Information specific to the PhaPha app
This section applies specifically to the PhaPha iOS app and takes precedence if it differs from the general website information below.
1What PhaPha is
PhaPha is a companion app that lets users record feelings and routines and chat with an AI assistant. It is intended for people aged 16 or older. It is not a medical device or medical service, does not diagnose, prescribe, or provide dosage instructions, and is not a substitute for professional advice. In an emergency in Vietnam, call 115.
2Data processed and purposes
Depending on how you use the app, PhaPha may process an optional display name; content you enter, such as conversations, notes, check-ins, and responses; information you voluntarily share about feelings, routines, and health; four optional health-profile values (height, weight, blood lipids, and blood pressure); a random device identifier; time zone; and photos you deliberately select for analysis, including medical report images. This data is used to provide app functions, personalize conversations, retain history, and synchronize notifications. Name, content, health information, device identifier, time zone, and photo-processing requests are linked to your device profile. You review and confirm values read from a report before they are added to your health profile, which is used to personalize conversations. Photos are used only for the image-reading function in the current request, are not used for personalization, and are not retained by Vipex after processing.
3Data processors
Vipex operates the PhaPha API servers. Conversation content and photos may be sent to FPT Smart Cloud/FPT AI Marketplace services to generate responses or interpret images; the app currently uses DeepSeek-V4-Flash and gemma-4-31B-it. Apple may process push tokens, general push-notification content, and speech data when you use dictation or speech recognition that does not run entirely on-device. Vipex has not yet received final written confirmation from FPT about retention, use for model training, processing locations, and subprocessors; until that confirmation is available, do not send content you would not want transferred to the AI provider.
4Retention, photos, and deletion
Photos pass temporarily through Vipex servers for processing and are not stored in Vipex databases, disks, or application logs. Other app data is retained while you use the service or until you request deletion. In the app, go to Account → Delete my data; live data is deleted immediately after confirmation, while encrypted backup copies expire within no more than 14 days. A SHA-256 hash of the device identifier and the deletion timestamp are retained indefinitely. This deletion record does not retain the raw identifier or deleted content; its only purposes are to prevent deleted data from reappearing after a backup restore and to refuse re-registration of that deleted identity.
5No tracking and your rights
PhaPha does not sell personal data, show ads, or track you across apps or websites owned by other companies. You may withdraw consent or request access, correction, deletion, or restriction through the app or by contacting minh.vu@vipex.vn. Withdrawing consent does not affect processing that was lawful before withdrawal.