Global Privacy Policy: Website, Mobile Apps, IAA Advertising, IAP Purchases, Consulting, and App Marketplace Distribution.

1. Controller identity and contact details

Reliable Helper Gia My ("we", "us", "our", or the "Company") is the data controller responsible for the processing of personal data described in this Privacy Policy, except where another party is expressly identified as an independent controller or processor. Our official contact details for all privacy-related inquiries are:

• Organization: Reliable Helper Gia My
• Website: reliablehelpergiamy.com
• Business Support: support@reliablehelpergiamy.com
• Privacy and Data Requests: contact@reliablehelpergiamy.com
• Mailing Address: Hoa Lac High-Tech Park, Hanoi, Vietnam

If you have questions about privacy, data protection obligations, ad monetization technology disclosures, age handling and parental consent, a data subject or consumer rights request, or wish to raise a concern, contact us at the addresses above. Please include sufficient detail for us to verify your identity, identify the relevant service, and understand the nature of your request so we can respond accurately and in a timely manner. We will acknowledge requests promptly and provide a substantive response within the timeframe required by applicable law.

2. Key definitions used in this policy

The following terms have the meanings given below throughout this Privacy Policy:

• Personal data / personal information: Any information relating to an identified or identifiable natural person, as defined by the applicable privacy law in the relevant jurisdiction.
• Processing: Any operation performed on personal data, including collection, recording, storage, use, disclosure, transmission, deletion, or destruction.
• Controller: The entity that determines the purposes and means of processing personal data. In the context of this Policy, that is Reliable Helper Gia My, unless otherwise stated.
• Processor / service provider: A party that processes personal data on behalf of the controller according to instructions.
• IAA (In-App Advertising): A monetization model in which mobile applications display advertising content to generate revenue, typically through ad networks, mediation platforms, programmatic exchanges, or direct ad integrations.
• IAP (In-App Purchase): A commercial model in which users purchase digital content, features, subscriptions, consumables, or non-consumables inside a mobile application through an app marketplace billing system or other payment channel.
• Advertising identifier: A resettable device-level identifier used for advertising measurement and targeting purposes, such as Apple's IDFA (Identifier for Advertisers) or Google's GAID/AAID (Google Advertising ID / Android Advertising ID).
• Consent: A freely given, specific, informed, and unambiguous indication of agreement to the processing of personal data for a defined purpose, as required by GDPR, ePrivacy, and equivalent laws.
• App marketplace: A digital distribution platform through which our applications are made available to users, such as the Apple App Store, Google Play, Amazon Appstore, Samsung Galaxy Store, Huawei AppGallery, Microsoft Store, or equivalent.
• Services: Our website, mobile applications, consulting services, support channels, and any other digital or business products and activities described in this Policy.

3. Scope of this policy

This Privacy Policy applies to the following services and activities of Reliable Helper Gia My:

• Our corporate website and any related web pages operated under reliablehelpergiamy.com.
• Mobile applications we develop and publish through the Apple App Store, Google Play, Amazon Appstore, Samsung Galaxy Store, Huawei AppGallery, Microsoft Store, Xiaomi GetApps, OPPO App Market, vivo App Store, and other digital distribution channels and app marketplaces worldwide.
• Ad-supported app experiences using IAA models, including apps that display app open ads, rewarded video ads, interstitial ads, banner ads, native ads, and mediated or programmatic advertising.
• IAP-supported experiences including subscriptions, premium unlocks, consumables, non-consumables, and hybrid IAA + IAP monetization models.
• Customer support, marketing, analytics, crash reporting, fraud prevention, and consulting services we provide to users, clients, and partners.
• Pre-release testing, beta distribution, market research, and service improvement activities related to our applications and consulting engagements.
• Our consulting services: app design consulting and full-process utility app research and development consulting.

This policy does not govern how independent third parties — including app stores, payment processors, operating system providers, advertising and analytics vendors, and external website operators — process personal data for their own purposes. Those parties maintain their own privacy notices, terms, and user controls, which we encourage you to review.

