You can delete your account at any time inside the app: Profile → Settings → ⋮ menu → Delete account.

This permanently deletes your account along with your check-ins, memories, trips, reviews, follows and saved lists. The action cannot be undone.

You can access, correct or delete your personal data. Most actions can be done directly in the app (edit profile, delete memories, delete account). For other requests, please contact us.

Data is transmitted over encrypted HTTPS connections. We apply reasonable technical and organisational measures to protect data, though no system can be guaranteed perfectly secure.

The Service is not directed at children under 16. Users under 16 may only use it with the consent and supervision of a parent or legal guardian.

We may update this policy over time. For significant changes we will update the “Last updated” date at the top and provide appropriate notice where needed.

For any privacy questions, please reach us via the in-app support section or our official contact channels.