Privacy Policy

HolidayPM Mobile Application
Last updated: January 16, 2026

1. App Owner / Data Controller

CÔNG TY CỔ PHẦN ĐẦU TƯ QUẢN LÝ BẤT ĐỘNG SẢN THE HOLIDAY
(“The Holiday Real Estate Management Investment Joint Stock Company”)

Website: theholiday.vn
Email: info@theholiday.vn

HolidayPM is a resident mobile application for apartment/building projects managed or operated by The Holiday and/or the Building Management Team (“BQL”). The app helps residents view fees/invoices, receive announcements, and submit feedback/service requests.

This Privacy Policy explains how information is accessed, collected, used, stored, protected, and shared when you use HolidayPM on Android and iOS. If you do not agree with this policy, please do not use the app.

2. Important Note about Accounts (Provided by Building Management)

HolidayPM does not provide public self-registration. Your login account is created/provisioned by the Building Management Team (BQL) / project operator and is linked to your apartment/unit (“Apartment Code”).

Because accounts are used for building operations (billing, notices, requests, security), account deletion may not be available inside the app. If you need account support (update resident name, email, disable access when moving out, etc.), please contact BQL or The Holiday support channels in Section 13.

3. Information We Access / Collect

Most information shown in HolidayPM is entered/maintained by the Building Management Team and synchronized from internal systems into our backend (e.g., Firebase Realtime Database). HolidayPM does not collect information beyond what is necessary to provide resident services.

3.1 Account and Apartment Information

Used to identify your apartment and display relevant data:

  • Firebase user ID (UID) and basic account metadata.

  • Apartment Code / customer code (e.g., G110501, G1112A05A, etc.) to log in (Firebase Authentication).

  • Resident/owner/occupant name (if available in management records).

  • Project/building identifier (Tenant ID) and project name.

  • Optional contact information recorded by management systems (e.g., contact email, phone).

Passwords: Your password is handled by Firebase Authentication. We do not store your password in plain text.

3.2 Fee, Invoice, Utility and Payment Data (Displayed in App)

Core data displayed in the app (synced from management systems), such as:

  • Billing period (“Kỳ”), invoices, payment status.

  • Total amount due/paid, outstanding balance/credit balance.

  • Fee/utility details: service fees, electricity/water usage/reading, parking fees (and related vehicle info if configured).

  • Historical billing data and lookup data (depending on project/app version).

This data is generally entered/updated by the Building Management Team and usually cannot be modified by residents in the app.

3.3 Announcements, Notices, and Attached Documents

To display building announcements, we may store:

  • Title, summary/content of announcements.

  • Time/date the announcement was issued.

  • Links to attached documents (e.g., PDF files or web links).

When you choose to open an attachment, the app may open the link using your device’s browser or default viewer (see Section 9).

3.4 Feedback / Service Requests Submitted by Residents

If your project enables feedback or service request features, we may process:

  • Apartment Code and Tenant ID (to route your request correctly).

  • Request type/category (e.g., technical, security, cleaning, moving, etc.).

  • Free-text content describing your request/issue.

  • Optional information you choose to provide (additional notes).

Requests are stored in our backend database for tracking and processing by authorized staff and/or synchronized to building management internal tools (e.g., Google Workspace tools if used by management).

We do not use request content for advertising or tracking.

3.5 Contact Directory (“Sổ liên lạc”) for Support Departments

If enabled by your project, the app may display a project contact directory (e.g., departments, phone numbers, emails, working hours) configured by the Building Management Team for that Tenant ID. This directory is meant to help residents contact the right support channel.

3.6 Push Notification Data

If you allow notifications, we may store:

  • Push notification token(s) associated with your UID/device.

  • Basic delivery metadata (e.g., last update time).

We use push notifications for operational purposes such as fee reminders, announcements, and request status updates. Push notifications should not be used to send sensitive personal information.

3.7 Technical, Security, and Log Information

Our infrastructure providers (e.g., Firebase/Google and Expo) may automatically process technical information such as:

  • Device type, OS version, app version.

  • Approximate network information (e.g., IP address).

  • Access timestamps, performance and error/crash logs (for reliability and security).

We do not use this data for targeted advertising.

4. Device Permissions & On-Device Data

HolidayPM may request or use the following features depending on your actions:

4.1 Notifications

  • iOS/Android may ask for notification permission.

  • If granted, we may send operational notifications (fees, announcements, request updates).

4.2 Photos / Media Library (Optional)

Only used when you choose features such as saving a payment QR image to your device library. The OS will request permission before saving.

4.3 File Storage (App Cache / Temporary Files)

The app may generate temporary files (e.g., QR image files) in the app’s local storage/cache for sharing or saving. You can remove saved images from your photo library anytime.

