1. Scope
This policy applies to Align, the KHI Wellness member app on Android (package com.khiwellness.align), iOS and the web at align.khiwellness.com. Align is developed and operated by KHI Wellness Company Limited(Công ty TNHH KHI Wellness, “KHI”, “we”), which decides how your personal data in the app is processed.
Align is for existing studio members only: accounts are created by the studio when you buy a class package, and there is no sign-up inside the app. The app has no ads and no in-app payments.
2. Data we collect
- Account details (required) — phone number, name, member ID. Used to identify you and sign you in.
- Email address (required) — to send one-time sign-in codes (OTP).
- Date of birth (optional) — for birthday rewards.
- Photos (optional) — a profile photo you upload, and photos or screenshots you submit as proof for points activities (for example a post tagging KHI, or a Google review).
- Training and rewards data (required) — classes booked, sessions attended, package balance and expiry, Journey points, membership tier, rewards redeemed.
- Content you submit (optional) — survey answers, links to social media posts.
- App usage — screens viewed and actions taken, recorded only while signed in. This is collected and stored by KHI itself for internal analytics; we use no third-party advertising or tracking tools.
- Random device token(optional) — created only if you choose “remember this device” to skip the code for 90 days.
- Notification subscription (optional) — only if you turn on browser notifications.
Align does not collect location, contacts, messages, audio/microphone, financial or payment information, and does not read phone health data (Health Connect, Apple Health).
3. Device permissions
- Camera — to scan QR codes for check-in at the studio or events, and to take photos when submitting proof for points. The camera turns on only when you tap scan or capture; the app never records in the background. You can deny this permission and still use every other feature.
- Internet— to load content from the studio’s servers.
4. How we use data
- To provide member services: booking, check-in, package tracking, points and rewards.
- To authenticate sign-ins, protect accounts and prevent points fraud.
- To review proof photos before awarding points.
- To send sign-in codes and in-app notifications (class reminders, review results, studio news).
- To support members and improve the app.
We do not use your data for targeted advertising and we do not sell it.
5. Sharing
We do not sell personal data. Data is only passed to service providers that process it on KHI’s behalf to run the app:
- Supabase — database for accounts, packages and points.
- Amazon Web Services — storage for photos you upload and sign-in code emails.
- Google — Gemini AI service, which helps check proof photos.
- A server provider in Vietnam that hosts the studio’s applications.
About AI photo checks: when you submit a proof photo, it is sent to an AI service for a first-pass check that it matches the activity. The result only assists staff; studio staff can always approve or reject it, and you can contact us if you think a result is wrong.
Some of these providers store or process data on servers outside Vietnam. The in-app leaderboard shows other members a shortened name (never your full name) and your points. We disclose data to authorities only when required by law.
6. Storage & security
- All traffic between the app and our servers is encrypted with HTTPS.
- Sign-in codes are single-use, expire after 10 minutes and are stored hashed; old codes are purged.
- Each member can only access their own data; studio staff access data according to their role.
- We keep data while you are a member or while it is needed for the purposes above. When you ask for deletion we delete it as described in section 8, except transaction records we are legally required to keep.
7. Your rights
Under Vietnamese personal data protection law you may access, correct and request deletion of your data, withdraw consent and object to processing. You can view and edit parts of your profile in the app; for anything else, contact us as in section 10. You can turn off camera or notification permissions at any time in your phone settings.
8. Account and data deletion
To delete your Align account and related data:
- Message us on Zalo +84 764 980 988 or email khi.pilates@gmail.com with the subject “Align account deletion request” and your registered phone number.
- We verify that you own the account (via your registered phone number or email).
- We process the request and confirm with you within 30 days.
We delete your in-app profile, email, uploaded photos, Journey points, reward history, survey answers and app usage data. Invoices and purchase records are kept for the period required by accounting law. Deleting the app account does not cancel an active class package — please talk to the studio about any remaining sessions.
9. Children
Align is intended for adult members and is not directed at children. We do not knowingly collect data from children under 13; if we learn that we have, we will delete it.
10. Contact
KHI Wellness Company Limited (Công ty TNHH KHI Wellness)
E27, An Phu New City, 9 Nguyen Hoang, An Phu Ward, Thu Duc City, Ho Chi Minh City, Vietnam
Phone / Zalo: +84 764 980 988
Email: khi.pilates@gmail.com
We may update this policy when the app changes; the latest version is always on this page with its date. Last updated: 28 September 2026.