Privacy Policy
At a glance
- Hùng Duy HRM is an internal work application for employees and authorized staff of Công ty TNHH XNK-TM-CN-DV Hùng Duy and its affiliated companies. Accounts are issued by the company — there is no public sign-up.
- The only data the App collects from your device and sends to our servers is a device identifier and a push-notification token, together with the work account you sign in with and, where two-step sign-in is used, the phone number that receives the one-time code.
- That data is used only to make the App work: signing you in, keeping your session tied to a trusted device, and delivering notifications.
- We do not show advertising, build advertising or marketing profiles, or sell, rent or trade any data.
1. Who we are
Hùng Duy HRM (the “App”) is developed and operated by Công ty TNHH XNK-TM-CN-DV Hùng Duy, also written as HUNGDUY CO.,LTD (“we”, “us”). The App is distributed to staff of the company and its affiliated companies so they can carry out their work. This policy explains what the App collects from you, why, and what your options are.
By signing in to the App you accept this policy. If you do not agree with it, do not use the App and contact your manager or the IT department.
2. Data we collect
The table below is the complete list of data the App collects from you and transmits off your device. It matches the declaration we file in the Google Play Data safety section.
| Data | Sent off your device? | Why we need it |
|---|---|---|
| Device or other IDs A device identifier generated for your installation, and the push-notification registration token issued by Firebase Cloud Messaging. |
Yes, to our servers | App functionality only: verifying that your session belongs to a device you registered, and delivering push notifications to the right device. |
| Work account identifier The username or employee code issued to you by the company, submitted when you sign in. |
Yes, at sign-in | App functionality only: authenticating you and applying the access rights your role has been granted. |
| Phone number Only where the company’s two-step sign-in applies and your work record does not already hold a number. |
Yes, at sign-in | App functionality only: sending you a one-time sign-in code. It is not used for marketing. |
The App does not collect your location, contacts, calendar, SMS messages, call logs, installed-app list, personal financial or payment details, or any advertising identifier. It contains no advertising or behavioural-analytics SDK.
3. Work data you handle inside the App
When you use the App to do your job you view and record information that belongs to the company — for example personnel records, attendance, leave requests, payroll documents and internal announcements. That information is the company’s data: the company decides how it may be used, and we process it only on its instruction and under its internal rules and applicable Vietnamese law. It is never used for any purpose of our own, and it is not part of the personal data described in section 2.
Access to work data inside the App is limited to what your role has been authorised to see. Your own records shown in the App — your contract, payslip, attendance and leave — are records the company already holds about you as your employer; the App only presents them to you.
4. How we use the data
- To authenticate you and keep your signed-in session valid.
- To tie a session to a device you have registered, and to end sessions on devices that are no longer trusted.
- To send a one-time code where two-step sign-in applies.
- To deliver push notifications about work items that concern you.
- To keep security records of sign-ins, so that unauthorised access can be detected and investigated.
- To diagnose errors reported by you or by the App.
We do not use any of this data for advertising, profiling, scoring, or any purpose unrelated to your work.
5. Device permissions
The App may ask for a device permission — for example notifications, or the camera and photo library when a screen lets you attach an image to a work record. A permission is used only for the feature you invoked at that moment, and only content you explicitly select or capture is uploaded. Declining a permission only disables the feature that needs it; the rest of the App keeps working. You can change or withdraw any permission at any time in your device settings.
6. Sharing and disclosure
We do not sell, rent or trade your data, and we do not share it with third parties for advertising or marketing.
- Google (Firebase Cloud Messaging) receives the push token and the notification payload for the sole purpose of delivering the message to your device.
- Messaging providers (Zalo ZNS or an SMS carrier) receive your phone number and the one-time code for the sole purpose of delivering that code, where two-step sign-in applies.
- Within the company, authorised administrators and the IT department can see sign-in and device records as part of operating and securing the system.
- Legal requests: we may disclose data where Vietnamese law obliges us to, or where it is necessary to protect the security of our systems or the rights and safety of others.
We use no other third-party processor for the data listed in section 2.
7. Retention and deletion
- The device identifier and push token are kept while your account is active and the device is signed in. They are removed when you sign out, uninstall the App, or the device is untrusted or the account is deactivated.
- One-time codes expire within minutes and are not readable after use.
- Sign-in and security records are kept for as long as company policy and Vietnamese law require, then deleted.
- Your work account and the records attached to it are part of the company’s employment records and are retained under company policy and Vietnamese labour law.
To ask for access to, correction of, or deletion of the data described in section 2, write to info_hungduy@hungduy.vn or contact the HR or IT department. We respond within 30 days. Some data cannot be deleted while it is still required by law or by an ongoing employment obligation; if that applies we will tell you which data and why.
8. Security
All traffic between the App and our servers goes over encrypted connections (HTTPS/TLS). Sign-in can require a one-time code and registration of a trusted device, and access inside the App is restricted by role. Servers are operated on company infrastructure with restricted administrative access. No system can be guaranteed absolutely secure, but we work to keep protection appropriate to the sensitivity of the data.
9. Children
The App is a workplace tool for adult employees and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has used an account, contact us and we will remove the data.
10. Changes to this policy
If we change this policy we will update the page and the “Last updated” date above. Material changes will also be announced inside the App. Please review this page from time to time.
11. Contact us
Công ty TNHH XNK-TM-CN-DV Hùng Duy
Email: info_hungduy@hungduy.vn
Website: hungduy.vn