# Privacy Policy > What Vietnamese Buddy holds, who else handles it, how long it is kept, and how to export or delete everything. Source: https://vietnamesebuddy.com/privacy.html · Updated 2026-11-11 Legal # Privacy Policy Last updated 10 November 2026 Vietnamese Buddy sends the study material you give it to AI providers in the United States, which read, transcribe and speak it. This page says what we hold, who else handles it, and how you get it back or erase it. ## Who we are Confident Works LLC, which operates Vietnamese Buddy, is the controller of your personal data: the company responsible for it. Write to with any question about your data. Our registered address is 7901 4th St N, #32704, St Petersburg, FL 33702, United States. ## What we hold, why, and for how long | What we hold | Why | How long | | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Your account**Your email address, your plan, when you signed up and last used the app, and how you found us (such as a school’s join code). | To sign you in, run your plan and see where learners come from. | Until you delete your account. | | **What you add**Files, photos and recordings, and text you type, paste or clip from a web page, with the page’s title and address. | To turn it into study material and correct your work. | Until you delete it or your account. | | **Your study data**Words, cards and notes made from your material, your settings, and your practice history: answers, reviews, and words you play or tap. | To schedule reviews and show your progress. | Until you delete your account. | | **Optional features**A nickname and, if you turn on sharing, a link that shows it with your progress. Your reminder time, days and time zone, and which reminders we sent. | To show a teacher how you are doing, and to email you on days you have not studied. | Until you turn the feature off or delete your account. | | **Waitlist and applications**The email address you give our waitlist. The name, city, description, website and contact email of a school or tutor application. | To tell you when you can sign up. To review an application and, if you agree, publish a page. | Waitlist: 30 days if you never confirm, otherwise until you leave or sign in; if you leave, only the address, so we do not write again. Applications: until you ask us to remove them. | | **Billing and usage**Your subscription status, Paddle’s identifiers and a record of the AI work run for your account. We never see your card. | To bill you and apply your plan’s allowance. | As long as accounting and tax rules require, even after you delete your account. | | **Technical data**IP address, browser, time and page requested, in server logs. | To deliver pages, stop abuse and find faults. | Not tied to your account. Our website’s logs leave out your IP address and are kept 14 days. | What you add can include other people’s details, such as a classmate’s name on a worksheet, so please add only what you need. **Legal bases under the GDPR.** Contract: your account, what you add, your study data and billing. Legal duty: accounting and tax records. Legitimate interests: keeping the service secure, and knowing where learners come from. Consent: the waitlist, reminders, sharing and a public school page; you withdraw it by turning the feature off or leaving the list. ## Who else handles your data The app cannot work without these providers. | Provider | What it gets and does | | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **xAI**United States | What you upload, write or record, the text you read, the words you look up or save with their meanings, and text to speak aloud. It reads and transcribes your material, corrects your work, looks up words, adds Sino-Vietnamese notes, draws word pictures and generates audio. It keeps each request for 30 days to check for abuse, then deletes it. | | **Cloudflare**Global | Your email address and the sign-in, waitlist and reminder emails it delivers for us. Connection data, including your IP address, as it serves this website and the app. Page views from this website’s analytics script. | | **Paddle**United Kingdom | Your email address and the payment details you give it. It sells the subscription, takes payment, and handles tax and invoices. | | **Our hosting provider** | Everything we store, at rest on its servers. | As AI models change, we may replace one of these providers with, or add, a similar AI model or cloud computing provider in the United States. This page and its date are updated when that happens. Paddle sells the subscription as merchant of record, so [its privacy policy](https://www.paddle.com/legal/privacy) covers your purchase. We also share data with our professional advisers, such as lawyers and accountants, where they need it and are bound to confidentiality; with authorities where the law requires it; and where it is needed to establish or defend legal claims. We do not sell your data or use it for advertising. ## Where your data goes We are a US company and xAI works in the United States, so your data leaves your country if you live elsewhere. For transfers out of the EEA and the UK we rely on our providers’ data processing terms, including the European Commission’s Standard Contractual Clauses. Please do not add anything you do not want processed in the United States. ## How we keep it safe Each account has its own database, so learners’ material is kept apart by design. Connections are encrypted, and sign-in links, codes and session tokens are stored only as irreversible hashes. If a breach affects your data, we tell you and the relevant authority without undue delay. ## When you delete your account Delete it in Settings, once any subscription has ended. You are signed out at once, and we erase your data 30 days later; until then you can ask us to undo it. Backups made before then keep a copy until we remove them. Audio and pictures for single words are shared by every learner, carry nothing that identifies you, and stay. ## Cookies **The app** sets only the cookies it needs: one keeps you signed in for 90 days after your last visit, and short-lived ones support sign-in and remember a “Can’t listen now” tap. Your browser also stores unsent answers and your place in a session, so you lose nothing if the connection drops. The app runs no analytics. **This website** sets no cookies. It counts visits with Cloudflare Web Analytics, which reports each page you open, the page that sent you there, your browser, operating system, device type and country, and how fast the page loaded. It stores nothing on your device. The waitlist form sends your address to the app at app.vietnamesebuddy.com, where the list is kept. We do not track you across other sites, so a browser’s Do Not Track signal changes nothing here. ## Your rights Wherever you live, you can ask for a copy of your data, have it corrected, deleted or moved, and limit or object to how we use it. Most of this you can do yourself: you can edit or delete anything you added, and anything the app made from it, inside the app, and export or delete your whole account in Settings. To change the email address on your account, or for anything else, write to ; we answer within one month. In the EEA and the UK you can also complain to your data protection authority. ## Children Vietnamese Buddy is for people aged 16 and over. If you believe a child has an account, tell us and we delete it. ## Changes to this policy When the service changes, we update this page and the date at the top. If a change materially affects you, we email you before it applies. See also our [Terms & Conditions](terms.html), [Refund Policy](refunds.html) and [Legal notice](legal-notice.html).