Privacy Policy

1. What Giữ Lửa stores

Giữ Lửa stores what you enter: your loved one's name, date and time of passing, and photo; letters, photos and voice notes you write or attach; how often you light incense; your progress on the procedures checklist; obituary (cáo phó) and giỗ invitation drafts (year of birth, hometown, funeral schedule, family names, place and contact number if you add them); the details used to fill in prayers (your name and address, how the person is addressed, where the grave is); and your settings.

2. By default, everything stays on your phone

Until you sign in, all data lives on this phone only. We receive no copy. If you delete the app without a backup, the data is gone.

3. When you sign in

We keep your email so you can sign in with a one-time code. With a free account your data stays on your phone; signing in only lets you join a shared altar when family invite you. With Premium, your data, including obituary and invitation drafts and prayer details, is backed up to servers run by Supabase and can only be reached through the app with your account. It is encrypted in transit and at rest, but not end-to-end, which means the service operator could technically access it. We do not read your letters.

4. Sharing an altar with family

Only when you choose to share do a loved one's name, date and time of passing, incense count, and the obituary and giỗ invitation drafts you wrote for them get stored on the server for the relatives you invite. Family join with an invite code, see each other's display names (never emails) and who lit incense today. Your letters are private by default. If you switch on "Let family read it too" for a text letter, that letter's words are stored on the server so members of the shared altar can read them; a letter sealed until the anniversary stays hidden from family until it opens. Switch sharing off at any time to remove the letter from the server. Your photos, voice notes and prayers are never shared. When you leave or are removed from an altar, the letters you shared are removed from it too. You can remove members or stop sharing at any time.

5. Sending obituaries, invitations and prayers

When you send an obituary, an invitation image, a calendar file or a prayer, the app only opens your phone's share sheet; the content goes straight to the app you pick (Zalo, Facebook, messages…) and is then governed by that app's policy. What you send this way is not stored on Giữ Lửa's servers. These often name other family members, so only send what your family is happy to make public.

6. Public share pages (giulua.app)

When you tap "Create a link to post" for an obituary or a giỗ invitation, the card image and its text (names, times, places and the family names you entered) are stored on the server and shown at an address like giulua.app/c/… for you to post on social media. Anyone with the link can see it, even without the app; the page is kept out of search engines, and social networks may keep the preview image under their own policies. A page is deleted 90 days after its last update, and you can take it down at any time in the app; deleting your account deletes all your pages. Creating a page requires signing in. The giulua.app website uses no tracking cookies.

7. Reading prayers aloud

Read-aloud uses your phone's built-in voice (Apple or Google). Giữ Lửa does not send the prayer to its own servers. Depending on your phone's settings, the voice provider may process the text under its own policy.

8. What we do not do

We do not sell or share your data, show ads, or track you across other apps and websites.

9. Anonymous usage statistics

To learn which features help and which need work, the app sends anonymous usage statistics to Mixpanel: which screens you open and which features you use (for example that incense was lit, a letter was saved, an obituary was shared), plus general details such as language, app version, how many loved ones you keep, and whether you use a shared altar or Premium. Names, dates of passing, letters, prayers, photos, voice notes and email are never sent. When you are signed in, the statistics carry your account's random id so your phones count as one person. You can turn this off at any time in Settings → Share anonymous usage.

10. Reminders

Reminders for death anniversaries, the 1st and 15th of the lunar month, seasonal days, the 7th, 49th and 100th days, and the reminder you set to clear the offerings after praying are all scheduled on your phone. Their content is never sent to our servers. You can hide names in notifications in Settings.

11. App lock

If you turn on app lock with Face ID, Touch ID or fingerprint, authentication is handled by the operating system. Giữ Lửa never receives or stores biometric data.

12. Your rights

You can export your data, erase everything on this phone, or delete your account and the server backup right in Settings and Account. Deleting your account permanently removes the backup.

13. Children

Giữ Lửa is not intended for children under 13.

14. Changes and contact

If this policy changes we will update the date at the top and tell you in the app when the change is significant. For questions, use Feedback in Settings.