Privacy Policy

This policy explains how nap24h collects, uses, stores, shares, and protects information when you use nap24h.net or the nap24h mobile app (Bundle ID / Application ID: com.nap24h.telco).

This English version is provided for convenience. If there is any inconsistency, the Vietnamese version prevails.

• Contact information: email address for registration, login, security verification, and support.
• Identifiers: internal account ID, device or visitor identifier, and session tokens.
• Financial and transaction data: wallet balance, transaction history, phone numbers or service targets entered by you, denominations, and order status.
• User-provided content: phone numbers, carrier or service selections, and other transaction inputs you provide.
• Technical data: IP address, User-Agent, app version, API logs, and security logs.
• Security settings: 2FA state, transaction PIN state, and trusted devices.

We do not intentionally collect GPS location, contacts, photos, microphone or camera data, advertising ID for tracking, health data, or children data.

• Operate the service: login, wallet, transaction creation, card purchase, and bill query features.
• Authenticate users, manage sessions, trusted devices, and account security.
• Prevent fraud, abuse, and unauthorized access.
• Provide customer support, transaction review, and dispute handling.
• Improve service reliability through technical logs and error diagnostics.

Nap24h does not use your data for tracking as defined by Apple. We do not combine app data with third-party data for advertising or cross-app tracking, and we do not sell personal data.

Biometric login is optional. If enabled, your login credentials are stored on your device using iOS Keychain or Android Keystore and protected by the operating system biometric prompt.

• Nap24h does not collect, store, or transmit face or fingerprint templates.
• The server receives a normal HTTPS login request after your device unlocks the stored credentials locally.
• You can disable biometric login in the app settings or remove stored credentials from the device.

• Google reCAPTCHA Enterprise may be used to assess login and security risk.
• Transaction processing partners may receive the minimum data required to process orders.
• Hosting, CDN, email, and infrastructure providers may process data needed to operate the service.
• Device libraries may provide technical device information for security and session management.

We share data only as needed to operate transactions, comply with law, protect the service, or respond to your request. Most account data is linked to your login email and device. Transaction and accounting records may be retained as required by Vietnamese law and for dispute handling.

• You can access and update account settings in the app or website.
• You can revoke trusted devices, disable biometric login, and change your password.
• You can request access, correction, or deletion of personal data where legally permitted.
• Account deletion instructions are available at https://nap24h.net/en/account-deletion.

For privacy questions or data requests, contact [email protected] or use the support channel available in the app/website after login.