Last updated: June 1, 2026
HIKONI Co., Ltd ("HIKONI", "we", "our", or "us") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, disclose, transfer, and protect information when you access or use our websites, mobile applications, web applications, SaaS platforms, APIs, artificial intelligence features, enterprise systems, cloud-based services, and related digital products (collectively, the "Services").
This Privacy Policy applies to personal data processed by HIKONI in connection with the Services. It does not apply to third-party websites, platforms, services, SDKs, app stores, payment processors, identity providers, or integrations that are not controlled by HIKONI, even if they are linked to or accessible from our Services.
If a specific Service has a separate privacy notice, data processing agreement, enterprise agreement, or product-specific policy, that specific document may supplement or override this Privacy Policy for that Service to the extent of any conflict.
The categories of personal data we collect depend on the Service you use, your region, your settings, your device, and the features you choose to enable.
If a Service requires or supports an account, we may collect information such as:
Depending on the Service, you may sign in using email and password, Google Sign-In, Apple ID, Microsoft account, single sign-on, or another supported identity provider. When you use a third-party sign-in provider, we may receive information such as your account identifier, email address, name, profile image, authentication tokens, and other information you authorize the provider to share.
We may collect technical information such as:
We may collect information about how you interact with the Services, including:
Depending on the Service, you may submit, upload, generate, synchronize, or process User Content such as:
If a Service includes paid plans, subscriptions, in-app purchases, usage-based billing, or enterprise licensing, we or our payment providers may process information such as billing name, billing email, billing address, transaction ID, subscription status, purchase history, invoice information, tax information, and payment method tokens. We do not intentionally store full payment card numbers unless expressly required and securely handled through a compliant payment provider.
If you connect a Service with a third-party integration, we may collect or process information authorized by you through that integration. Depending on the Service, this may include data from providers such as Google, Apple, Microsoft, calendar providers, email providers, file storage providers, payment processors, analytics providers, AI providers, or other external APIs.
Depending on the application and the features you choose to use, the Service may request access to certain device permissions. Permissions are requested only where relevant to the functionality of the applicable Service.
If a Service provides scheduling, calendar synchronization, reminders, task management, or availability features, we may request access to calendar data to read, create, update, delete, display, or synchronize calendar events, depending on the permission you grant.
If a Service provides collaboration, invitations, sharing, communication, or contact-based features, we may request access to contacts. We use contact data only for the features you choose to use.
If a Service supports image capture, document upload, QR code scanning, profile images, file sharing, content generation, or media storage, we may request access to your camera, photos, files, or storage.
If a Service supports audio recording, voice input, transcription, voice commands, or communication features, we may request microphone access.
If a Service provides location-based functionality, we may request access to approximate or precise location data. Location access is used only for the specific feature that requires it.
If a Service provides reminders, alerts, security messages, activity updates, or system notifications, we may request permission to send push notifications, email notifications, or other service-related messages.
You can manage or revoke many permissions through your device, browser, platform, or account settings. Some features may not function properly if required permissions are disabled.
We may use personal data for the following purposes:
Depending on your location and the applicable law, we may process personal data based on one or more legal bases, including:
Where Vietnamese law requires consent or another specific legal basis for processing, we will apply the required basis and provide appropriate notices.
Some Services may include AI-powered features such as chat, summarization, automation, classification, recommendation, search, content generation, workflow assistance, or AI agents.
When you use AI Features, your inputs, prompts, uploaded content, context, metadata, and outputs may be processed to provide the requested functionality, maintain safety, troubleshoot issues, prevent abuse, and improve the quality and reliability of the Service.
Unless we clearly disclose otherwise and obtain any required consent, we do not use private User Content to train public AI models. If a specific product uses third-party AI providers, data may be processed by such providers only as necessary to provide the relevant AI functionality and subject to applicable contractual, technical, and legal safeguards.
AI outputs may be inaccurate or incomplete. You are responsible for reviewing AI-generated content before using it, especially for important, professional, legal, financial, medical, safety, or business decisions.
We may use cookies, local storage, pixels, SDKs, device identifiers, session identifiers, analytics tools, crash reporting tools, and similar technologies to operate and improve the Services.
These technologies may be used to:
Depending on your region and the type of technology used, we may request your consent before using non-essential cookies, analytics, advertising identifiers, or tracking technologies. You can manage many cookie and tracking choices through browser settings, device settings, platform settings, or in-app settings where available.
Depending on the Service, we may use analytics, crash reporting, and performance monitoring tools to understand usage, identify bugs, improve reliability, and protect the Services. These tools may collect device information, usage events, crash logs, error messages, performance metrics, and diagnostic information.
