Effective from: 21/08/2026. This policy explains what data Vistra Browser ("Vistra", the "App", "we", "us") processes, why we need it, and how you can control your own data.
This English text is a translation provided for convenience. The Vietnamese version is the binding original; if the two differ in meaning, the Vietnamese version prevails. You can read it at Chính sách quyền riêng tư.
We try to collect and process only the data needed to provide, maintain and protect the Service. Vistra does not sell users' personal data.
1. Data we process
1.1. Account
When you sign in with Google, Vistra may receive your email address, display name, and the information needed to identify and authenticate the account.
This information is used to create and identify a Vistra account, to sign you in, to sync account data, to manage credits, to apply quotas and entitlements, to support users, to protect the account and to prevent fraud.
Vistra does not receive your Google account password. Sign-in information is protected by appropriate security mechanisms on the device.
1.2. Browsing history
When you are signed in and not using incognito mode, Vistra may store page titles, web addresses, and the access time needed to order the history.
History is stored on the device and may be synced to your Vistra account so you can review it. On the server, each account keeps at most the 200 most recent entries, and history entries are deleted automatically after 3 days.
Vistra does not sell your browsing history.
1.3. Incognito mode
When you use incognito mode, Vistra does not save the pages you open into your account's browsing history and does not sync that session's history to your account.
Session data such as cookies is cleared by the App's mechanism when the incognito session ends.
However, incognito mode does not make you invisible on the Internet. The websites you visit, the network you use, and external services may still process data under their own policies.
1.4. Text you ask us to translate
When you actively use the web page translation feature, the text that needs translating is sent to Vistra's systems and to the AI processing needed to produce the translation.
This data is used to identify the content to translate, produce the translation, return the result to the App, and maintain and protect the operation of the service.
Vistra claims no ownership over the content you send for translation.
1.5. Images you ask us to translate
When you actively use the image translation feature, the necessary image data is sent to Vistra's systems and to the AI services needed to recognise text, locate that text, translate the content, and produce the data needed to display the translation.
Vistra does not retain original images long-term after processing completes. External AI services may process or temporarily store data under their own policies and security mechanisms.
Vistra may store some processing results, such as recognised text, translations, text positions or bounding regions, and technical identifiers that let us recognise content already processed. This information may be reused when the same content is submitted again, in order to reduce waiting time and avoid repeating AI processing.
Vistra does not use your content to train its own AI models.
1.6. Search
When you type a keyword into the search feature, that keyword may be sent to the search systems needed to return results to you. Vistra sends only the information needed to carry out the search request.
When you open a website from a search result, that website may have its own privacy policy and its own way of handling data.
1.7. Autofill
Information you actively save for the autofill feature — such as addresses, sign-in details or card details — is stored on your device and protected by Android's security mechanisms.
This autofill data is not synced to Vistra's servers. Vistra does not store card CVV/CVC security codes.
1.8. Feedback and support
When you send feedback, report a bug or request support, we may receive the type of issue, the text you enter, your account email, the relevant web address if needed, the technical information needed to identify the fault, and anything you choose to attach.
This data is used to handle the issue, reply to users, fix bugs and improve the Service.
1.9. Payments
Vistra does not directly receive or store full bank card numbers, CVV/CVC codes, banking passwords, or banking sign-in details. Payment information is handled by the payment platform you choose.
Vistra's servers receive only the information needed to verify a transaction and grant the correct entitlement, such as the product or package purchased, the transaction id, the transaction status, the account receiving credits, and the corresponding credits or entitlements.
Each transaction happens when you actively confirm a purchase. Vistra does not automatically make a new transaction merely because you have bought credits before.
1.10. Advertising
Vistra may display advertising. Advertising services may process some technical device data or ad interaction information in order to display, measure and protect the advertising system.
Vistra does not sell your personal data to advertisers.
1.11. Device identifiers used to prevent offer abuse
For certain credit-gift or promotional programmes, Vistra may use an identifier provided by Android to limit the same device from claiming a reward repeatedly through multiple accounts.
Vistra does not store the raw identifier in the reward ledger. Before storage, the identifier is converted into a protected value using HMAC-SHA256, used only to determine whether that device has already claimed the corresponding reward.
This value is not used to display advertising, not used to track browsing history, not sold to third parties, not attached to ordinary translation requests, and not used to build an interest profile of the user.
1.12. Technical and security data
When the App connects to the server, some technical information may be processed, such as IP address, request time, app version, operating system, error information, and the information needed to detect abnormal or fraudulent behaviour.
This data is used to operate the system, handle faults, protect accounts and prevent abuse.
2. Device permissions
Vistra uses device permissions only where a feature of the App needs them to work.
Depending on the app version, these permissions may be used for purposes such as connecting to the Internet, checking network state, making payments, displaying advertising, and completing some in-flight tasks. Some permissions may be added automatically by technical libraries used in the App.
If in future Vistra adds a feature that needs a new permission or access to a new kind of data, we will update this information and ask for your permission where the law or the operating system requires it.
3. What we use data for
Data is processed in order to sign you in and manage your account, provide browser functionality, sync history when you use that feature, translate text and images, run searches, manage credits, verify transactions, display advertising, run promotional programmes, support users, detect fraud and abuse, protect accounts and systems, find and fix bugs, and meet legal obligations where necessary.
