Privacy Policy

This policy applies to the entire MiKiName website, application, user accounts, analysis features, reports and support services. Depending on how you interact with the service, we may collect and process the following categories of data:

• Account information: email address, display name, profile picture, login authentication details, email verification status and account role. Passwords are always stored as a one-way hashed value; we do not store and cannot view your original password.
• Data you actively provide for analysis: full name, date of birth, gender, information about your child or family members (father, mother, siblings), names under consideration, the relationships between members and any content you enter to calculate Numerology. If you enter another person's data (for example a child or relative), you confirm that you are entitled or authorised to provide and process that data.
• Data generated when using the service: analysis sessions, saved name lists, generated reports, favourited names, chosen service plans, order and transaction history, support request content and personal preferences (language, cookie consent).
• Payment data: order reference, amount, product/plan type, transaction status, reference codes and payment method. For international cards, card details are processed directly by Dodo Payments; MiKiName does not collect and does not store your full card number, expiry date or security code (CVV).
• Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, language, access time, pages viewed, error logs, security events and interaction measurement data — collected to the extent necessary or when you allow the corresponding cookies.

Data is collected in three ways: (i) directly from you when you enter information or make contact; (ii) automatically from your device and browser when you use the service; and (iii) from payment or authentication providers when they return transaction or login results to us.

We only process personal data to the extent necessary, corresponding to each specific purpose and with a clear legal basis:

• Providing the core service: creating and managing accounts, authenticating users, maintaining login sessions, calculating Numerology indices, suggesting and comparing names, generating reports and saving results at your request.
• Processing transactions: creating, confirming and reconciling orders; activating access after payment; managing recurring subscriptions, renewals and cancellations; supporting refunds where applicable.
• Operational communication: sending account verification emails, password resets, order status notifications, PDF reports and important notices about the service or policy.
• Security and system stability: detecting and preventing fraud, unauthorised access and abuse; logging, backing up, troubleshooting and maintaining performance.
• Product improvement and lawful marketing: measuring effectiveness, analysing how features are used, improving the experience and displaying relevant advertising — only when you have consented to the corresponding cookie category.
• Legal compliance: fulfilling accounting, tax and record-keeping obligations; responding to lawful requests from competent authorities; resolving complaints and protecting the legitimate rights of MiKiName as well as its users.

Depending on the case, the basis for processing may be: your consent (for example analytics/advertising cookies, marketing emails), the performance of a contract/service you request, a legal obligation we must comply with, or a legitimate interest in security and operations that does not unduly infringe your rights. For activities based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out beforehand and may cause certain features to stop working.

MiKiName does not sell or rent your personal data to any party for commercial purposes. We only share the minimum data necessary with the following groups of partners, and we always bind them by contract or confidentiality terms:

• Payment providers: domestic bank transfer/QR systems and Dodo Payments (for international cards) — to initiate transactions, confirm payments, manage subscriptions, prevent fraud and process refunds where applicable. These parties may act as independent data controllers under their own policies regarding payment information.
• AI service providers: OpenRouter and OpenAI (GPT-5.6-sol) — to generate Numerology analysis content and reports. The requests sent only include the input data needed for analysis (such as name and date of birth); we do not send passwords, login details or payment card information.
• Infrastructure and operations providers: server/hosting services, databases, file and image storage, caching, transactional email delivery, error monitoring and system security.
• Measurement and advertising providers: Google Analytics and Google AdSense — active only when you consent to the corresponding analytics/advertising cookies.
• State agencies and competent authorities: when there is a lawful request, to enforce our terms, resolve disputes, or protect the rights, property and safety of users and the system.

Some of the providers mentioned above may store or process data on servers located outside the territory of Vietnam. When transferring data across borders, we apply appropriate safeguards and require partners to commit to confidentiality under their contracts, internal policies and applicable law, so as to ensure your data continues to be protected to an equivalent standard.

Retention periods: We retain data for as long as necessary to provide the service, maintain your account and the reports you have purchased, fulfil accounting and legal obligations, resolve disputes and prevent fraud. The specific period depends on the type of data and the purpose of processing — for example, transaction records may be kept longer to meet accounting and tax regulations. When there is no longer a legitimate need, data will be deleted, anonymised or isolated through an appropriate process; any remaining technical backups will be removed according to the system's limited backup cycle.

