SupArrive
EN
Privacy policy
Version 1.4 · Effective 05/11/2026 · Under Vietnam's Personal Data Protection Law No. 91/2025/QH15 · The Vietnamese Chính sách quyền riêng tư is the binding version.
Contents
In short: SupArrive keeps on its server only what your card and Member plan need: your card number, Member time, orders, gift codes used and each time a partner applied a perk. Your SOS number, SOS contacts and medical card stay on your phone. Your name, photo, trips and stamps stay there too, unless you sign in to an account to bring them to another phone; then your stamp photos and their AI drawings are kept in your account on Cloudflare, and deleted with the trip, the stop or the account. A photo goes to OpenAI only if you agree to let the AI draw your stamp (OpenAI doesn't train on it). Your location coordinates are never sent to us; when you stamp a stop, our server receives only your distance to it, rounded to 100 m. If you buy SupArrive Pro, Apple handles the payment; we receive only Apple's signed transaction (transaction ID, product, purchase date, environment), never your payment details. We don't sell data, show ads or use trackers. You can download or erase your data right in the app, under Account → Account & data. This website sets no cookies and uses no analytics.
1. Who is responsible
The data controller is SupArrive. Privacy contact: ioniclabs.support@gmail.com.
This policy covers the SupArrive app (for travellers and in partner mode), this website, the partner application form, our contact channels (email, Zalo, phone), and the groups and social media pages SupArrive runs.
2. The SupArrive app
Data that stays on your phone
| Data | Where it's stored | Why |
|---|---|---|
| SOS phone number | In the app's storage on your phone, and in your iCloud or computer backup if you use one. Not sent to us | To fill in the SOS text |
| Medical card (allergies, medication, conditions, blood type, date of birth, passport number, insurance) | On your phone. Never sent to us, even if you sign in to an account | To show to first responders when you open it |
| Photo, trips, stamps (the photos you stamp at your trip's stops, including stamps drawn by AI), the perks you log yourself | On your phone. They reach our server only if you sign in to an account (see below) | To show your card, trips, the stamps on your poster and your log |
| Your name | On your phone. It reaches our server only if you sign in to an account | To show on your card |
| SOS contacts | On your phone. iOS gives the app only the contact you pick, never your whole address book | To prepare an SOS text when you choose to send it |
| Location | Read only while the app is open. Coordinates are not stored and not sent to us. When you stamp a stop, the app records only whether you were near it and how far away, rounded to 100 m; if you are signed in, these two facts go to our server with the stamp (approximate location, linked to your account), never your coordinates. Coordinates leave your phone only when you send an SOS text yourself | Directions to your stops, stamping each stop in the right place, your dot on the map, coordinates on the SOS screen |
Data SupArrive keeps on its server
| Data | Why |
|---|---|
| Your card number and your phone's public key | To issue your card and stop forged cards |
| Member time and where it came from (a bought plan, a gift code, or granted by SupArrive) | To know your card's tier and when Member ends |
| Orders (plan, amount, time) and the transaction details SePay sends (amount, transfer description), which may include the name of the account that paid | To activate plans, reconcile payments, make refunds, and for accounting |
| Gift codes you used | To make sure each code is used only once |
| Each time a partner applied a perk to your card: partner, perk, discount, time. If you are signed in, it is tied to your account | To reconcile with partners, keep daily limits, and spot fraud; to show your perk log on all your phones |
| Your account profile, if you sign in: your phone number and hashed password (if you sign in with a phone number), or the identifier Apple, Google or Facebook makes for this app; your name, saved partners, followed communes, liked places, trips, the perks you log yourself and your photo (a small copy) | To bring your Member plan, saved lists, trips, perk log and photo to your other phone. Signing out takes them off that phone |
| Stamps, if you sign in: the stamp photo (at most 1600 px), its AI drawing if any, the stop and trip it belongs to, when it was taken, whether it came from the camera or your library, and whether you were near the stop with the distance rounded to 100 m. No coordinates. Each account holds up to 1 GB of stamp photos | To bring your stamps to your other phones and keep them when you change phones. Signing out takes them off that phone; signing back in brings them back. Stamps taken while signed out stay only on that phone and go to your account when you sign in |
| When the AI drew a stamp for your account (no photo or drawing), kept for 2 days | To limit drawings per day, since each one costs money |
| SupArrive Pro purchases, if you buy Pro while signed in: Apple's signed transaction, of which we keep the original transaction ID, product ID, purchase date and environment (live or test), linked to your account. No name, Apple ID, card or other payment details | To unlock AI-drawn stamps for your account on every phone, and to stop one purchase being used by many accounts |
| Invoice details, if you ask for a VAT invoice: buyer name, tax code, email, address | Only to issue and send the invoice |
This data is held on Supabase (servers in Singapore) and Cloudflare. Stamp photos are kept in Cloudflare's R2 storage in the Asia-Pacific region; the database holds only the list of stamps, not the photos. SupArrive receives no email, photo or friends list from Apple, Google or Facebook. Phone verification codes are sent by Zalo. Legal basis: carrying out our transaction with you (card, Member plans, SupArrive Pro, invoices), our accounting obligations under the law, and your consent (the account).