We do not use data for a new purpose incompatible with the purposes already notified, where the law requires prior notice or consent.
4. When we process data
Depending on the feature, data may be processed when you actively use a function such as signing in, translating or searching; where necessary to carry out a transaction or provide a Service you requested; where you consent to the processing under the law; where necessary to protect an account or the system; where necessary to prevent fraud; or where necessary to meet a legal obligation.
If a processing activity needs your separate consent, Vistra will provide the necessary information before asking for that consent.
5. Sharing data
Vistra does not sell your personal data.
Some data may be transferred to external services where necessary for a function to work, such as sign-in, payment processing, AI processing, search, advertising, storage and server operation, and system security.
We try to send only the amount of data the corresponding function needs. External services may have their own privacy policies and their own retention periods.
Data may also be provided to competent authorities where Vistra is legally obliged to do so.
6. Processing by artificial intelligence
Some Vistra features use external AI systems to process content you actively ask to have translated. The necessary content may be transmitted to an AI service to carry out the request.
Vistra does not proactively use user content to train AI models.
AI services may process or store data for a period for operational, security, anti-abuse or legal-compliance purposes under their own policies.
If the way Vistra uses AI changes materially and affects your personal data, this Policy will be updated as necessary.
7. Processing outside Vietnam
Some technical services Vistra uses may run systems or servers outside Vietnam. As a result, when you use certain Vistra features, the necessary data may be processed in another country — for example when signing in, paying, translating with AI, searching, advertising, or storing and operating the system.
Vistra carries out such processing and transfers in accordance with the applicable legal requirements within its area of responsibility.
8. Retention
Vistra keeps data only as long as necessary for the purpose or as required by law. At present:
- Account information: kept while the account is active and for the period needed to complete deletion or meet legal obligations.
- Synced browsing history: at most the 200 most recent entries, each deleted automatically after 3 days.
- Original images used for translation: not retained long-term after processing completes.
- Content processing results: kept for the period needed to reuse results, improve speed and reduce repeated processing.
- Feedback and support: kept for the period needed to handle the request.
- Transaction information: kept for the period needed for reconciliation, accounting, dispute resolution, fraud prevention or legal obligations.
- Offer anti-abuse information: kept for the period needed to enforce a programme's limits.
- Technical and security logs: kept for the period needed to operate, protect and troubleshoot.
When data is no longer necessary and there is no longer a lawful reason to keep it, Vistra will delete or otherwise handle it under the applicable rules.
9. Deleting your account and data
You can request deletion of your Vistra account inside the App: Settings → Account → Delete account, or by following the instructions at Delete account.
Once deletion completes, the data tied directly to the active account — profile information, Vistra sign-in information, synced browsing history — is removed from the live system.
Some data may be retained where necessary for accounting, transaction verification, fraud prevention, dispute resolution, system protection or legal obligations. Such data is not used to keep operating the deleted account as an active account.
Translation results stored against content to support reprocessing may continue to exist for the necessary retention period if they are no longer tied directly to the deleted account.
Remaining credits can no longer be used once the account is deleted, unless the law or the Payment Policy provides otherwise.
10. Your rights over personal data
Depending on the case and applicable law, you may ask what data of yours is being processed, view or receive information about your data, correct inaccurate information, delete data, withdraw consent for consent-based activities, restrict or object to certain processing where the law allows, or exercise other rights provided by law.
Some data may need to be retained where the law requires it or where it is necessary to handle a transaction, dispute or fraud.
To protect the account, Vistra may ask you to verify your identity before carrying out certain data-related requests. You can contact us at the email at the end of this Policy.
11. Children's privacy
Vistra is not designed to knowingly collect children's personal data contrary to the law.
If a user is of an age that requires parental or guardian consent or supervision under applicable law, use and data processing must follow those requirements.
If Vistra discovers that children's data has been collected inappropriately, we will take the necessary measures, including restricting or deleting the data where appropriate.
Parents or guardians can contact us if they believe children's data is being handled incorrectly.
12. Security
Vistra uses reasonable technical and organisational measures to protect data in the systems we control, including encrypting the connection between the App and the server, protecting sign-in information, access control, authentication, fraud and abuse prevention, monitoring and handling security incidents, and updating and patching systems.
However, no storage or transmission system can guarantee absolute security.
If a personal data incident occurs, Vistra will take the necessary measures and notify users or competent authorities where the law requires.
13. Third-party websites
Vistra is a browser and lets you access websites that do not belong to Vistra.
When you open a website, that website may itself process data such as cookies, IP address, device information, your activity on the site, and the data you enter there. That processing is the responsibility of the website concerned and is governed by its own privacy policy.
A website being opened through Vistra does not mean Vistra controls how that website handles data.
14. Changes to this Policy
We may update this Policy when the App changes, when there are new features, when data handling changes, when security requirements change, or when the law or platform policies change.
The latest effective date is shown at the top of the Policy. If there is a material change that significantly affects how personal data is processed, Vistra will give notice by an appropriate means.
If a new use of data requires your consent under the law, Vistra will ask for that consent before proceeding.
15. Contact
If you have a question, a data deletion request or a privacy concern, please contact: visiontranslate2026@gmail.com.