logo

Privacy Policy

(Last updated: October 14, 2026)

We Up Company Limited ("We Up", "we", or "us") operates an online platform (including the website and mobile application) providing services to purchase and read ebooks, buy physical books, purchase and take courses, and other related services (collectively, the "Services").

Under this Policy, We Up acts as the personal data controller and processor in accordance with the laws on personal data protection. We are committed to protecting Users' personal data. This Policy is designed to make our collection, processing, and protection of personal data transparent and to affirm We Up's commitment to complying with applicable laws on personal data protection.

USER ACKNOWLEDGMENT

By registering an account, accessing or using We Up's Services, or carrying out any transaction on our platform, you ("you", the "User", or the "Data Subject") acknowledge that:

  • You have read, understood, and fully agree to the terms of this Privacy Policy (the "Policy").
  • You voluntarily provide your personal data to We Up as required during registration and use of the Services.
  • You consent to We Up collecting and processing your personal data to the extent necessary to perform and provide the Services fully and continuously, and to protect the lawful rights and interests of We Up and Users in accordance with the law. Registering an account, accepting this Policy, or continuing to use the Services does not replace your separate consent to sharing data with the AI provider under Section 6.2 or to other processing purposes that require separate consent under this Policy.
  • Personal data of children and of persons with limited or lost civil act capacity is processed through their legal representatives as prescribed and in accordance with relevant laws. We Up will stop processing and delete such data if it discovers that the collection or processing does not comply with these regulations.

1. LEGAL BASIS

The collection, use, processing, and protection of Users' personal data at We Up are carried out in accordance with the applicable laws of Vietnam, including the Law on Personal Data Protection, its implementing documents, and related laws on cybersecurity, electronic transactions, e-commerce, and other relevant fields, as amended, supplemented, or replaced from time to time.

a. Basic personal data includes:

  • Surname, middle name, and given name at birth, and other names (if any);
  • Date of birth; date of death or disappearance;
  • Gender;
  • Place of birth, place of birth registration, place of permanent residence, place of temporary residence, current place of residence, hometown, and contact address;
  • Nationality;
  • Images of the individual;
  • Phone number, personal identification number, passport number, driver's license number, and vehicle license plate number;
  • Marital status;
  • Information about family relationships (parents, children, spouse);
  • Information about the individual's digital accounts;
  • Other information associated with, or that helps identify, a specific individual that is not covered by Article 4 of this Policy.

b. Sensitive personal data includes:

  • Data revealing racial or ethnic origin;
  • Political, religious, or philosophical views;
  • Information about private life, personal secrets, and family secrets;
  • Health status;
  • Biometric data and genetic characteristics;
  • Data revealing an individual's sex life or sexual orientation;
  • Data on crimes and violations of law collected and stored by law enforcement agencies;
  • The individual's location as determined by location services;
  • Usernames and passwords for the individual's electronic identification accounts; images of identity cards, citizen identity cards, or ID cards;
  • Usernames and passwords for bank accounts; bank card information and bank account transaction history; financial and credit information, and information about customers' activities and transaction history in finance, securities, and insurance at credit institutions, foreign bank branches, payment intermediary service providers, securities and insurance organizations, and other licensed organizations;
  • Data tracking behavior and activity in the use of telecommunications services, social networks, online media services, and other services in cyberspace;
  • Other personal data that the law requires to be kept confidential or subject to strict security measures.

2. SCOPE OF APPLICATION

a. This Policy applies to all processing of Users' personal data arising in the following cases:

  • Accessing and using the We Up website/application.
  • Registering an account and logging in (including with email/password or through a Google account).
  • Purchasing and using ebooks, physical books, courses, and other related services on the platform.

3. INFORMATION (PERSONAL DATA) WE COLLECT

a. Data you provide directly

  • Identification data: Full name, email address, phone number, password (encrypted), profile photo, and other account profile information (if any).
  • Transaction data: Information related to purchases, order history, invoices, and delivery addresses (for physical books).
  • Content data: Content you create, store, or share on the platform such as comments, product/course reviews, assignments, notes, etc. When you use the AI features, content data also includes the questions, requests, and content you actively enter, together with a randomly generated session ID, within the scope described in Section 6.2.

b. Data collected automatically

When you interact with the platform, we may automatically collect:

  • Device data: Device type, operating system, browser, app version, and other technical parameters.
  • Activity data: IP address, access time, pages/features viewed, reading time, learning progress, and other interactions with the system.
  • Data from cookies, SDKs, and similar technologies: We Up uses cookies, SDKs, and similar technologies to keep the platform running, authenticate accounts, remember User preferences, keep the system secure, analyze performance, and improve the experience of using the Services. We Up does not sell personal data or use cookies to track User behavior for third-party advertising, unless the User consents or the law provides otherwise.

c. Data from third parties

  • Social login services: When you sign in with a Google account, we collect basic information (e.g., name, email, profile photo) within the scope you authorize.
  • Service partners: We may receive information from partners providing payment, cloud storage, data analytics, and other technical services to the extent necessary to operate the system.

