Privacy Policy

Applies to the GoWrist apps for iPhone and Android phones and the GoWrist app for HUAWEI WATCH. Last updated: 2 November 2026. The Vietnamese version prevails if the two differ.

1. Who is responsible

Data controller: Dinh Tuan Thanh, support@gowrist.io.vn ("we").

2. Data we use and why

2.1 Location

With your permission (the iOS prompt), GoWrist reads the iPhone's location while the app is open and during a navigation trip, also with the screen off (iOS shows the blue location indicator). Outside a trip the app does not use location in the background.

Location is sent over HTTPS only for the following, to the public OpenStreetMap-based servers in section 4 (FOSSGIS e.V.'s Valhalla for routing, komoot's Photon for search, OpenFreeMap for the map) or to another data source you add in the app:

• Routing: start, destination and the computed route (turn instructions and speed limits); your current position when you leave the route and it is recalculated.
• Search: the text you type plus your approximate position to rank nearby results; the coordinates of a point you pick on the map, to look up its address.
• Map: the app downloads map tiles for the area on screen, so the map server sees which area is loaded (not who loads it).

These requests carry no account, email or device id, so those servers do not know who you are. GoWrist does not store these coordinates or search text and does not use them for advertising or analytics. Those providers handle the requests under their own policies (they may keep short-lived logs, possibly outside Vietnam).

2.2 IP address

As with any Internet connection, the servers in section 4 and Cloudflare receive your IP address. It is used only to deliver the response and to block abusive traffic (rate limits), not to identify you.

2.3 Data that stays on your iPhone

• Settings: voice guidance, watch screen options, watch connection state.
• Home, Work and up to 10 recent destinations (name, address, coordinates). Remove any with ✕. Like all app data they are part of your own iPhone/iCloud backup (if you back up); we cannot read them.
• Free plan counter (iOS Keychain): when your free week started, the times of watch trips, the destination of the latest trip (so continuing to the same place within 30 minutes counts as one trip), and purchased Day/Week passes. It survives deleting the app so free trips do not restart; it is not backed up to iCloud and is erased only by resetting the iPhone.
• Spoken guidance is generated on the device by iOS.

We cannot access any of this data.

2.4 GoWrist Pro purchases

Payments are handled by Apple through your Apple ID. We never receive your Apple ID name, email or card details. The app reads Apple-signed transactions on the device (plan, purchase and expiry dates, refunds) to unlock Pro. When you are signed in, the transaction id, plan, purchase / expiry dates and refund status are also sent to our servers (section 2.8) to tie Pro to your account; Apple also notifies our server of renewals and refunds. See Apple's privacy policy.

2.8 Account (when you sign in)

You need an account only to navigate on the watch (even the free trips) and to buy or restore Pro. Sign-in is with Google or Apple; there is no separate password. We store:

• Identity: email, name (Apple supplies it only at first sign-in; Google from your profile), and the Google / Apple user id.
• Device: a device id (a random UUID kept in the iPhone Keychain; on Android a one-way hash of the app's Android ID, so reinstalling the app is not counted as a new phone — the Android ID itself never leaves the phone), device name, platform and app version. One phone per account uses the app at a time; signing in on a new phone signs the old one out.
• Purchases: transaction id, plan, purchase / expiry dates, refund status (section 2.4).
• Watch trips: when a watch trip starts, the phone tells the server the start time and the trip's destination coordinates, only to count free trips per week (and to recognise a continued trip to the same place). We do not store the route or your position during the trip. Phone-only trips are not reported.
• Session: sign-in tokens, kept in the iPhone Keychain.
• Push notifications (if you allow them): Apple's notification token (APNs) of the signed-in phone, to tell you when Pro is about to end, an offer is ending, a plan got activated, support answered, and general GoWrist announcements. Signing out deletes it; turn notifications off in iPhone Settings at any time.
• Support requests (when you send one): topic, what you wrote, the replies, and the “Thông tin gửi kèm” you saw before sending (app version, phone model, plan, last error; location only if you turned it on).
• Referrals: your referral code, who entered your code (and the code you entered), to add Pro days to both when the invited rider buys a plan for the first time.

This data is used to sign you in, unlock Pro, count free trips, prevent abuse (one device per account) and support you. It is not used for advertising or tracking.

2.5 HUAWEI WATCH (optional)

Only if you choose "Kết nối đồng hồ Huawei" (connect Huawei watch) and approve it in the Huawei Health app, GoWrist uses Huawei Wear Engine with the single permission Basic device information:

• It reads the watch name, connection status and whether the GoWrist watch app is installed, only to show you the connection state. Device identifiers are never stored and never leave the iPhone.
• During a trip the iPhone sends guidance to the watch over Bluetooth: next turn, distance, street name, a small map, speed, speed limit, remaining distance and time. The watch only displays it, stores nothing, and only sends back delivery acknowledgements and a note when its app opens (screen size, watch app version).
• No health, sensor, battery or notification data is read.

Withdraw consent: GoWrist → Cài đặt (Settings) → Kết nối đồng hồ Huawei → "Ngắt kết nối đồng hồ" (stops all watch communication), and revoke GoWrist in Huawei Health. Huawei Health is Huawei's app and follows Huawei's privacy policy.