We configure such tools in a manner intended to limit collection to what is reasonably necessary for operational, security, analytics, and improvement purposes.
We do not sell personal data. We may share personal data in the following circumstances:
The Services may integrate with or link to Third-Party Services such as Google, Apple, Microsoft, Firebase, cloud providers, payment providers, analytics providers, AI providers, communication tools, app stores, or external APIs.
Third-Party Services are governed by their own terms and privacy policies. We are not responsible for the privacy practices, security, availability, or content of Third-Party Services that we do not control.
You should review the privacy policies and settings of any Third-Party Services you choose to use or connect.
If a Service uses Google APIs, Google Sign-In, Google Calendar, Google Workspace, or other Google services, we access, use, store, and share Google user data only as necessary to provide the functionality authorized by the user and as described in this Privacy Policy.
We do not use Google user data for advertising purposes. We do not sell Google user data. We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, comply with law, protect security, or as otherwise permitted by applicable Google API policies and user consent.
Users may revoke access through their Google account settings or through settings provided by the applicable Service where available.
If you sign in using Apple ID, Microsoft account, or another identity provider, we process the information shared by that provider according to your authorization, the provider's rules, and this Privacy Policy.
You may manage connected apps and revoke access through the relevant provider's account settings.
HIKONI supports global use of its Services. Your personal data may be processed, stored, or transferred in countries or regions other than where you are located, including countries where HIKONI, its affiliates, service providers, cloud providers, or infrastructure partners operate.
Where required by applicable law, we use appropriate safeguards for international transfers, which may include contractual protections, technical and organizational measures, security controls, data processing agreements, and other legally recognized transfer mechanisms.
By using the Services, you acknowledge that your information may be processed in countries that may have different data protection laws than your country of residence.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods may depend on the type of data, the Service used, your account status, legal obligations, security needs, backup cycles, dispute resolution requirements, and operational requirements.
In general:
Where a Service provides account creation, users may request account deletion and deletion of associated personal data through in-app settings, web settings, account tools, or by contacting us.
When you request deletion, we will take reasonable steps to delete or anonymize personal data associated with your account, subject to exceptions where we must retain data for legal obligations, security, fraud prevention, dispute resolution, tax, accounting, backup, or legitimate business purposes permitted by law.
Some data may remain in backups for a limited period until the backup is overwritten or deleted. Some data shared with third-party services may need to be deleted through those third-party services directly, depending on their controls and policies.
Depending on your location and applicable law, you may have rights regarding your personal data, including:
To exercise these rights, please contact us using the contact information below. We may need to verify your identity before responding to your request. We will respond within the timeframe required by applicable law.
Where permitted by law and your preferences, we may send you product updates, newsletters, promotional communications, event invitations, or similar marketing messages. You can opt out of marketing communications by using the unsubscribe link in the message or contacting us.
We may still send non-marketing communications, such as security alerts, account notices, billing messages, service updates, and legal notices.
We use reasonable technical, organizational, and administrative safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
These safeguards may include access controls, authentication measures, encryption in transit, monitoring, logging, backup procedures, secure development practices, vendor controls, and incident response processes.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for securing your devices and accounts.
The Services are not directed to children under the minimum age required by applicable law in their jurisdiction. We do not knowingly collect personal data from children where parental consent or another legal requirement is necessary and has not been satisfied.
If you believe that a child has provided personal data to us without appropriate consent, please contact us. We will take reasonable steps to delete such data or obtain appropriate consent where required.
If you use the Services through an organization, employer, school, or workspace, your administrator may have access to certain account, usage, content, and configuration information. The organization may control your account, manage permissions, access logs, export data, restrict features, or request deletion according to the applicable agreement and settings.
In such cases, the organization may be responsible for providing required notices and obtaining required consents from its users, employees, contractors, customers, or other data subjects.
Because our Services may be used globally, users in certain regions may have additional privacy rights under local laws, such as laws in Vietnam, the European Economic Area, the United Kingdom, Japan, California, or other jurisdictions.
Where applicable, we will provide required notices, honor applicable rights, and apply appropriate safeguards. If local law gives you additional rights not described in this Privacy Policy, you may contact us to exercise those rights.
We may update this Privacy Policy from time to time to reflect changes in our Services, technology, legal requirements, platform policies, or business operations.
When we update this Privacy Policy, we will revise the "Last updated" date above. If changes are material, we may provide additional notice through the Services, website, email, or other appropriate means.
Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy.
If you have questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:
HIKONI Co., Ltd
Website: https://hikoni.com
Email: [email protected]