Privacy Policy

Updated 12/10/2026

In short: Lensan only collects what is needed for you to book courts and for owners to run their venues. We do not sell data, show ads or track you across other apps.

1. Who is responsible for your data

The data controller is the individual Trần Vi Khan, who develops and operates Lensan. Send any personal data request to privacy@lensan.vn.

This policy covers the lensan.vn website, the Lensan app and the Lensan Partner app.

2. Data we collect

  • Account: phone number, display name, profile photo (if you upload one), favourite sports.
  • Bookings: venue, time, notes, booking status, check-in and cancellation history.
  • For venue owners: venue details (name, address, coordinates, prices, photos), staff, customer book, schedule and on-site takings you enter.
  • Location: only with your permission and only while you use the app, to suggest nearby courts and give directions. No background location tracking.
  • Voice: only while you hold the microphone button in the AI assistant. The recording is transcribed immediately and discarded; no audio file is kept.
  • Content you post: reviews, posts, photos, messages in groups and matches, support requests.
  • Device and technical: push notification token, app version, operating system, error logs used to fix problems.
  • App usage: steps in the booking flow (viewing a venue, picking a time, completing a booking) so we can see where it is hard to use. Lensan measures this itself, with no third-party analytics or advertising tools.

The camera is only used to scan check-in QR codes; scans are not stored. Calendar access is only used to add your bookings to the calendar on your phone; we never read your calendar.

3. What we use data for

  • Signing you in and keeping your account secure.
  • Sending your booking request to the venue, reminding you before play, telling you about schedule changes.
  • Helping owners run their venue: schedule, customers, check-in, reports.
  • Answering support requests and handling abuse reports.
  • Finding and fixing bugs, preventing fraud and abuse.

We do not use your data for advertising, we do not sell or rent it, and we do not track you across other companies' apps or websites.

4. Who we share it with

With the venue you book: your name, phone number and booking details, only to serve that booking.

With infrastructure providers that process data on our behalf, under contract and only as far as needed:

  • Supabase: database, sign-in and photo storage (servers in Singapore).
  • Railway, Vercel: hosting the application server and website.
  • Twilio: sending one-time codes by SMS.
  • Expo, Apple, Google: delivering push notifications to your device.
  • OpenAI: processing questions and voice when you choose to use the AI assistant. Data sent through the API is not used to train models.
  • Sentry: recording technical errors so we can fix them.
  • Open-Meteo, CARTO/OpenStreetMap: weather for a venue's coordinates and map tiles; they receive nothing that identifies you.

We only disclose data to authorities when legally required to do so.

5. Transfers outside Vietnam

Some of the providers above host servers outside Vietnam (Singapore, United States). We choose providers with appropriate security commitments, encrypt data in transit and only transfer what each task needs.

6. How long we keep it

  • Account data: until you delete your account.
  • Booking history: up to 24 months after the session, or until you delete your account. Records a venue needs for its own books are anonymised and no longer linked to you.
  • Technical and error logs: up to 90 days.
  • Backups: rotated out automatically, at most 30 days after the original data is deleted.

7. How we protect it

Data is encrypted in transit (HTTPS), internal access is limited by role and logged. Owners and staff can only see their own venue's data. If a data breach occurs, we will notify you and the competent authority as required by law.

8. Your rights

Under Vietnamese personal data protection law, you have the right to be informed, to access, correct and request deletion of your data, to withdraw consent, to restrict or object to processing, and to complain.

Most of this you can do yourself in the app (edit your profile, turn off location or notifications, delete your account). For anything else, write to privacy@lensan.vn; we respond within 72 hours and complete requests within the legal deadline.

9. Children

Lensan is not intended for anyone under 16 and we do not knowingly collect children's data. If you know of an account belonging to a child, tell us and we will delete it.

10. Changes to this policy

When this policy changes materially, we notify you in the app before it applies and update the date at the top of this page.

Questions about this page? Contact Lensan.