Privacy Policy

Who is responsible for your data

Bonjour Path is published by Hung Luong, an individual developer, who decides why and how the personal data described in this policy is processed (the personal data controller). Google LLC and its affiliates process analytics and advertising data as described below. You can contact the developer at trample_pies_4l@icloud.com.

Learning information stored on your device

The app stores course progress, answers and attempts, review schedules, checkpoints, writing drafts, saved phrases, app preferences, reminder settings, and widget preferences locally. This information is not sent to the developer. Recordings, transcripts, written answers, saved phrases, backup files and backup passwords are never included in the app's analytics events.

Optional Google Firebase Analytics

If you separately turn on Share app usage, Bonjour Path uses Google Analytics for Firebase to send the information below. In version 1.2, this also requires Apple’s tracking permission; allowing Apple’s permission alone does not enable optional usage sharing. A previously saved usage-sharing opt-in cannot bypass Apple’s permission:

• Visits to Today, Path, Practice, Words and Progress.
• Course lesson completion, with the learning level.
• Completed course practice checks, with the learning level and skill category. Answers, scores and correctness are not sent in these custom events.
• Standard analytics information such as app launches, sessions, engagement, app version, operating system, device model, language, an app-instance identifier and approximate location derived from network information.

Purpose: these reports help the developer understand feature use and improve the app. They are not used for advertising. An app-instance identifier distinguishes one installation from another; this is pseudonymous information, not a promise of anonymity. The app does not set an account/user ID in Firebase Analytics, and its Firebase configuration disables advertising and vendor identifier collection and advertising personalization. Advertising SDK processing in version 1.2 is described separately below. The vocabulary widget includes neither Firebase Analytics nor AdMob.

Sensitive data notice: usage reports describe how you use an online service. Vietnamese law (Decree 356/2025/NĐ-CP, Article 4.1(l)) lists behaviour-tracking data and data about the use of online services as sensitive personal data. Bonjour Path therefore treats these reports as sensitive personal data and collects them only if you turn on Share app usage.

Where it is processed: Google processes analytics as the developer's service provider on Google servers that may be located outside Vietnam and outside your country, including in the United States. See Google's Privacy Policy and Privacy and Security in Firebase.

Retention: Google Analytics keeps event-level data for 2 months, the retention period set in the Bonjour Path Analytics property, and then deletes it. Turning sharing off stops future analytics collection and clears analytics stored locally, including resetting its app-instance identifier. It does not remove reports already sent to Google or change your learning progress. To ask for deletion of reports already sent, see Your rights and how to use them.

Google AdMob advertising in version 1.2

Version 1.2 includes banner ads on Today and Progress and occasional full-screen ads when you return to those screens after about 90 seconds of active use. Interstitials are spaced at least 30 minutes apart and limited to two per calendar day. The app does not run an advertising timer that interrupts an exercise. Full-screen ads can be closed with the close control shown on the ad.

Google Mobile Ads and its User Messaging Platform may process your IP address and approximate location, app- or device-related identifiers, ad impressions and interactions, app/device information, crash logs and performance or other diagnostic information. Purpose: this information supports ad delivery, measurement, fraud prevention and service operation. Non-personalized advertising can still involve data collection; it does not mean that no information is processed. Ad impressions and interactions describe how you use an online service and may be sensitive personal data under Vietnamese law, as explained above.

Bonjour Path requests permission through Apple’s standard App Tracking Transparency dialog after onboarding and waits for that request to finish before ad setup. The app requests non-personalized ads for both choices, disables Google’s publisher first-party identifier and disables ads personalization. If permission is declined or restricted, the advertising identifier is unavailable and non-personalized ads can still be requested through AdMob’s supported flow without that identifier, subject to regional consent. The app does not supply replacement cross-company tracking identifiers, contact lists or fingerprint data to AdMob. If permission is allowed, the advertising partner may use the advertising identifier for advertising measurement across apps. Non-personalized requests alone are not a guarantee of no data collection or no tracking; Apple’s system choice and Google’s privacy signals also apply. The app does not send your recordings, transcripts, lesson answers, writing drafts or saved phrases to AdMob.

After Apple’s permission request has finished, Google’s User Messaging Platform separately checks whether regional advertising choices are required before the advertising SDK starts or requests ads. Ads load only when Google’s consent checks permit requests; they stay off if consent setup fails or requests are not permitted. Google may apply limited ad serving based on those privacy signals. These regional forms do not replace or override Apple’s permission. Where required, you can review or change the available choices at Progress → Privacy → Ad privacy choices. If consent information cannot be updated, the app does not start a new ad request. Learning remains available if an ad cannot be shown.

