Delete your photos
Open MyClub on Zalo → Me → Privacy → Withdraw consent to delete all your photos. At a kiosk: welcome screen → Withdraw consent, then enter your phone number. Photos of you taken by someone else: submit a takedown request.
1. Responsibility for data
- Data
- For data of store owners, staff, buyers, and people who submit contact forms on the website: MyClub is the Personal Data Controller.
Session photos
2. Data we collect
| Group | Data | Source |
|---|---|---|
| Guest account | Phone number; display name and profile photo (if any); age group you provide. | You provide it at the kiosk or in the MyClub app, or Zalo shares it when you allow. |
| Session photos | Captured photos, framed photos, edited photos, videos, animated photos, flipbooks; session code, store, time taken. | Kiot. |
| Face | The kiosk detects faces on the device to enhance photos. MyClub does not store biometric data. | Kiot. |
| Payment at the store | Gen wallet balance, Gen codes used, deduction and refund history, payment method. | Kiosk, counter. |
| Proof of consent | Consent purpose, notice version, time, IP address, browser; guardian details if you are under 16. | Kiosk, MyClub on Zalo. |
| Log in | One-time verification code, time, IP address, device. | When you log in. |
| Frames you create | Frame designs, images you upload, sharing scope. | MyClub on Zalo. |
| Location | Only when you allow it, to suggest stores near you. MyClub does not store coordinates. | Zalo. |
| Store owners, staff | Email, full name, phone number, login information, activity log; version of the Terms of Use and Privacy Policy you agreed to, and time of agreement. When you log in with Google or Zalo: account ID, full name, email (phone number with Zalo) shared by that service when you allow it. | Management app (on the web and the MyClub Manager app), counter; Google, Zalo when you choose to log in with that service. |
| Plan payment | Order ID, amount, and bank transfer details provided by the bank; invoice details if you request one (company name, tax code, address, email). MyClub does not collect card information. | Payment order, bank, payment intermediary. |
| Purchases, kiosk rental | Full name, phone number, email, delivery address, rental time and location, order notes. | Orders placed on the website. |
| Kiosk log | Device status, errors, software version. Does not include photos. | Kiot. |
| Contact, requests | Full name, phone number, email, message, IP address, browser. | Form on the website. |
3. Purposes of processing and consent
At the kiosk, each purpose is a separate choice and is not pre-checked:
- Taking and printing photos on site (required to use the kiosk).
- Saving photos so you can download them again with a QR code or when you log in.
- AI portrait retouching.
- Back up photos to the store’s Google Drive (when the store uses it).
- Receive promotional messages from the store.
MyClub also processes data to calculate charges and reconcile payments, manage Gen wallets, process and deliver orders, issue invoices, handle complaints, prevent fraud, operate the system, and reply to inquiries. MyClub does not sell personal data and does not use your photos for advertising. Photos are only posted on the store’s page when you give separate consent for that photo.
4. Retention period
| <b>Shipping carriers</b>: full name, phone number, and delivery address for orders to be delivered. | <b>The store’s Google Drive</b>: only when the store uses the backup feature and you consent to this purpose. |
|---|---|
| <b>Competent state authorities</b>: when required by law. | Before using any additional external service that processes personal data, MyClub will update this policy. |
| Request | How |
| View, re-download photos | Scan the QR code on your photo strip, or open <link>MyClub on Zalo</link> → Photos. |
| View data processing notice | MyClub on Zalo → Me → Privacy; or “View notice” at the kiosk. |
| Edit display name | MyClub on Zalo → Me. |
| Withdraw consent (delete all photos) | MyClub app or MyClub on Zalo → Me → Privacy → Withdraw consent; or at the kiosk: welcome screen → Withdraw consent. |
| Delete account | MyClub app: Me → Privacy → Request account deletion. MyClub on Zalo: Me → Delete account. MyClub Manager app: Profile → Delete account. No app: send a request at myclub.vn/delete-account. |
5. Scope of access
- Store where you took photos: the store owner, managers, and staff can view your sessions, photos, and Gen wallet at that store based on permissions. Phone numbers are partially masked in lists.
- Other stores: one phone number works across the whole platform, but photos, Gen wallet, and consent are kept separate for each store chain.
- MyClub staff: access only when needed to support a store, handle your request, or fix an issue.
- People with the photo page link: can view the photos of that session until it expires. Only send the link to people you want to share with.
- Frames you share: visible within the scope you choose.
6. Data storage and sharing
Data is stored on servers located in Vietnam. MyClub uses reputable infrastructure and service providers, bound by confidentiality agreements, to operate the service. MyClub only shares the necessary data with:
- Zalo: so you can use MyClub on Zalo, sign in with your phone number when you allow it, and receive verification codes.
- Google: when store owners and staff choose to sign in with Google. MyClub only receives the identifier, full name, and email.
- Google Play services: the MyClub app uses the Google Play services QR code scanner to scan codes at the kiosk. Camera images are processed on the phone itself; Google may collect scanner diagnostic and performance data under Google’s policy.
- Banks and payment intermediaries: to confirm bank transfer transactions.
- Shipping carriers: full name, phone number, and delivery address for orders to be delivered.
- The store’s Google Drive: only when the store uses the backup feature and you consent to this purpose.
- Competent state authorities: when required by law.
Before using any additional external service that processes personal data, MyClub will update this policy.
7. Data subject rights
You have the right to be informed, consent or decline, access, correct, delete your data, withdraw consent, restrict or object to processing, file complaints, and seek compensation as provided by law.
| Request | How |
|---|---|
| View, re-download photos | Scan the QR code on your photo strip, or open MyClub on Zalo → Photos. |
| View data processing notice | MyClub on Zalo → Me → Privacy; or “View notice” at the kiosk. |
| Edit display name | MyClub on Zalo → Me. |
| Withdraw consent (delete all photos) | MyClub app or MyClub on Zalo → Me → Privacy → Withdraw consent; or at the kiosk: welcome screen → Withdraw consent. |
| Delete account | MyClub app: Me → Privacy → Request account deletion. MyClub on Zalo: Me → Delete account. MyClub Manager app: Profile → Delete account. No app: send a request atmyclub.vn/delete-account. |
| Delete previous Facebook login data | If you used to sign in with Facebook, request data deletion on the Facebook data deletion page. |
| Remove photos of you, violating content | Send a photo removal request, or tell the store where you took them. |
| Other requests (data copy, objection, complaint) | Email [email protected]. |
MyClub responds within 72 hours of receiving your request and may ask you for information to verify it. Withdrawing consent does not affect the lawfulness of processing carried out before.
8. Children
Guests under 16 need consent from a parent or guardian. Without it, the kiosk still takes and prints photos on the spot but does not store photos and does not edit photos with AI.
10. Data protection
- Connections are encrypted; access is assigned by role and limited to what is necessary.
- Passwords and PINs are not stored in a readable form.
- Photo page links are hard to guess and are not indexed by search engines.
- Important actions by personnel are logged.
- If a data breach occurs, MyClub notifies the authority responsible for personal data protection within the legally required time, and notifies the store and affected individuals.
11. Policy changes and contact
When we make important changes, MyClub updates the effective date at the top of the page and asks you to agree again if the purpose of processing changes.
Contact point for personal data requests: email [email protected].