How long we keep it
- Guests' names in partners' ledgers are removed after 12 months.
- Orders and payment records are kept as long as accounting law requires.
- A stamp is deleted when you delete it, remove its stop from the trip, delete the trip or delete your account, on every phone signed in to that account; the app asks you to confirm first. Its photo and drawing leave storage within 1 hour. A “deleted” marker (no photo) is kept for 90 days so your other phones delete it too, then removed.
- The times the AI drew a stamp are kept for 2 days.
- Nightly server backups are kept for 30 days. They contain no stamp photos.
When a partner scans your card
The QR code holds your card number, tier, Member end date and an anti-forgery signature. Your name and phone number are not in it, so the partner sees only your card number. The partner records the perk in the ledger in their app, and the ledger is sent to SupArrive for reconciliation. Under their agreement with us, partners may use this only to apply perks. They may not use it for marketing or share it.
Network requests
- Card and Member plans: the app talks to SupArrive's server to get your card number, refresh your card's ticket, buy plans, enter gift codes and sync your account. These requests never contain your location.
- Payment: you pay by bank transfer in your own banking app, using a VietQR code, straight into SupArrive's bank account. SePay, the service that watches that account's transactions, sends SupArrive the transaction details so we can activate the plan. We never receive your banking login.
- Buying SupArrive Pro: payment, receipts and refunds are handled by Apple through the App Store, under Apple's policy. Apple gives the app a signed transaction; when you are signed in, the app sends it to SupArrive's server, and we keep only the transaction ID, product ID, purchase date and environment, linked to your account. We never receive your Apple ID, name or payment details.
- Saving stamps to your account: when you are signed in, the app uploads each stamp photo and its AI drawing (if any) to SupArrive's server to keep in your account, and downloads your stamps on your other phones signed in to it. No coordinates or camera details are sent with the photo.
- Stamps drawn by AI: the first time, the app asks whether you agree to send your photo to OpenAI to draw your stamp; you can change your mind any time in Settings → AI stamps. If you don't agree, your stamp keeps the original photo and nothing goes to OpenAI. Once you have agreed, when you are signed in and take or pick a photo to stamp a stop on your trip (or tap Redraw stamp), the app sends a small copy of that photo (at most 1024 px, with no location or camera details) and the stop's number, through SupArrive's server, to OpenAI (USA). OpenAI's image model redraws it as a crayon postage stamp, and the drawing comes straight back to your phone. Drawing keeps nothing on SupArrive's server; the photo and drawing are kept only when the stamp is saved to your account as above. Under OpenAI's API data policy, data sent through its API is not used to train its models, and OpenAI keeps it for at most 30 days, only to detect abuse, then deletes it. If you don't take or pick a photo, nothing is sent. Legal basis: your consent.
- Weather: forecasts come from Open-Meteo (Switzerland) for fixed points on the Loop. The request contains no location or personal data.
- Content: partner news and events come from SupArrive's content server. The request contains no personal data.
- Hearts and follows: counted against a random ID for your phone, not linked to your card or name. A phone that hasn't used the app for 180 days is no longer counted.
- TikTok videos: videos on the Reels page play in TikTok's embedded player. When you browse Reels, the app asks TikTok for each video's cover and author name (covers stay on the phone for a day at most); when you open a video, TikTok receives the request from your phone and may keep cookies (in a separate area of the app) under TikTok's policy. SupArrive never downloads or stores the videos. Erasing your account clears that area too.