4. Categories of personal data we collect

Depending on the product, channel, and applicable law, we may collect the following categories of personal data and related information:

We do not intentionally collect government-issued identifiers, precise geolocation, biometric templates, payment card numbers, or special category data unless the specific service clearly requires it and lawful handling standards are met. If such data is inadvertently provided, we will use commercially reasonable efforts to remove or minimize it where feasible.

5. How we collect data

• Directly from you when you create a profile, contact support, submit feedback, join a waitlist, request consulting services, respond to surveys, or use app features.
• Automatically from your device or browser through cookies, SDKs, pixels, local storage, server logs, APIs, crash reporting tools, and analytics frameworks when you interact with our website or apps.
• From app marketplaces, payment processors, attribution vendors, ad mediation partners, or analytics providers that confirm transactions, subscriptions, campaign performance, device signals, or compliance-relevant events.
• From business clients or partners when they engage us for consulting, implementation support, or co-publishing activities.

6. Purposes of processing

We use personal data only where there is a valid operational, contractual, compliance, security, or legitimate business reason. Purposes may include:

• Providing, maintaining, and improving our website, mobile apps, product features, and consulting services.
• Authenticating users, preventing abuse, detecting fraud, debugging errors, and protecting platform integrity.
• Responding to customer support requests, partnership inquiries, billing questions, or consulting communications.
• Measuring usage, product quality, engagement, feature performance, conversion, retention, and release stability.
• Supporting lawful advertising, consent management, monetization reporting, and ad frequency or anti-fraud controls.
• Complying with legal obligations, app store policies, tax rules, accounting requirements, security obligations, and regulatory requests.
• Sending service communications, policy updates, or, where permitted, marketing messages and product announcements.

7. Legal bases for processing

Where the General Data Protection Regulation, the UK GDPR, the Swiss Federal Act on Data Protection, or equivalent laws apply, we rely on one or more of the following legal bases:

• Performance of a contract or steps requested before entering a contract, such as providing an app feature, processing a support request, or delivering consulting services.
• Legitimate interests, such as securing our services, understanding usage, improving product quality, operating our business, preventing misuse, and supporting non-invasive service analytics, provided those interests are not overridden by your rights.
• Consent, where required, including for certain advertising technologies, cookies, tracking, or direct marketing communications.
• Compliance with legal obligations, such as recordkeeping, responding to law-enforcement requests, resolving disputes, or meeting platform and regulatory requirements.

8. IAA advertising, ad monetization, and advertising technology disclosures

Some of our mobile applications use an IAA (in-app advertising) monetization model. IAA may include app open ads, rewarded video ads, interstitial ads, banner ads, native ads, offerwall-style experiences where lawful, or other ad-supported placements compatible with the app, the relevant marketplace rules, and local law.

IAA delivery is configured by product type, user region, consent status, age screen result, and platform policy. For younger users or restricted jurisdictions, we may disable personalized advertising, reduce ad request signals, or use contextual-only ads.

Ad platforms and mediation partners

Depending on the application, geography, and release configuration, our apps may integrate or work with one or more advertising, bidding, mediation, measurement, fraud prevention, or monetization vendors, including Google AdMob, Google Ad Manager, AdMob Mediation, AppLovin MAX, AppLovin Exchange, Meta Audience Network, Unity Ads, Unity LevelPlay, ironSource, Mintegral, Pangle, Chartboost, Liftoff Monetize (formerly Vungle), DT Exchange, Fyber, HyprMX, InMobi, Moloco, Smaato, PubMatic, OpenX, Index Exchange, TripleLift, Magnite, Yahoo Advertising, AdColony where available, Ogury, Start.io, Tapjoy, BidMachine, Yandex Ads where lawful, Amazon Publisher Services, Criteo, Digital Turbine, and other equivalent ad monetization, exchange, measurement, anti-fraud, or consent partners that may be added over time.

