Privacy & GDPR

Privacy

HaMi Code Việt is committed to protecting your personal data. We comply with GDPR (EU) and applicable data protection regulations.

Data We Collect

• Account information: name, email, password (hashed)
• Learning progress: completed lessons, scores
• AI conversations (to improve quality)
• AI memories (see self-learning memory)
• Payment history
• System activity (audit logs)

Your Rights Under GDPR

• Right of access — Request a copy of your data
• Right to erasure — Request deletion of all your data
• Right to rectification — Request correction of inaccurate data
• Right to portability — Receive data in a machine-readable format
• Right to object — Object to data processing

Request Data Export

POST /gdpr/export

The system will send an email with a link to download your data.

Request Data Deletion

POST /gdpr/delete

All your data will be deleted within 30 days.

Cookies

HaMi Code Việt uses only the minimum cookies necessary for authentication and sessions. No third-party advertising or tracking cookies.

Data Storage

• Data is stored on Neon PostgreSQL (United States)
• Daily backups, retained for 30 days
• Passwords hashed with PBKDF2
• JWT tokens use HMAC-SHA256

Full details on the legal page.