2.6 Crash reports

GoWrist contains no third-party crash reporting or analytics SDK (Google's ad SDK on the Free plan collects diagnostics for ads only, section 2.7). If you enable "Share with App Developers" in iOS privacy settings, Apple may share anonymous crash reports with us.

Settings → "Hỗ trợ & báo lỗi" pre-fills an email with the app version, iPhone model, iOS version, current plan, watch status and the last error shown. Your current location and destination (rounded to about 10 m) are added only if you turn on "Kèm vị trí hiện tại và điểm đến". You see and can edit everything before sending; the app sends nothing by itself. Such emails are used only to help you and kept as in section 5.

App log. The app keeps on the phone a log of problems (errors, reroutes, GPS quality, the watch's connection and errors; at most 2 MB / 7 days) and the paths of a few recent trips (GPS points, the route, trip settings); no passwords, messages or what you type in search. It leaves the phone only when you are signed in and choose "Attach the app log" (or "Send app log") in a support request; before sending you see what is in it and that it contains GPS positions. A log you send is used only to find the problem in that request and is deleted after 30 days or when you delete your account.

2.7 Ads (Free plan only)

On the Free plan GoWrist shows one small Google AdMob banner on the Search, Route preview and Settings screens. No ads while navigating and none on the watch. Every GoWrist Pro plan (Day, Week, Month, Year) has no ads; the app then loads none.

Ads are always non-personalized: GoWrist does not ask for tracking permission (App Tracking Transparency), does not use the device's advertising identifier, and does not send Google your GPS location, destinations or searches. To show and count ads, Google's SDK receives: IP address (from which Google infers an approximate location such as the city), device model, OS version, language, which ads were shown / tapped, and diagnostic and performance data. Google processes it under the Google Privacy Policy and how Google uses information from partner apps.

3. What we do not do

• No account is required to browse the map, search or navigate on the phone. We do not collect phone numbers. Email and name exist only if you sign in (section 2.8) or email us.
• No cross-app tracking, no advertising identifiers; Free-plan ads are non-personalized (section 2.7), Pro has no ads.
• No selling, renting or trading of personal data.
• No search or route history on our servers (except an app log you send with a support request, 30 days, section 2.6). With an account the server keeps only the start (time, destination coordinates) of watch trips to count free trips (section 2.8). Home, Work and recent destinations are kept only on your phone (section 2.3).

4. Service providers

They process data only to provide their service to us, with protection equal to this policy. Map and place data come from OpenStreetMap; none of your data is sent to OpenStreetMap.

5. Retention and deletion

Account (section 2.8): kept until you delete it. Delete it in the app (Cài đặt → Tài khoản → Xóa tài khoản) or on the web at /tai-khoan; it is hidden and signed out at once and personal data is erased within 30 days. Purchase records are kept anonymised (not linked to you) for accounting as the law requires.

Apart from the account, servers keep nothing (an app log you send: 30 days, section 2.6). iPhone: until you change settings, delete the app (settings), or reset the iPhone (free plan counter, 2.3). Emails you send us are kept until your request is resolved, at most 24 months, or deleted earlier on request. Support requests in the app / on the web, push tokens and referral data are part of the account: deleted with it.

6. Your rights

Under Vietnam's Personal Data Protection Law you may be informed, consent or refuse, withdraw consent, access, correct, delete, restrict or object to processing, and complain or take legal action.

Consent. On first launch GoWrist shows a "Quyền riêng tư" (Privacy) screen summarising the processing in this policy. Only after you tap "Đồng ý và tiếp tục" (Agree and continue) does the app turn on GPS, call our servers, show the map and ads; nothing is pre-agreed. Location is sensitive personal data (Personal Data Protection Law 91/2025/QH15, Decree 356/2025/ND-CP). The app keeps the time and notice version you agreed to on the device (shown in Settings → Thông tin). To withdraw: Settings → Thông tin → "Rút lại đồng ý": the app ends any trip, turns off GPS and stops sending data until you agree again; withdrawal does not affect processing done before it. Connecting a watch, signing in and notifications each have their own consent step, only if you choose to use them.

• Turn off location at any time: iOS Settings → Privacy & Security → Location Services → GoWrist. Without location GoWrist cannot navigate, but map browsing and search still work.
• Disconnect the watch: see 2.5.
• View and delete your account: in the app (Cài đặt → Tài khoản) or at /tai-khoan.
• Other requests (access, correction, restriction, objection): support@gowrist.io.vn. Apart from account data our servers keep none of your data; we answer within the legal deadline.

7. Children

GoWrist is meant for riders aged 16 and over and does not knowingly process children's data.

8. Security

All server connections use HTTPS. On-device data is protected by iOS (device-only Keychain). Sign-in tokens are signed and expire; we never receive your Google / Apple password.

9. Changes

We update the date above when this policy changes. Material changes (such as new kinds of data) are announced in the app and require your consent before they apply.

10. Contact

Dinh Tuan Thanh · support@gowrist.io.vn