What ad-related data may be processed

• Advertising identifiers such as IDFA, GAID, AAID, app set ID, device identifiers, and similar identifiers where permitted by platform settings and law.
• IP address, approximate geolocation derived from IP or device region, language, device model, OS version, ad interaction events, impression timing, click data, frequency capping information, invalid traffic signals, consent strings, and anti-fraud data.
• Contextual information about app session state, ad placement category, screen size, app version, and ad performance signals used for fill optimization, fraud prevention, mediation logic, reporting, or measurement.

Compliance and consent

Where required, we request consent before using advertising identifiers, personalized advertising, or non-essential tracking technologies. For users in the European Economic Area, the United Kingdom, and Switzerland, our apps may display consent prompts compliant with applicable ePrivacy, GDPR, UK GDPR, or IAB Transparency and Consent Framework expectations where supported by the vendor stack. For users in the United States, we may provide notice, opt-out, or limited-use data handling workflows as required by state privacy laws. For children or teen-directed experiences, we may restrict ad features, use contextual-only advertising, or disable certain data-sharing mechanisms entirely.

Marketplace and ad policy alignment

We aim to operate our IAA integrations in a manner consistent with Apple App Store Review Guidelines, Apple's App Tracking Transparency requirements, Apple Privacy Nutrition Label disclosures, Google Play User Data Policy, Google Play Data safety requirements, Google Play Families Policy where relevant, COPPA obligations, age-gating requirements, deceptive design restrictions, and other marketplace standards. Not all ad vendors are used in every app, and some vendors or ad formats may be disabled for certain regions, audiences, or product categories.

9. IAP purchases, subscriptions, and billing privacy disclosures

Some of our applications use an IAP (in-app purchase) monetization model, including subscriptions, premium unlocks, consumables, non-consumables, or hybrid IAA + IAP offerings. In these scenarios, we process purchase-related information needed for entitlement management, fraud prevention, customer support, analytics, and lawful recordkeeping.

• Data elements may include marketplace transaction identifiers, product SKU, purchase token, subscription status, renewal state, trial status, refund state, entitlement flag, billing country, and anti-fraud signals.
• For Apple App Store purchases, billing and payment processing are handled by Apple and subject to Apple's terms, while we receive only the information required to verify and manage access to purchased content or services.
• For Google Play purchases, billing and payment processing are handled by Google and subject to Google Play terms, while we receive purchase verification and subscription status information necessary for entitlement and support.
• For other stores and payment channels, equivalent data minimization and compliance controls apply according to the relevant platform and local law.

We do not store full payment card numbers in our application databases when transactions are processed through app stores or regulated payment providers. Billing disputes and refund workflows may require interaction with the relevant marketplace support system.

10. Analytics, attribution, and crash reporting

To understand how our services are used, to improve product quality, and to measure business performance, we may use analytics, attribution, and crash reporting tools. These tools may collect event data, session data, user-flow information, feature interaction data, error logs, stack traces, device identifiers, app version, and performance metrics.

Analytics and measurement tools we may use include but are not limited to: Firebase Analytics, Google Analytics for Firebase, AppsFlyer, Adjust, Branch, Amplitude, Mixpanel, Sentry, Crashlytics, RevenueCat analytics, and equivalent tools. Each vendor operates under its own terms and privacy notice. We configure these tools to minimize unnecessary data collection and to respect consent status and applicable legal requirements.

• Attribution data: Where we need to understand which marketing channels drive app installations or in-app conversion events, we may use attribution vendors that process device-level or probabilistic matching signals in compliance with applicable platform rules (e.g., Apple SKAdNetwork, privacy-safe attribution frameworks).
• Crash and diagnostics data: Crash reports, ANRs (Application Not Responding events), error traces, and performance diagnostics may be automatically transmitted to crash reporting platforms to help us identify and fix technical issues quickly.
• Aggregated analytics: Where feasible and lawful, we aggregate, anonymize, or pseudonymize analytics data before using it for product improvement decisions.

11. Cookies, local storage, SDKs, and tracking technologies

Our website may use cookies, web beacons, pixel tags, local storage, session tokens, and similar technologies to operate website functionality, remember preferences, maintain sessions, analyze traffic, support advertising, and comply with legal requirements.