4. PURPOSES OF PROCESSING PERSONAL DATA

We Up uses your data for the following purposes:

  • Providing, operating, and managing the Services: Creating, verifying, and maintaining accounts; delivering the full features of the Services such as reading ebooks, online learning, and purchasing physical books. Optional AI features, including chatting about the content you are viewing, summarizing content, and generating infographics, are provided under the notice and consent mechanism in Section 6.2.
  • Processing transactions and supporting Users: Completing purchases, payments, invoicing, and delivery; recording learning and purchase history; answering inquiries and handling issues that arise.
  • Notifications and communications: Sending account-related notices, transaction confirmations, service updates, recommendations, and other technical support information.
  • Improving and securing the Services: Analyzing and compiling aggregated statistics to improve service quality; detecting and preventing fraud, unauthorized access, and violations of the terms of use; and keeping the system safe and secure.

The activities above are considered necessary to perform and ensure the full and continuous provision of the Services and to protect the lawful rights and interests of Users; they are not intended to market or promote new products or services outside the scope of the existing service relationship between We Up and Users.

  • Personalizing your experience: Recommending content (books, courses) that matches your preferences and history; displaying information and language appropriate to your region (inferred from your IP address). We Up may process information about Users' transactions and usage of the Services to analyze, evaluate, and personalize content, and thereby provide recommendations, products, services, offers, and experiences suited to Users' needs. This processing is carried out only on the basis of the User's separate, explicit, and voluntary consent through the options or settings provided by We Up. Users may agree or refuse, and may withdraw consent for each of the processing purposes above at any time, through the privacy management features or other methods provided by We Up. Refusing or withdrawing consent does not affect the User's continued use of the core functions of the Services or receipt of necessary information related to providing and operating the Services.
  • Complying with the law: Meeting the requests of competent state authorities and complying with legal obligations, including but not limited to regulations on tax, accounting, record retention, and other legal obligations as required by law.

5. LEGAL BASIS FOR PROCESSING AND CONSENT

  • We Up processes your personal data on one or more of the following bases: (i) your consent; (ii) the performance and provision of the Services between you and We Up; (iii) compliance with legal obligations; and (iv) other lawful bases as provided by law.
  • You may withdraw the consent you have given at any time by contacting us. Withdrawing consent may affect your ability to use some or all of our Services. Refusing or withdrawing consent to share data with the AI provider affects only the AI features and does not affect any other functions of the Services.

6. SHARING PERSONAL DATA

6.1 We Up undertakes not to sell, lease, or trade your personal data to any third party for commercial purposes. We only share data in the following cases:

  • With service providers: Third parties that provide services to We Up such as cloud storage, electronic payment gateways, email/SMS delivery, and data analytics tools. They may access data only to the extent necessary to perform their services and are bound by confidentiality obligations under contract and under the law. Data sharing with the AI provider is set out specifically in Section 6.2.
  • As required by law: When there is a lawful written request from a competent state authority (such as investigation agencies, procuracies, or courts), or to protect the lawful rights and interests of We Up, other users, or the community.
  • With your consent: We will share data for other purposes only with your separate, explicit consent.

6.2. Sharing data with artificial intelligence (AI) providers

a. AI features and service provider

The Weup Book application offers optional AI features that let Users chat about the content they are viewing, summarize content, and generate infographics. To provide these features, We Up uses the services of a third-party AI provider, OpenAI.

b. Data sent to the AI provider

When you use the AI features under the consent mechanism described in point d below, We Up collects the content you enter and extracts the portion of content needed to process your request, then sends it to OpenAI. The data sent includes:

  • The portion of the ebook, course, or podcast content needed to process your request.
  • The questions, requests, and content you actively enter into the AI features.
  • A randomly generated session ID used to process the request.

We Up does not automatically attach your name, email address, phone number, or account identifier from your profile to requests sent to OpenAI. However, content you actively enter may contain personal data if you choose to provide it. You should avoid entering identifying information, sensitive personal data, or other people's private information when it is not necessary for your request.

c. Purpose of processing

We Up shares the data above so that OpenAI can process your request and generate the answer, summary, or infographic returned to you. We Up does not use data shared through the AI features for advertising or to identify you.

d. Your consent and choices

The AI features are optional. If you do not use the AI features, We Up does not send your data to OpenAI for these features.

  • On the iOS app: The AI features are turned off by default. Before first use, the app shows a notice that clearly states the data to be sent, the name of the provider receiving it, and the purpose of processing. The app sends data only after you actively tap to agree and use the AI features. You can withdraw your consent at any time under Profile → AI Features in the app. Once you withdraw, the app stops sending new AI requests containing your data to OpenAI.
  • On the Android app and the web platform: Before you use the AI features, We Up informs you of the data shared, the provider receiving it, and the purpose of processing in this Section 6.2. Actively submitting a request to the AI features after being informed constitutes your consent to sharing data to process that request. If you do not agree, you may choose not to use the AI features. We Up is rolling out a separate permission prompt, similar to the iOS app, for these two platforms.

