IKI App — iOS & Android. Free download.
Home›Data usage
Transparency commitment · Luật 91/2025/QH15

Data usage.

IKI Beauty & Wellness is a proactive health-care ecosystem for women and families, part of HOPE CORP. This page sets out transparently how we collect, process, store and protect users' data.

This is a translation provided for your convenience. The Vietnamese version at ikihealing.com/du-lieu-su-dung.html is the original and is the version that applies; if the two differ, the Vietnamese version prevails.

6 core principles

All of IKI's technical and product decisions must pass through these 6 principles.

Minimum data: collect only what is needed

IKI does not collect data without a clear purpose. If a field is not necessary for personalization or the user experience, we do not ask for it.

Explicit consent

Every registration form states the purpose of processing clearly; you only receive further advisory content or offers if you tick the consent box yourself (it is never pre-ticked); the body-constitution quiz has a separate consent box for self-reported health information (Luật Bảo vệ dữ liệu cá nhân 91/2025/QH15 (Vietnam's 2025 Law on Personal Data Protection)). You can withdraw your consent at any time by emailing contact@ikihealing.com.

No selling: we do not sell data

HOPE CORP commits not to sell or rent out personal data. Data is only passed to operational service providers (database, email, payment, delivery, measurement) and only the part needed for their work — the full list is in Chính sách bảo mật (Privacy Policy), section 5.

Anonymous aggregation

When aggregating insights for research (e.g. constitution-type ratios by region), the data has been fully anonymized — it cannot be traced back to an individual.

Right to be forgotten

If a user requests data deletion → IKI confirms within 2 working days and deletes the data from all systems within 20 days (except records that must be retained under accounting law). Submit a request at ikihealing.com/quyen-du-lieu.

Transparency about where data is stored

IKI's database and web servers are hosted with cloud-computing service providers outside Vietnam (Supabase, Vercel; email via Resend in the United States). IKI states this clearly so that you can decide, prepares a cross-border data transfer impact assessment under Nghị định 356/2025/NĐ-CP (Decree 356/2025/ND-CP) and gives you the right to request that the transfer be stopped.

What data IKI collects & what for

1. Identification information

Collected: Full name, email, phone number — when a user registers for a course, downloads the app, or buys a product.

Purpose: Account verification, sending order confirmations, customer support contact.

Storage: AES-256 encrypted, hosted in Vietnam.

2. Constitution-type & lifestyle information

Collected: Results of the 5-minute survey (10 questions) — Eastern-medicine constitution type, health goals, food preferences & allergies.

Purpose: AI personalization of your programme route. This is core data that lets IKI make the right recommendations for the user.

Storage: Encrypted, tied to the user account. Users can view/edit/delete it at any time in the App.

3. 30-second daily health log

Collected: Each evening the user logs: mood, energy, sleep, digestion, physical activity — via the IKI App.

Purpose: AI detects imbalance patterns and suggests lifestyle adjustments. Not shared with anyone else.

Storage: Encrypted, retained for 5 years for effective personalization; can be deleted earlier if the user requests.

4. Payment information

Collected: IKI does not store credit card information. All transactions go through VNPay, MoMo, ZaloPay.

Purpose: Processing payment for courses/products.

Storage: Only the transaction ID + amount are stored for reconciliation; PAN/CVV are never stored.

5. Technical cookies & analytics

Collected: Session cookie, Microsoft Clarity (heatmap + anonymized session recording), UTM tracking.

Purpose: Improving website UX, understanding which channels bring users to the site.

Storage: Clarity automatically masks sensitive fields (email, password); the session ID is a random hash.

How personal data is used for AI

This is an important section that is new to many users — IKI is fully transparent about it.

Personalization (personal recommendations)

A user's own constitution-type data + log entries of that same user are used so that the AI can recommend suitable menus, courses and products. This is the main use case.

AI Model Improvement

User data is anonymized (identifiers removed) before being used to train/improve the AI Engine. Aggregate patterns (e.g. "60% of users with a Hư [deficiency-type] constitution have trouble sleeping in autumn") may be used — but can never be traced back to an individual.

Research & Insights

IKI may publish Vietnam wellness reports (e.g. "Top 5 common health issues by region") — using only data that has been aggregated & anonymized.

Not used for:

  • Selling to third parties (insurance, pharma, marketing companies)
  • Using self-reported health information to target advertising; advertising measurement code (Google Ads, Meta Pixel) only runs if you consent to cookies
  • Training AI for purposes outside wellness
  • Sharing with state authorities (except in response to a formal written request under the law)

Under Luật Bảo vệ dữ liệu cá nhân 91/2025/QH15, what rights do you have?

1. Right to access

Request that IKI provide all the personal data it holds about you. IKI will send it by email within 10 days.

2. Right to rectification

Request correction/completion where data is wrong or incomplete. Most fields can be edited yourself in the App.

3. Right to erasure (right to be forgotten)

Request deletion of all your personal data. IKI deletes it from all systems within 20 days (except where the law requires retention).

4. Right to withdraw consent

You can withdraw your consent at any time. Stopping promotional messages takes effect immediately; any remaining processing stops within a maximum of 15 days.

5. Right to restrict processing

Request that IKI temporarily suspend data processing while a dispute/complaint is being resolved.

6. Right to object

Object to IKI using your data for a specific purpose (e.g. anonymized AI training). IKI will respect this and stop immediately.

7. Right to complain

If you feel your rights have been infringed, you may file a complaint with the competent state authority (Bộ Công an, Cục An toàn thông tin).

How to exercise these rights

Send an email to contact@ikihealing.com with:

  • Your full name + the email/phone number you registered with
  • The right you wish to exercise (access / rectification / erasure / withdraw consent / ...)
  • Reason (optional — not required)

IKI commits to responding within 72 working hours.