Types of cookies and technologies we may use

• Strictly necessary: Required for the website to function, such as security tokens, session management, and consent preference storage. These do not require user consent under most laws.
• Functional/preference: Allow us to remember choices such as language, region, or display preferences. Consent may be required under applicable law.
• Analytics and performance: Used to count visits, measure traffic sources, understand how pages are used, and improve website performance (e.g., Google Analytics). Consent may be required.
• Advertising and targeting: Used to deliver relevant advertising, cap frequency, measure ad campaign performance, and support retargeting (e.g., Google Ads conversion tracking, Meta Pixel where used). Consent is typically required under GDPR and ePrivacy rules.

In mobile applications, SDKs embedded in the app may use local storage, device files, or equivalent mechanisms rather than browser cookies. The choices available to you depend on the operating system, device settings, and applicable law.

Managing cookies

You can manage cookies through your browser settings, our consent management tool (if displayed on the website), device operating system privacy controls, or opt-out mechanisms provided by relevant third-party vendors. Disabling certain cookies may affect website functionality. For more information about cookie choices in the EU/EEA/UK, see the guidance published by your national supervisory authority.

12. App marketplaces, platform disclosures, and store-specific handling

• Apple App Store: We may receive transaction status, subscription confirmation, storefront region, device compatibility, and platform enforcement signals from Apple. Apple may also process personal data independently under its own privacy rules. Where required, we will use Apple's App Tracking Transparency framework before accessing IDFA or related tracking functions.
• Google Play: For Android releases distributed through Google Play, we may receive purchase tokens, subscription status, install referrer information where permitted, integrity signals, and platform diagnostics. Google may also process data independently through Google Play services, Firebase, or ads-related infrastructure.
• Amazon Appstore, Microsoft Store, Samsung Galaxy Store, Huawei AppGallery, Xiaomi GetApps, OPPO App Market, vivo App Store, and similar stores: We may receive app transaction data, entitlement status, update signals, marketplace region, and compliance notices necessary to distribute and support our apps.
• TestFlight, beta programs, and pre-release distribution tools: Beta versions may process additional diagnostics, crash logs, tester feedback, and usage events to help us stabilize future releases.

If a marketplace requires privacy nutrition labels, data safety forms, age-rating declarations, ad disclosure forms, or child-directed experience statements, we may provide platform-specific summaries in addition to this policy. Those summaries should be read together with this full policy.

13. Sharing and disclosure

We may disclose personal data to the following categories of recipients where necessary and lawful:

• Cloud hosting, infrastructure, database, storage, and content delivery providers.
• Analytics, crash reporting, performance monitoring, and attribution vendors such as Firebase, Google Analytics, AppsFlyer, Adjust, Branch, Sentry, RevenueCat, Mixpanel, Amplitude, or similar tools when used.
• Advertising, mediation, fraud prevention, and monetization providers described in this policy.
• Customer support, CRM, email, payment, subscription, consulting workflow, or project management providers.
• Professional advisers, auditors, insurers, legal counsel, and corporate transaction participants where necessary for business operations or legal compliance.
• Authorities, regulators, law enforcement, or courts when we are required or permitted to do so by law.

We do not sell personal data in the colloquial sense of exchanging customer lists for money. However, some privacy laws define sale, sharing, or targeted advertising broadly, and certain ad-tech or analytics disclosures may be treated under those laws as sale, sharing, or cross-context behavioral advertising. Where those laws apply, we provide the rights and controls described below.

14. International data transfers

We operate in Vietnam and may work with service providers located in the United States, the European Economic Area, the United Kingdom, Singapore, Japan, India, Australia, and other jurisdictions. Personal data may therefore be transferred to countries outside your place of residence. When required, we implement appropriate safeguards such as contractual clauses, vendor due diligence, transfer impact assessments, and security measures designed to protect transferred data.

15. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing services, maintaining records, meeting legal obligations, resolving disputes, and enforcing our rights. Retention periods vary by category:

• Support communications and consulting inquiry records: typically retained for operational continuity, contractual management, and legal recordkeeping.
• Product usage analytics and diagnostics: retained for the period necessary to analyze app quality, security, and performance trends.
• Purchasing and subscription records: retained as required for accounting, tax, anti-fraud, and consumer protection obligations.
• Advertising and consent records: retained long enough to demonstrate consent status, compliance, fraud prevention, reporting, and monetization controls.

When data is no longer needed, we will delete, anonymize, aggregate, or otherwise de-identify it, subject to technical feasibility and legal retention requirements.

16. Data security, resilience, and incident response

We maintain administrative, technical, and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. Controls may include role-based access control, least-privilege access, multi-factor authentication, key management, encryption in transit, encryption at rest where feasible, secure software development practices, dependency review, event logging, monitoring, vulnerability management, data backup policies, and environment separation between production and testing.

Where required by law, contractual obligation, or platform policy, we maintain processes for detecting, triaging, containing, investigating, and remediating security incidents. If a data incident creates a reportable risk under applicable law, we will provide notifications to regulators, affected users, business clients, app marketplaces, or other required parties within the applicable legal timeline.

No technical system is perfectly secure, and we cannot guarantee absolute security in all circumstances. Users remain responsible for device-level security, account credential hygiene, and operating-system updates.

17. Children, teens, and age-related protections

Our services are generally intended for general audiences unless a product explicitly states otherwise. We do not knowingly collect personal data from children in violation of applicable law. Where relevant laws define children differently, we apply age handling consistent with those laws and the app marketplace's requirements.

• United States and COPPA: If a service is directed to children under 13 or we knowingly collect personal data from a child under 13, we will obtain verifiable parental consent where required or limit collection and monetization accordingly.
• European Economic Area, United Kingdom, and similar jurisdictions: Where consent is the legal basis and the user is below the applicable digital-consent age in the relevant country, parental or guardian authorization may be required.
• Teen and mixed-audience handling: We may implement age screens, limited ads, reduced profiling, contextual advertising only, or restricted data sharing for younger users where required by law, marketplace policy, or our own risk controls.
• Google Play Families and equivalent child-safety frameworks: where applicable, we use SDK configurations and policy controls designed for child-appropriate experiences.
• App marketplace age ratings: Age ratings in the App Store or other marketplaces do not replace parental supervision and do not change the legal privacy rules that apply in a user's country.

If you believe a child has provided personal data to us in a manner inconsistent with law or this policy, contact us immediately so we can investigate and take appropriate action.

19. Regional privacy rights and jurisdiction-specific notices

European Economic Area, United Kingdom, and Switzerland

Subject to conditions and exemptions, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, and receive a portable copy of certain data. You may also lodge a complaint with your local supervisory authority.

United States

Residents of California, Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland and other states with applicable privacy laws may have rights to know, access, correct, delete, obtain a copy of data, opt out of sale, sharing, targeted advertising, profiling in furtherance of decisions with legal or similarly significant effects, and appeal certain request denials where provided by law. California residents may also have rights relating to sensitive personal information, limit use rights where applicable, and authorized agent requests. We will not discriminate against you for exercising applicable privacy rights.

Canada

Where PIPEDA or applicable provincial laws apply, you may request access to and correction of personal information, subject to legal exceptions. You may also withdraw consent where consent is the basis for processing, subject to legal or contractual restrictions.

Brazil

Under the LGPD, you may have rights to confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, and review of certain automated processing, subject to lawful limitations.

China

Where the Personal Information Protection Law, Data Security Law, Cybersecurity Law, or implementing measures apply, we will process personal information according to applicable legal bases, cross-border transfer requirements, and security obligations, including notices and consent where required.

Mexico and Latin America

Where applicable, we follow local rules such as Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and equivalent regional data protection laws, including rights to access, rectification, cancellation, and objection where provided by law.

Australia and New Zealand

Where applicable, we handle personal information in line with the Australian Privacy Act, the Australian Privacy Principles, and relevant New Zealand privacy requirements. You may request access and correction, subject to lawful exceptions.

