PineCare Privacy Policy

Version 2026.16 · updated 2 November 2026

The most important part

• The current version (early-access period) does not connect to the Company's server: there are no accounts yet, no plans are sold, and the app sends no information about you to the Company. The parts below about signing in, accounts, PineCare plans, in-app feedback and "From PineCare" content downloaded from the server apply only once those features open in a later version; we will tell you in the app beforehand.
• If you choose to email feedback to info@pinecare.vn, the Company receives your email address and what you wrote, used only to reply and to improve the app. Please do not send health readings by email unless needed.
• Your health notebook — readings, doctor visits, photos of medical papers, medicines, conditions, allergies — is stored only on your iPhone. The Company does not receive, store or see it.
• Reading text on documents, the on-device AI that copies them and speech recognition all run on your iPhone; photos, text and speech are not sent anywhere.
• You use the notebook without an account; until you sign in, the app sends no information about you to our server — it only downloads public content (PineCare products and programmes), the same for everyone. If you choose to sign in (to buy or restore a PineCare plan or to send feedback), our server keeps only what is needed to run your account and your plan.
• We do not sell data, we show no third-party ads, and we do not share your data with insurers or healthcare providers. The "From PineCare" section only presents the Company's own products and programmes; it is the same for everyone and is not based on your data.
• You can download or delete your data inside the app at any time.

1. Who is responsible for your data

The personal data controller is Vietnam Pine Trading and Investment Joint Stock Company (VINAPINE., JSC), enterprise code 0110252761, registered office at 21st Floor, Charmvit Tower, 117 Tran Duy Hung, Trung Hoa Ward, Cau Giay District, Hanoi, Vietnam; phone +84 24 3903 0088 ("the Company", "we").

• Personal data email: info@pinecare.vn
• Website: https://pinecare.vn

For any request about your personal data, please contact us through the channels above.

2. Data that stays on your iPhone — the Company does not receive it

• The readings you log (weight, blood pressure, resting heart rate, fasting glucose, HbA1c, blood lipids…) with their unit, date and source (typed in, lab report, home device).
• The Plus / Ultra trend report, calculated on the device from those readings.
• Logging reminders, which are local notifications and never pass through our server.
• Visit notebook: doctor visits (date, place, doctor, conclusion, advice, follow-up date); photos and files of medical papers you take or choose (lab reports, prescriptions, discharge papers…), the text read from them and the results copied from them; medicines; conditions; allergies; blood type; emergency contact; family history; a portrait photo, an important alert and notes for doctors if you add them to the profile (printed at the top of the doctor report).
• Family notebooks: if you keep a notebook for a parent or relative, their information also stays only on your iPhone. You need that person's consent, or must be their legal representative or guardian. Parents (or guardians) may keep a notebook for a child under 18 and fill it in themselves.
• Reading documents: Apple's text recognition and Apple Intelligence (if your iPhone has it and you turned it on) run on your iPhone. PineCare does not send photos, text or results to Apple, the Company or anyone else.
• Speak to record: speech is recognised in on-device mode; the app keeps no recording.
• Face ID lock: handled by iOS; the app only learns whether unlocking succeeded, never any face data.
• Measured by the app (camera): when you start a measurement, images from the front camera (your face) and, if you use it, the back camera (your fingertip) are processed on the iPhone to work out heart rate and related figures. The app does not store images or video, does not send images anywhere and does not use your face to identify you. Only the resulting numbers are written to the notebook on your phone when you tap save.
• Watches and the Health app (Apple Health): if you allow it, PineCare READS the types of data you choose on the iOS permission screen (for example heart rate, breathing rate, sleep, steps, weight recorded in the Health app by Apple Watch, Garmin, Huawei…) to draw charts and analyse them on the iPhone. PineCare writes nothing to the Health app, does not send these numbers to our server, does not use them for advertising and does not share them with third parties. You can turn this off at any time in Settings › Health.
• Health profile and cardiovascular risk estimate: if you fill it in (sex, date of birth, smoking, blood-pressure treatment, diabetes), this information stays on the iPhone and is used on the device to estimate risk with a published model.
• Assessments and advice: worked out on the device with fixed rules from the numbers in your notebook; no number is sent anywhere for this.
• Pregnancy notebook: if you use it (for yourself or for a relative), what you record — due date or gestational age, appointments, notes, keepsake photos, home tracking sessions — is stored only on the iPhone. This is reproductive-health data, a sensitive category; the Company does not receive it. Appointment reminders are on-device notifications and do not mention pregnancy.
• Medicine and appointment reminders: local notifications that never show medicine names, conditions or places.
• Doctor reports (PDF and an international-standard FHIR data file) and notebook backup files: created on your device and leave it only if you share or save them yourself. A report may include your portrait photo if you added one to the profile. Backup files are NOT encrypted or password-protected, so you can open them easily: anyone who has the file can read it. Once a file leaves your device, keeping it safe is your responsibility.

Health information is sensitive personal data under Vietnamese law. PineCare is therefore designed so that it never leaves your device: the app does not send readings to the Company's server or to any third party. iOS encrypts the app's data while your iPhone is locked with a passcode.

• iCloud Backup: if you turn on iCloud Backup for your iPhone, the device backup Apple keeps in your iCloud account may include PineCare data, under Apple's policies. The Company cannot access that backup.
• Downloaded file: "Download my data" creates a file on your device that includes your readings. It leaves the device only if you share it yourself.

