🛫 Daiichi Travel

1 Introduction

Welcome to Daiichi Travel – an Android application providing ticket booking and travel management services. We are committed to protecting your privacy and the security of your personal data.

This Privacy Policy describes how we collect, use, store, and protect your information when you use the app. By using Daiichi Travel, you agree to the terms set out in this Policy.

2 Information We Collect

2.1 Information You Provide Directly

• Full name – used to verify identity and print on tickets.
• Phone number – used for OTP-based login and customer support.
• Email address – used to send booking confirmations, magic-link sign-ins, and service notifications.
• Additional passenger details (where applicable): date of birth, ID/passport number — only when required for the type of service booked.

2.2 Automatically Collected Information

• App usage data: search history, booking history, payment status.
• Device information: device type, Android OS version – used for diagnostics and optimisation.
• IP address: recorded by the hosting infrastructure for security and fraud-prevention purposes.

2.3 Information from Third Parties

If you sign in via Google or Facebook, we receive your display name and profile picture within the scope of permissions you grant.

3 How We Use Your Information

4 Data Storage & Security

4.1 Where Data is Stored

• Database: User data and booking history are stored on Supabase – a managed PostgreSQL platform compliant with SOC 2 Type II, with encryption at rest (AES-256) and in transit (TLS 1.2+).
• Web app hosting: Deployed on Firebase Hosting (Google) with high availability and global CDN delivery.

4.2 Security Measures

• Authentication is managed by Supabase Auth; passwords are never stored in plain text.
• Database access is controlled via least-privilege Row Level Security.
• Audit logs are maintained for critical actions.
• Regular security reviews are conducted.

4.3 Retention Period

Account data is retained while the account is active. After deletion, personal data is permanently removed within 30 days, except where retention is required by law.

5 Sharing with Third Parties

We do not sell your personal data. Information is only shared in the following circumstances:

5.1 Payment Partner – OnePay

Necessary transaction details (reference code, amount, order information) are transmitted to OnePay – a licensed payment processor in Vietnam, PCI-DSS compliant. We do not store bank card numbers or sensitive payment credentials on our servers.

5.2 Infrastructure Providers

• Supabase Inc. – data storage and processing.
• Google LLC (Firebase) – web app hosting.

5.3 Legal Requirements

We may disclose information if required by law, court order, or a competent governmental authority.

6 Your Rights

• Right of access: View the personal information we hold about you.
• Right to rectification: Update inaccurate or outdated information.
• Right to erasure / account deletion: Request deletion at any time:
  • In the app: Profile → Settings → Delete Account, or
  • Email support@daiichitravel.vn with subject "Account Deletion Request".
• Right to object / restrict processing: Object to or request suspension of processing.
• Right to data portability: Receive a copy of your data in a machine-readable format.

7 Children

Daiichi Travel is not directed to users under the age of 13. If you are a parent/guardian and believe your child has provided information without consent, please contact us to have it removed.

8 Changes to This Policy

Material changes will be notified via email or in-app notification at least 7 days before taking effect. Continued use of the app constitutes acceptance of the updated policy.

9 Contact Us