4.4 Clipboard (Feature-based)

The app may provide a “Copy” function for payment information (bank account, amount, transfer content) so you can paste it into your banking app.

4.5 Phone Call / Email Actions (With User Confirmation)

If you tap a phone number or email address in Sổ liên lạc, the app will:

  • Show a confirmation dialog (or equivalent explicit user action), then

  • Open your device’s phone dialer (tel:) or email app (mailto:).
    The call/email is made by your device’s default apps, not by HolidayPM.

4.6 Opening External Links (With User Confirmation Where Applicable)

When you tap a link (support pages, forms, PDFs, etc.), the app may show a confirmation dialog displaying the destination URL and then open it in your browser/viewer.

You can manage permissions in your device settings at any time. Some features may not work if permissions are denied.

5. How We Use Your Information

We use information only to:

  • Provide resident services (display invoices/fees, announcements, payment instructions/QR, request tracking).

  • Send notifications (if enabled) about fees, announcements, and request updates.

  • Operate and support the app (customer support, troubleshooting, improving reliability, preventing abuse/fraud, maintaining security).

  • Comply with legal obligations where applicable.

We do not:

  • Sell or rent your personal data.

  • Show third-party ads or use your data for targeted advertising within the app.

6. Legal Basis

Processing may be based on:

  • Operational necessity to provide building management services and fulfill resident/building obligations; and/or

  • Your consent when you enable optional permissions (e.g., notifications, photo library) or submit requests.

You may withdraw certain permissions in device settings.

7. Sharing and Disclosure

We may share information only in these cases:

7.1 Infrastructure and Service Providers

We use cloud services such as Firebase (Google LLC) and Expo to operate authentication, database syncing, and notifications. These providers process data under their own security and privacy terms.

7.2 Building Management / Authorized Staff

Authorized building/project staff may access data needed for:

  • Billing updates and reconciliation,

  • Handling requests/complaints,

  • Operational announcements.

7.3 Legal Requirements

We may disclose information if required by law or valid requests from competent authorities.

8. Data Storage & Security

Data is stored primarily in cloud backend services (e.g., Firebase) and/or building management internal systems. Data may be hosted on servers outside Vietnam depending on provider regions.

We use reasonable security measures including:

  • Authentication and access controls,

  • Encryption in transit (HTTPS/TLS),

  • Logging/monitoring for reliability and abuse prevention.

No system can be guaranteed 100% secure.

9. Links to Third-Party Websites and Services

HolidayPM may open web pages in your device’s browser for support and forms, including (examples):

  • Privacy policy page

  • Support page (e.g., theholiday.vn/holidaypm-support)

  • Service registration forms (e.g., theholiday.vn/bieu-mau)

  • PDF links or other official project documents

When you open these links, your browser and the website may process technical data such as IP address and access logs as part of normal web operations. Any cookies/analytics (if used on the website) are governed by the website’s own settings/policies.

10. Data Retention

Invoices, payment records, announcements, and request history may be retained according to building management policies (e.g., accounting, legal compliance, dispute resolution, operational needs).

Technical logs may be retained for a limited period as needed for security and reliability.

11. Your Choices and Rights (Including No In-App Account Deletion)

Depending on applicable laws and building management policies, you may request:

  • Access/correction of inaccurate resident information (name, email, apartment code mapping).

  • Deactivation of access when moving out or changing resident contact records (handled by BQL/management).

  • Deletion/restriction of certain data where legally applicable (subject to operational/legal retention obligations).

Account deletion: Because HolidayPM accounts are provisioned and managed by the Building Management Team for building operations, account deletion may not be available inside the app. To request account deactivation or data support, contact the channels in Section 13.

(For Google Play compliance: apps must clearly disclose their data practices via Privacy Policy and Data Safety; please ensure your Play Console “Data safety” form matches this policy.)

12. Children’s Privacy

HolidayPM is intended for apartment owners/authorized residents. It is not designed to collect information from children without parental/guardian supervision.

13. Contact Us / Support

For privacy questions, corrections, or support requests, please contact:

CÔNG TY CỔ PHẦN ĐẦU TƯ QUẢN LÝ BẤT ĐỘNG SẢN THE HOLIDAY
Website: theholiday.vn
Email: info@theholiday.vn

Support information (example content):

  • Login issues, wrong resident name/apartment code

  • Cannot view fees/invoices/payment history

  • Issues opening announcements/PDF links

  • UI/encoding issues, app crashes/white screen

  • Feature requests and feedback

For urgent building operational incidents (technical/security/fire safety), please contact your Building Management Team via the phone numbers posted at the building lobby or internal notices.