3. Data the Company processes on its server

• Account (only if you choose to sign in): the identifier Apple issues when you use Sign in with Apple (no name, no email), language, time zone, creation date. Purpose: create and maintain your account, show the right language and dates. The first time you sign in on an iPhone, the notebook you kept on that iPhone is attached to your account on the device itself — your readings still never leave the iPhone.
• Sign-in sessions: a session code (stored only as a hash) and its expiry. Purpose: keep your sign-in secure.
• Consent choices: purpose, document version, and when you gave or withdrew consent. Purpose: prove consent as the law requires.
• PineCare plans (Plus, Ultra) and App Store transactions: product, transaction ID, purchase, renewal, expiry and refund dates, store country, price and currency. The Company does not receive your card or payment details. Purpose: grant and restore your plan, reconcile, handle complaints, meet accounting and tax obligations.
• Technical and activity logs: IP address, time, request type, error codes; important account actions such as sign-in and account deletion. No readings. Purpose: operations, security, detecting and preventing attacks.
• "From PineCare" content: the app downloads the list of PineCare products and programmes from our server. The request carries no account, readings or device ID; the content is the same for everyone and is never chosen from your readings or health notebook. The server only keeps the technical log described above. Tapping "Buy at PineCare.vn" opens PineCare's website; buying there follows that site's policies.
• App usage analytics: PineCare currently does not collect any. If that changes, the app will ask you separately, it will be off by default, and you can switch it on or off at any time.
• Offers: only if you switch them on; off by default.
• Feedback and ratings you send: when you tap send in the app, our server receives the star rating, topic, the text you wrote, where you opened the feedback screen, app version, iOS version, phone model (for example iPhone16,1 — not a device identifier) and language, linked to your account. No readings, photos or files are attached; please do not write your conditions or readings in feedback. Purpose: fixing problems and improving the app.

4. Legal basis

• Your consent: when you accept the Terms of Use and this Policy at the start, and separately for each optional purpose such as offers. Silence or inaction is never treated as consent.
• Performing the agreement between you and the Company: providing your account and the plan you bought.
• Legal obligations: accounting, tax, and lawful requests from competent authorities.

5. Sharing

We do not sell or rent personal data and do not use it for advertising. We share only what is necessary with:

• Apple: Sign in with Apple; the App Store (payment, renewal, refunds); revoking sign-in when you delete your account.
• Our server hosting provider: stores account data only, under a data processing agreement and on the Company's instructions; data is encrypted at rest and in transit.
• Competent authorities: when the law requires it.

6. Where data is stored and transfers abroad

PineCare's server is located in Vietnam. Transaction information is processed by Apple on Apple's systems to carry out payment. When you delete your account, the PineCare server asks Apple to revoke the app's Sign in with Apple authorization, as Apple requires.

7. How long we keep data

• Your notebook on the device (readings, visits, document photos, medicines, conditions…): until you delete it in the app, delete your account or remove the app. Items you delete stay in the app's Recently deleted for 30 days so you can restore them, then are removed for good.
• Account: while you use PineCare; deleted immediately when you delete your account.
• Sign-in sessions: up to 30 days, or until you sign out.
• Feedback you send: up to 24 months from receipt; deleted immediately when you delete your account.
• Technical logs: up to 90 days.
• Transaction information: for the accounting and tax retention period set by law (currently up to 10 years). After you delete your account, it is no longer linked to your Apple identifier in our systems.
• Consent records and activity logs: until the end of the third year after the account is deleted, to demonstrate compliance and handle complaints.
• Server backups: overwritten on a rolling basis within 30 days.

8. Your rights and how to use them

Under Vietnam's Personal Data Protection Law you have the right to: be informed about processing; give, refuse or withdraw consent; view and correct your data; ask for it to be provided, deleted or restricted; object to processing; complain, report, sue and claim compensation; and ask for measures to protect your data.

You can do these yourself in the app, immediately:

• View and download: Account › Download my data.
• Withdraw consent to offers: Account › the matching switch.
• Delete readings: swipe to delete a single reading in the Log, or Account › Delete readings on this iPhone (this also deletes the visit notebook).
• Delete visits, documents, medicines, conditions or family notebooks: the Delete button on each item (kept in Recently deleted for 30 days).
• Delete your account: Account › Delete account (confirmed again with Apple).

For anything else, email us. We reply within 2 working days and complete the request within the time limits of Decree 356/2025/ND-CP (10 to 20 days depending on the request). We may ask you to verify that the request comes from the account holder.

Because the Company does not keep your readings, we cannot view, restore or delete readings on your device for you — you manage them directly in the app.

You may also complain to the personal data protection authority of the Ministry of Public Security of Vietnam.

9. Security

• The connection between the app and the server is always encrypted; data on the server is encrypted at rest.
• Session codes are stored only as hashes; server access is granted on a least-privilege basis and logged.
• If a personal data breach occurs, we notify the competent authority within 72 hours as required by law and notify you when it may affect your rights and interests.

10. Children

PineCare is for people aged 18 and over. Parents or guardians may keep a notebook for a child under 18 under Family notebooks on their own iPhone; that information stays only on the parent's device and the Company does not collect it. We do not knowingly collect children's data. If you learn that a child has opened an account themselves, contact us and we will delete that account.

11. Changes

When we change this Policy we update its version number and let you know in the app. If a change adds a new purpose or a new type of data, we ask for your consent again before it applies.

If the Vietnamese and English versions differ, the Vietnamese version prevails.