ORIN Privacy Policy
Last updated: 27 October 2026. The Vietnamese version prevails.
This policy explains how ORIN collects, uses and protects your personal data, in line with applicable personal data protection rules.
Data controller: the ORIN team. Email: [email protected].
1. Data we collect
| Data | When | Purpose |
|---|---|---|
| ORIN account ID; your Apple identifier (Sign in with Apple) | When you sign in | Create and maintain your account |
| Email provided by Apple (may be a private-relay "Hide My Email" address), if Apple returns one | First sign-in | Account and subscription communication |
| Sessions (session tokens stored only as hashes) | While you use your account | Keep you signed in securely and allow sign-out |
| Subscription information: product, status, expiry, Apple transaction identifiers, and the purchase link token (appAccountToken) | Purchase, renewal, cancellation, refund or restore | Grant and verify ORIN Premium |
| Technical data in server logs: IP address, access time, device type, app version | When the App calls our servers | Operation, security, abuse prevention, troubleshooting |
| On-device settings: language, appearance, saved matches or teams | While you use the App | Respect your preferences |
We do NOT:
- collect payment card data (Apple handles all payments);
- track you across other apps or websites;
- sell personal data;
- show personalised ads;
- use third-party advertising or analytics SDKs (at the time of this update).
2. Legal bases
- Performance of a contract: the service and subscriptions.
- Your consent: sign-in.
- Legal obligations: accounting and tax.
- Legitimate interests: security and fraud prevention.
3. Sharing
We share data only as needed to run the service:
- Apple: sign-in, payments and transaction verification;
- Cloudflare: content delivery, traffic security and email forwarding (may process IP addresses);
- Hosting provider: Contabo (servers in Singapore);
- Authorities: when required by law.
Our football data providers do not receive your personal data.
4. International transfers
ORIN servers are located in Singapore (Contabo), and partners such as Apple and Cloudflare may process data outside Vietnam. We follow the required procedures for cross-border transfers of personal data.
5. Retention
- Account data: kept until you delete your account.
- On account deletion:
- all sessions are revoked immediately;
- we ask Apple to revoke sign-in access;
- your email and Apple identifier are removed from the account.
- Transaction records: kept for the periods required for accounting and tax. A minimal record of the transaction, not linked to your identity, is kept to prevent fraud and to stop a subscription from being attached to the wrong account.
- Server logs: kept for up to 30 days.
- Backups: rotated within 6 months.
6. Your rights
You have the right to:
- be informed, and to access and correct your data;
- erase your data and withdraw consent;
- restrict or object to processing;
- complain.
Delete your account in the App (Me → Delete account) or email [email protected]. We respond within the legal time limits. Deleting your account does not cancel your Apple subscription; cancel it in iPhone Settings.
7. Security
- Connections are encrypted (HTTPS and WSS).
- The database is not exposed to the internet.
- Session tokens are stored as hashes.
- Sign-in credentials on the device are kept in the Keychain.
- Secret keys are stored in protected files on the server.
- Internal access is kept to a minimum.
8. Age
The App is intended only for users aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.
9. Changes
We will announce material changes to this policy in the App.
10. Contact
[email protected]. A postal address for written requests is provided on valid request by email.