Apple’s tracking permission is managed in iOS Settings; Progress → Privacy → Open iOS Settings opens the app’s settings. Returning to Bonjour Path refreshes the permission. A changed tracking choice discards banners/preloaded ads and rechecks regional consent before fresh requests. The current version has no ad-free mode, and declining does not remove ads. Optional analytics collection stops if Apple’s permission is no longer authorized. Advertising is separate from Share app usage. Turning off that switch stops optional Firebase Analytics; it does not remove advertisements or change your advertising choices.

Where it is processed and for how long: Google processes advertising information on servers that may be located outside Vietnam and outside your country, including in the United States, and keeps it for the periods described in How Google retains data. See Google's Privacy Policy and How Google uses advertising information.

Microphone, recordings and speech recognition

Microphone access is optional and requested only when you choose to record a speaking-practice response. Recordings are temporary local files for replay or transcription. Old temporary recordings are removed. The app does not upload recordings to the developer or Firebase.

Optional speech transcription requires Apple's on-device Canadian French recognition. If it is unavailable, the app does not send your recording for remote transcription. The transcript is practice assistance, not an accent score or official assessment. Apple manages system permissions and speech technology under Apple's Privacy Policy.

Reminders and backups

Learning reminders are local iOS notifications. You control notification permission in iPhone Settings.

You may export a password-protected encrypted learning backup to a destination you choose. Encryption and restoration happen on your device. The developer does not receive the backup or password and cannot recover a forgotten password. The destination you select has its own privacy terms. Analytics consent, advertising consent and local advertising frequency counters are stored separately and are not restored from learning backups.

Retention and deletion of local learning data

Learning data remains on the device until you reset it in Progress → Reset all learning data or delete the app. Resetting learning progress does not change the separate usage-sharing choice. Turn off sharing through Privacy & usage sharing if you also want to stop analytics. Delete exported backups separately from the places you saved them.

Your rights and how to use them

Under Vietnam’s Law on Personal Data Protection (No. 91/2025/QH15) and the privacy laws that apply where you live, you have the right to:

• be informed about how your personal data is processed;
• give, refuse or withdraw consent;
• view your personal data and correct it, or ask for it to be corrected;
• ask for a copy of your personal data, or for it to be deleted, or for its processing to be restricted;
• object to processing;
• complain, report a violation, start legal proceedings and claim compensation as provided by law; and
• ask for measures to protect your personal data.

Choices you can change yourself in the app, at any time:

• Stop optional analytics: turn off Progress → Privacy → Share app usage. Collection stops immediately and the local app-instance identifier is reset.
• Change Apple’s tracking permission: Progress → Privacy → Open iOS Settings, or iPhone Settings → Privacy & Security → Tracking.
• Review regional ad choices where Google requires them: Progress → Privacy → Ad privacy choices.
• View, change or delete your learning data: it is shown in the app, and Progress → Reset all learning data deletes it.

Requests to the developer: email trample_pies_4l@icloud.com with the subject “Privacy request”. Say which right you want to use and whether your request concerns analytics data or advertising data. Because Bonjour Path has no accounts, the developer cannot look up reports already sent to Google by name or email; include any details that help identify your installation, such as the approximate dates you used the app with sharing turned on. The developer may ask for information needed to confirm the request.

Response times: the developer acknowledges each valid request within 2 working days and then completes it within the following times:

• withdrawing consent, restricting processing or objecting: within 15 days, or 20 days if Google must also act;
• viewing, correcting or providing personal data: within 10 days, or 15 days if Google must also act;
• deleting personal data: within 20 days, or 30 days if Google must also act.

If a request is complex, the developer may extend the time once, by no more than the original period, and will tell you why. If a request cannot be carried out for a lawful reason, the developer will tell you the reason. Withdrawing consent does not affect processing that took place before the withdrawal.

If you are not satisfied with the response, you may contact the personal data protection authority in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security, or the data protection authority where you live.

Security and incidents

Only the developer's own Google account can access the Firebase and AdMob data for Bonjour Path, and that account uses two-step verification. If a personal data incident occurs that may cause harm, the developer will notify the competent authority within 72 hours of detecting it, as required by Vietnamese law, and will inform affected users where required.

Children and families

Under Vietnamese law, a child’s privacy rights are exercised by the parent or legal guardian. If you are under 16, please ask a parent or guardian to make the privacy choices in the app with you, including Apple’s tracking permission and Share app usage. The app works with sharing off and with tracking declined. Parents and guardians can keep sharing off, remove local learning data with the reset control or by deleting the app, and ask the developer to delete analytics data as described above. The app requests general-audience ad content, but an App Store age rating is not an age-verification or consent mechanism.