Security measures: We implement reasonable technical and organisational measures to protect data, including: encryption in transit using HTTPS/TLS; one-way password hashing; access control on a least-privilege basis; separation of development and production environments; logging and anomaly monitoring; regular backups; and frequent security updates. However, no method of transmission or storage is 100% absolutely secure. If an incident occurs that significantly affects personal data, we will carry out remediation and notify you as well as the competent authorities in accordance with legal requirements.

Your responsibilities: You are responsible for keeping your login details confidential, using a strong and unique password, not sharing your account, and notifying us immediately if you suspect your account has been accessed without authorisation.

Under Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP and applicable law, you have the following rights regarding your personal data:

• Right to be informed and to access: to request to know what data we are processing about you and to receive a copy of that data.
• Right to rectification: to request correction or completion of inaccurate or incomplete data. You can edit most of your information yourself in the account page.
• Right to withdraw consent: to withdraw consent for processing activities based on consent, or to object to or restrict certain processing activities.
• Account and data deletion: to request deletion of your account and related data, except for the portion we are required or permitted to retain due to legal obligations, transaction records, security or ongoing dispute resolution.
• Right to data portability: to request a copy of your data in a commonly used format or its transfer to another party where the law so provides.
• Right to opt out of marketing: to unsubscribe from marketing emails and change your non-essential cookie choices at any time.
• Right to complain: to request an explanation, object to or complain about how your data is processed, including complaints to the competent state authority.

To protect you, before processing a request we may need to verify your identity and clarify the scope of the request. Please send your request to [email protected]; we will receive and respond to it within a reasonable period as required by law.

MiKiName uses cookies and similar technologies (local storage, pixels) divided into three clear categories:

• Essential cookies: necessary for login authentication, security, request forgery prevention, language routing, remembering consent choices and core functions. This category is always active and cannot be turned off via the banner, because without it the service would not operate correctly.
• Analytics cookies: Google Analytics 4 helps us measure visits, traffic sources, page performance and how users use features, so we can improve the product. Only activated after you consent.
• Advertising cookies: Google AdSense supports the display and measurement of advertising effectiveness for eligible users (typically users on the free plan). Only activated after you consent; users on paid plans generally do not see advertising.

In regions where required (for example the EU/EEA/United Kingdom) or where configured, a cookie banner will appear on your first visit so you can accept all, reject non-essential cookies, or save your own choices by category. You can change your choices at any time by deleting/blocking cookies in your browser; note that doing so may log you out, reset your choices and cause certain features to work incompletely.

Children's data: MiKiName is designed to be used by parents, guardians and adults to choose names or carry out analysis — typically analysis for children. Children themselves should not create accounts, make payments or submit personal data on their own without appropriate consent and supervision from a parent or legal guardian. When you enter information about your child or another child, you confirm that you have the authority to do so and are responsible for the validity of the data. If you believe a child has provided us with personal data without appropriate consent, please contact us so we can review, remove or handle it in accordance with the regulations.

Policy changes: We may update this Privacy Policy when the service, providers, technology or legal requirements change. The latest version is always published on this page together with the update date. For significant changes affecting your rights, we may provide additional notice via the website, an in-account notice or email where appropriate. Your continued use of the service after the effective date is deemed acceptance of the updated policy.

For personal data of children under 16, MiKiName relies on the consent of a parent or legal guardian under Article 24 of the Law on Personal Data Protection No. 91/2025/QH15. You may withdraw this consent at any time by contacting [email protected]; we will then stop processing and delete the related data except where retention is legally required.

The entity responsible for controlling data, operating the service and receiving all requests relating to personal data is:

• Operating entity: MIKITECH ONE MEMBER COMPANY LIMITED (CÔNG TY TNHH MỘT THÀNH VIÊN MIKITECH)
• Product: MiKiName — a Numerology name platform
• Support and data protection email: [email protected]

When contacting us, so that we can assist you quickly and accurately, please describe your request clearly, state the email address associated with the relevant account and provide the information needed for us to verify your identity. For safety reasons, never send passwords, OTP codes, security codes or full payment card details via email or any contact channel. We are committed to receiving and responding to your request within a reasonable period as required by law.