🔒 Chính sách Quyền riêng tư · Privacy Policy

🇬🇧 English

1. Summary

BizOn is local-first. In normal play, progress and decisions remain on the device. When a user deliberately enters a class code (classroom mode), each round's results are sent automatically at the end of the round to a BizOn-managed database so the instructor can grade; without a class code nothing is sent.

2. Data stored on the device

• Simulation progress, decisions, round outcomes, achievements and a user-selected team name may be stored in browser localStorage.
• Theme, language and PWA installation preferences may be stored locally.
• CSV/JSON exports are downloaded directly to the device; exporting alone does not transmit a copy to BizOn.

3. When classroom data is submitted

A network submission occurs only after a class code has been entered (Bật Nghiệp: automatically at the end of each round) or when the user presses Submit on the Brand Passport, Bến Phù Sa or pilot screens. Possible fields include class code, team name, role, the email entered (if any), simulation score, outcome metrics, scenario seed, decision trace, reflection, application version and submission timestamp. Data is stored on a BizOn-managed Supabase service and transmitted over HTTPS.

Instructors or facilitators access only the relevant class through a key-protected RPC. Anonymous clients are not granted direct read access to classroom tables.

4. What BizOn does not do

• No advertising, no sale of user data and no advertising-profile creation.
• The current Android shell does not request contacts, location, camera or microphone permissions.
• AI does not change scores generated by the deterministic simulation engine.
• The Brand Passport Learning Pilot does not automatically upload reflections before governance approval and user opt-in.

5. Infrastructure providers

The website/PWA is hosted on GitHub Pages, and core fonts and interface assets are self-hosted in the project. GitHub may process connection data such as IP addresses under its own policies. Enabled classroom submission features may use Supabase to store the fields described above.

Technical error logs (diagnostics). To fix bugs and improve stability, when a JavaScript error occurs the app may automatically send a small diagnostic record to BizOn (only when the backend is enabled): the error message, file/source, line and column, stack trace, app version, browser user-agent string, window size and a timestamp. This record contains no legal name, email or phone number, is write-only (not read back to the user) and is used solely for debugging. Nothing is sent when playing offline or when the backend is disabled.

6. Android

The BizOn Android application is a Trusted Web Activity that opens the same PWA. The current build declares Internet access only. It does not declare location, contacts, camera, microphone, SMS or sensitive-file permissions.

7. Retention and deletion

Users control local-only data on their device. For data sent to the server, the planned retention is: classroom results 12 months (round submissions, Brand Passport, Bến Phù Sa); surveys 24 months; team save progress 90 days from last update; technical error logs 90 days. Data is deleted after these windows.

Users or instructors can request deletion of submitted data (by class code, by email where present, or by the alias entered) via the contact in Section 10; pilots that issue a deletion receipt support deletion by that receipt. Technical error logs carry no user identifier and therefore only expire by time. A pilot is not production-ready until the data controller, retention period and request contact are published.

8. Minors

BizOn contains no ads or violent content. Classroom data submission involving minors must be organized by the responsible institution under the applicable supervision and consent requirements.

9. Educational use

BizOn supports teaching, learning and research. Markets, events, metrics and recommendations may be illustrative simulation inputs and are not investment, legal or financial advice.

10. Account and data deletion

Accounts. Only the Instructor page of BizOn – Bật Nghiệp (developer: Thuy Huong Digital Learning – Đỗ Thùy Hương & Phan Anh Tú) creates accounts (email + password, stored in Supabase Auth). Regular players have no account.

How to request deletion of an account or data: email thuyhuongctu@gmail.com from the registered address (or state the class code / team name / email entered in the game) with the subject “Delete BizOn account” or “Delete BizOn data”. We acknowledge within 7 days and delete within 30 days: the instructor account (email, hashed password) and all submissions and member logs linked to the class code / team / email named in the request. Technical error logs carry no identifier and expire after 90 days. Data stored only on your device is deleted by you (clear browser/app data).

11. Contact

Privacy questions: patu@ctu.edu.vn · thuyhuongctu@gmail.com.

Current gate: Brand Passport Learning Pilot remains a Draft and remote submission stays disabled until a data controller is identified and staging validation is complete.