- Facebook group: the join button opens Facebook; SupArrive reads none of your Facebook data.
- Maps: maps and directions use Apple Maps under Apple's policy.
The app has no ads, no analytics SDKs, and doesn't track you across other apps. SupArrive's App Store privacy label says data is collected, for app functionality only and never for tracking.
3. This website
No cookies, analytics or ads. Our host (currently GitHub Pages, run by GitHub, Inc., USA) may keep technical logs such as IP address and browser type to run and secure the service, under its own policy.
4. When you contact us or apply as a partner
- Email, Zalo, phone: your name, contact details and message, used to reply, support you with Member plans and handle complaints. Kept for 24 months after our last contact. Complaints are kept for 5 years.
- Partner application (Google Forms): business name, type, address, contact person, phone, email. Used to consider and conclude a partner agreement. Deleted after 12 months if no agreement is signed.
- Signed partners: representative and contact details, business documents, and bank details if selling Member gift codes. Kept for the partnership and 5 years after it ends. Accounting records are kept for the period the law requires.
Please don't send ID cards, passports or health information. We don't need them.
5. Facebook group and page
Our Facebook group and page run on Meta's platform, and Meta processes your posts and profile under its policy. Admins use your answers to the joining questions only to approve members. If you choose to leave an email for a guide, we use it only for that, and you can ask us to delete it at any time. Moderation logs are kept for 12 months. We only quote your posts elsewhere with your permission or after removing anything that identifies you.
6. Sharing and transfers abroad
We never sell personal data. We share it only with the service providers we need (Supabase for the database, Cloudflare for servers, network and stamp photo storage, SePay for confirming bank transfers, Apple for Sign in with Apple and for selling SupArrive Pro through the App Store, Google (including Sign in with Google), Meta (including Facebook Login), Zalo (phone verification codes), OpenAI (drawing stamps from your photos, see section 2), our web host, and accounting and e-invoicing services), with partners who scan your card (card number, tier, Member end date), with the partner concerned when we handle a complaint, and with authorities when the law requires it. Card, Member and order data is held on Supabase in Singapore and on Cloudflare; stamp photos are kept in Cloudflare storage in the Asia-Pacific region. Google, Meta and our web host may also store data outside Vietnam, for example in the US or Singapore. Photos for stamps are sent to OpenAI in the US when you agree. We follow the cross-border transfer procedures that apply to an organisation of our size.
7. Your rights
You can ask to access, correct or delete your data, withdraw consent, restrict or object to processing, and complain or seek compensation as the law provides.
- Right in the app, under Account → Account & data, you can:
- download a JSON file of everything SupArrive's server holds about your card;
- delete your account and all your data, with one button. Your card stops working, your name is removed from every partner's ledger (including the copies on partners' phones), your account (if any) is deleted along with its phone number, password, Apple, Google or Facebook link and every saved stamp (stamp photos leave storage within 1 hour), every phone is signed out, and the data on your phone is erased too. Any Member time left, paid plans included, ends; the app asks you to confirm first. SupArrive keeps only orders (card number and amount) and any VAT invoice request you sent, as accounting records.
- Data only on your phone: edit it in the app. Uninstalling the app erases only what the app keeps on your phone; your card and Member time stay on the server.
- Other requests, or data you sent us through our contact channels: write to ioniclabs.support@gmail.com with your card number or details that identify you. We acknowledge within 2 working days and act within the legal deadline, usually within 15 days.
8. Security and breaches
Your QR code is a ticket signed by our server and signed again every 30 seconds by your phone's own key, kept in its Secure Enclave, and it carries minimal data. Only the SupArrive staff who need it can reach the data on our server, each with their own code, and every action is logged under their name. Partner files are kept in accounts protected by two-factor authentication, and only the staff who need them have access. If a breach happens, we notify the authority and the people affected within the legal deadlines.
9. Children
SupArrive is for people aged 16 and over. We don't knowingly collect data from children under 16 without a parent's or guardian's consent.
10. Changes
We post new versions here and announce them in the app before they apply. If we want to use your data for a new purpose, we will ask for your consent again.