Privacy Policy

Grindict collects personal information of users for the following purposes:

• Provide and maintain the service, such as account management, access authentication, and personalization of the learning experience, including the interface, dictionary, collections, and practice.
• Operate spaced repetition from the interaction history and practice progress of each account.
• Authenticate and secure accounts by sending account-verification email, verification codes, password-reset notices, or by handling requests to change account information.
• Process transactions and payments, including confirmation of membership-upgrade payments, issuance of electronic invoices, and handling of refund requests within the stated time frame.
• Support customers by receiving and answering questions, handling complaints, or responding to error reports and content suggestions from users.
• Improve the service and comply with the law by analyzing usage data in order to optimize features and platform performance, and to meet financial and accounting reporting and record-keeping duties under the law of Vietnam.

The personal data collected includes:

• Account and identity information such as email address, encrypted password, full name, date of birth, gender, and country of residence.
• Learning settings and progress, including interface language, light or dark display, input mode, linked dictionary, custom collection lists, practice history, mastery level, and game-result data.
• Transaction and payment information, including order history, the transaction details needed to confirm payment, membership activation status, and refund history. The company does not store a personal identification number on the invoice.
• Suggestions and error reports, including vocabulary error reports, suggestions for new sentences or words, and personal notes.
• Technical data such as network address, browser type, operating system, session time, and technical response data from the system connection.

• Personal information of the user is stored for as long as the account remains active on the Grindict system.
• If the user requests account deletion, the system permanently deletes all personal information, including email address, password, full name, and other identity information, and retains only an identifier together with learning data and statistics in anonymized form.
• Payment records and electronic invoices are kept for the period required by the Accounting Law and the Law on Tax Administration of Vietnam.

Grindict does not sell, rent, or share personal data of users with a third party for that party's own commercial purpose. Data is shared only in the following limited cases:

• Infrastructure and technical service providers, including providers of server hosting, network infrastructure, and automated email, in order to operate the system and verification notices.
• State authorities, when there is a lawful written request from the police, the tax authority, or another competent state body under the law of Vietnam.
• Payment and invoicing organizations, including credit institutions, commercial banks, and payment-intermediary providers in Vietnam for transaction reconciliation, and providers of electronic-invoice services.

• Passwords are encrypted before storage. Data is encrypted while it is transmitted over the network. The system applies suitable technical measures to limit data leakage.
• Access is managed by strictly controlling and authorizing access to system data according to the role and responsibility of each staff member.
• The user is responsible for keeping the email account and personal password secure. Grindict is not responsible for loss arising because the user disclosed sign-in information.

Under the law on personal data protection, the user has the following rights over personal data:

• The right to view and edit information allows the user to sign in to the personal account page on the platform at any time to view the profile, update personal information, or change the password or email address.
• The right to delete data allows the user to request account deletion through account management on the platform, verified by email.
• The right to complain and request support allows the user to send feedback, a support request, or a complaint about the processing of personal data through the official contact channels of Grindict.

For questions, comments, or support requests about this personal-information privacy policy, please contact:

This privacy policy may be updated over time to reflect changes in how the service operates or in the law. The revised version is published on the website grindict.com together with the time it takes effect. Continued use of the service after the updated policy takes effect means acceptance of the revised content.