Privacy Policy
1. Introduction
Lương y Phạm Xuân Kim – Y Đạo Trị Gốc ("we," "our," or "us") is a traditional medicine practice and health education initiative led by Lương y Phạm Xuân Kim, focusing on traditional Oriental medicine, holistic wellness, healthy lifestyle habits, and balanced living.
The associated Google Cloud project and API integrations are owned directly under Lương y Phạm Xuân Kim's Google account. Technical configuration, infrastructure maintenance, and media automation operations are conducted with authorization by our technical partner, Next Tutor.
This Privacy Policy explains how our application accesses, uses, stores, and protects data when interacting with Google services (specifically YouTube Data API v3). By using our application or visiting our website (https://kimlongduong.nexttutor.io.vn), you acknowledge the practices described in this policy.
2. Information We Collect
Depending on the features you use and the authorizations you grant, we may process the following categories of information:
A. Information You Provide Voluntarily
When you contact us by email or submit inquiries, we collect your name, email address, message contents, and any communication logs needed to answer your request. Please do not submit confidential medical records, diagnostic lab tests, or sensitive health data via unencrypted email.
B. Google Account and Google API Data
When an authorized channel administrator connects a Google Account to our application, we request access strictly to authorized resources necessary for the application's stated publishing functionality:
- OAuth Scope Requested:
https://www.googleapis.com/auth/youtube.upload - Data Accessed: Upload tokens and video metadata (video title, description, category, tags, and publishing status) solely for the authorized Kim Long Đường YouTube channel.
- Non-Access Guarantee: We do not request access to, read, or process private emails (Gmail), Google Drive documents outside designated media assets, user contacts, or private user watch history.
C. Technical Information
When you browse our static website, standard non-personally identifiable technical information (such as browser type, operating system, referrer URL, and basic HTTP access logs) may be processed by our static hosting infrastructure (Cloudflare Pages) to ensure platform security and availability.
3. How We Use Information
We use information strictly for legitimate and disclosed operational purposes:
- Operating and maintaining our website and digital tools.
- Publishing authorized educational videos and metadata to the designated YouTube channel.
- Responding to user inquiries, technical feedback, and support requests.
- Maintaining technical security, preventing abuse, and troubleshooting errors.
- Complying with applicable legal obligations.
Kim Long Đường's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, our application complies with the following mandated Limited Use principles:
- We only use access to Google APIs to provide or improve user-facing features that are prominent in the requesting application's user interface.
- Transfers of data are not allowed, except: to provide or improve appropriate access or user-facing features that are visible and prominent in the requesting application's user interface with user consent; for security purposes (such as investigating abuse); to comply with applicable laws; or as part of a merger or acquisition with explicit prior consent.
- We do not sell Google user data to third parties, advertising platforms, data brokers, or any information resellers.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not use Google user data to train, fine-tune, or develop generalized artificial intelligence (AI) or machine learning (ML) models.
- We do not allow humans to read user data unless we have obtained your affirmative agreement to view specific messages, files, or other data, it is necessary for security purposes (such as investigating a bug or abuse), or to comply with applicable law.
In addition, as an application integrating with YouTube API Services, our privacy practices also reference and comply with the Google Privacy Policy.
5. Data Storage, Token Retention, and Security
Our handling of OAuth tokens and operational data is governed strictly by the following policies:
- No External Sharing: OAuth credentials, access tokens, and refresh tokens are strictly kept internal and are never shared, transferred, or sold to any external third party.
- Secure Private Storage: All OAuth tokens and secrets are stored securely within our private automation environment. They are never exposed publicly or checked into source code repositories.
- Immediate Deletion on Revocation or Request: Stored OAuth tokens are deleted immediately upon receiving a user deletion request, or immediately when authorization is revoked by the user through Google Account Security Settings.
6. Data Sharing
We do not sell, rent, trade, or share Google user data or personal contact information with third parties. Data is never shared externally except when strictly required by enforceable legal process, court subpoena, or applicable law.
7. User Control, Revocation, and Data Deletion
Users and authorized administrators have continuous, immediate control over their authorizations and data:
- Revoking Permissions: You can revoke the application's access at any time through your Google Account permissions page at https://myaccount.google.com/permissions. Upon revocation, our access to your Google account is immediately terminated and existing tokens become invalid.
- Requesting Immediate Data Deletion: You may request immediate deletion of any stored contact details, credentials, or operational logs by emailing phamxuankim1954hy@gmail.com with the subject line "Data Deletion Request". All associated tokens and records will be deleted immediately upon receipt.
8. Health Information Disclaimer
All health and wellness content shared across our website, publications, and YouTube videos is strictly educational. It is not clinical advice, medical diagnosis, or a personalized treatment plan. Always consult a qualified, licensed medical physician regarding personal medical conditions or urgent symptoms.
9. Children's Privacy
Our services are not directed to children under 13 years of age (or under 16 where required by regional law). We do not knowingly collect personal data from children.
10. Contact Us
For inquiries regarding this Privacy Policy, your data rights, or our technical operations, please contact:
- Brand: Lương y Phạm Xuân Kim – Y Đạo Trị Gốc (Kim Long Đường)
- Google Cloud Project Owner: Lương y Phạm Xuân Kim
- Official Contact Email: phamxuankim1954hy@gmail.com
- Authorized Technical Operator: Next Tutor (kimlongduong.nexttutor.io.vn)