In all cases, you may ask We Up to stop sharing your data with the AI provider by contacting us as described in Section 12. Once your withdrawal of consent is recorded, We Up stops sending new AI requests containing your data to OpenAI. Withdrawing consent does not automatically delete data that has already been sent.

7. STORAGE AND SECURITY OF DATA

  • Storage location: Your personal data is stored on servers and cloud services that meet security standards and comply with data protection laws. Where necessary to provide or operate the Services, User information may be stored or processed on systems or by service providers located outside Vietnam. Such data transfers are carried out in accordance with the laws on personal data protection and applicable security standards.
  • Retention period: We Up retains Users' personal data for as long as necessary to fulfil the processing purposes notified in this Policy, including the period during which the User maintains an account and uses the Services, unless the law provides otherwise or longer retention is necessary to exercise the rights or perform the obligations of We Up or the User under the law. When the retention period ends or the personal data is no longer necessary for the processing purpose, We Up will delete, destroy, or anonymize the data in accordance with the law and We Up's internal procedures. For AI feature data, the retention period at the provider depends on the service, technical configuration, and applicable agreement. The provider may retain data to fulfil requests, keep the service safe, prevent abuse, or comply with the law. Withdrawing consent does not automatically delete data that has already been sent.
  • Data deletion: If a User requests deletion of their personal data, We Up will review and carry out the request in accordance with the law, except where the data must still be retained to fulfil legal obligations, resolve complaints or disputes, or in other cases where the law permits or requires continued processing.
  • Security measures: We apply appropriate technical and organizational security measures to protect data against unauthorized access, collection, use, or disclosure and similar risks, including password encryption, firewalls, strict access control, and regular system reviews. For sensitive personal data (if any), We Up applies a higher level of protection, including strict access authorization, separate processing, and enhanced technical and management measures to keep the data safe throughout processing.
  • Incident handling: In the event of a serious personal data breach, We Up will promptly take remedial measures and notify you and the competent authorities as required by law.

8. USER RIGHTS (DATA SUBJECT RIGHTS)

Under Vietnamese law, you have the following rights regarding your personal data:

  • The right to be informed about data processing activities.
  • The right to consent or refuse consent to data processing.
  • The right to access, view, edit, or request correction of your data.
  • The right to withdraw consent.
  • The right to erasure of data.
  • The right to restrict data processing.
  • The right to data provision (to receive the data you provided).
  • The right to object to data processing.
  • The right to complain, denounce, and initiate legal proceedings as provided by law.
  • The right to claim compensation for damage (if any).

To exercise any of the above rights, please contact us at [email protected] or through other official channels published on the website/app. We will respond to your request as soon as possible in accordance with the law.

9. COOKIES AND YOUR CHOICES

  • Purposes of cookies: We Up uses cookies in a limited way, mainly to: (i) store login tokens to maintain your session so you do not need to sign in again each time you return; (ii) record location information inferred from your IP to display appropriate content and language.
  • Your choices: You can customize or disable cookies in your browser settings. Please note, however, that disabling cookies may affect your experience and some platform features may not work properly.

10. CHANGES TO THIS POLICY

  • We may amend or update this Policy at any time to reflect business needs and applicable laws.
  • For material changes, we will notify you via your registered email or through prominent notices on the website/app before the updated Policy takes effect.
  • If a User does not agree with these amendments or supplements, the User has the right to stop using the Services, request account closure, and withdraw consent to data processing. Your continued use of We Up's Services after the updated Policy takes effect is understood as your acceptance of the changes. Registering an account, accepting this Policy, or continuing to use the Services does not replace your separate consent to sharing data with the AI provider under Section 6.2 or to other processing purposes that require separate consent under this Policy.

11. POLICY EFFECTIVENESS

  • This Privacy Policy is effective from the date it was last updated (the "Last updated" date) stated at the top of this document.
  • Registering an account, accessing, or using any of We Up's Services after the effective date constitutes confirmation that you have read, understood, and fully agree to the terms of this Policy. Registering an account, accepting this Policy, or continuing to use the Services does not replace your separate consent to sharing data with the AI provider under Section 6.2 or to other processing purposes that require separate consent under this Policy.
  • If any provision of this Policy is declared invalid or unenforceable by a competent court or state authority, the remaining provisions remain in full force and effect.

12. CONTACT INFORMATION

If you have any questions or concerns about this Privacy Policy, please contact us:

  • Email: [email protected]
  • Phone: 0356213729
  • Address: 7th Floor, Peakview Tower, 36 Hoang Cau Street, O Cho Dua Ward, Hanoi City, Vietnam