Japan, South Korea, Singapore, India, South Africa, Middle East, and other regions

Users in jurisdictions governed by laws such as Japan's APPI, South Korea's PIPA, Singapore's PDPA, India's Digital Personal Data Protection Act, South Africa's POPIA, Turkey's KVKK, Israel Privacy Protection Law, Saudi PDPL, UAE Federal privacy rules, and other local requirements may be entitled to access, correction, deletion, withdrawal of consent, or similar rights, depending on the law that applies. We will handle requests in accordance with the relevant legal framework.

Because privacy laws continue to evolve globally, this section is intended to provide broad jurisdictional coverage and is interpreted alongside mandatory local consumer and privacy protections in each country or region.

To exercise rights, contact support@reliablehelpergiamy.com or contact@reliablehelpergiamy.com and specify the app, service, or website involved, the jurisdiction you are invoking, and the nature of your request.

18. Automated decision-making and profiling

We do not use fully automated decision-making processes that produce legal or similarly significant effects about individuals as a standalone basis for consequential decisions, except where required or permitted by applicable law, where appropriate safeguards are in place, or where you have given explicit consent.

We may use automated processing as part of analytics, ad personalization, fraud detection, entitlement validation, and product recommendation features. Where applicable law grants you the right to request human review of automated decisions, to object to profiling, or to obtain an explanation of the logic used, we will respond to such requests in accordance with the law that applies to you.

Ad personalization by third-party advertising vendors may involve profiling based on inferred interests, behavioral signals, or modeled audiences. You can control ad personalization through consent tools, device settings, and the opt-out mechanisms described in the choices section.

20. Your choices and controls

• You may contact us to access, correct, or request deletion of certain personal data.
• You may opt out of marketing emails by using the unsubscribe method provided in the message or by contacting us.
• You may control cookies and similar technologies through browser settings, consent banners, or device controls where available.
• You may control ad tracking through Apple App Tracking Transparency settings, Android privacy controls, limit ad tracking features, or equivalent device-level settings.
• You may reset advertising identifiers, disable personalized advertising where supported, or use state-law opt-out mechanisms if available.
• You may stop using an app and uninstall it, although some data may still be retained for legal, security, accounting, or anti-fraud reasons.

Our website currently does not guarantee uniform technical recognition of every browser-based Do Not Track signal. Where required by law or available through supported consent frameworks, we may honor recognized global privacy or opt-out signals such as Global Privacy Control for relevant processing.

21. How to submit a data rights request

To exercise any data rights described in this Privacy Policy, or to request more information about our data practices, please contact us by email at support@reliablehelpergiamy.com or contact@reliablehelpergiamy.com. To help us process your request efficiently, please provide:

• Your full name and, if applicable, the account identifier, email address, or other information associated with your use of the relevant service.
• The name of the specific app, website, or service your request relates to.
• The type of right you are exercising (e.g., access, correction, deletion, opt-out of sale, portability, objection, restriction).
• The jurisdiction or legal basis under which you are submitting the request (e.g., GDPR, CCPA, LGPD).
• Any additional information that may be necessary to verify your identity in accordance with applicable law.

We will verify your identity before processing certain requests to prevent unauthorized access to personal data. We will not discriminate against you for exercising your rights under applicable law. In some circumstances, we may be required by law to refuse or limit certain requests, and we will provide a written explanation when this occurs. We aim to respond within the legal timeframes: typically 30 days under GDPR (extendable to 90 days in complex cases), 45 days under most US state privacy laws (extendable once), and equivalent periods under other applicable laws. If you believe we have not responded adequately, you may have the right to lodge a complaint with the relevant supervisory authority or consumer protection body in your jurisdiction.

22. Policy changes

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices, legal obligations, marketplace requirements, or ad monetization stack. When we make material changes, we will update the effective date and, where required, provide additional notice within the service, on the website, through the app marketplace listing, or by other appropriate means.

If you have questions about this Privacy Policy, contact Reliable Helper Gia My at support@reliablehelpergiamy.com or contact@reliablehelpergiamy.com, or write to Hoa Lac High-Tech Park, Hanoi, Vietnam.