Your data stays tied to the service you asked for.

1. Who controls your data

2. Data we collect

The exact data depends on the product and features you use. It may include:

• Account and contact data: name, email address, phone number, sign-in identifiers and account settings.
• Content you provide: messages, support requests, files, photos, preferences and other information you choose to submit.
• Service and transaction data: orders, allowances, subscriptions, receipts, account balance activity and service history. Payment providers process full card or bank credentials when applicable.
• Device and usage data: app version, device type, operating system, language, IP address, crash reports and security logs.
• Sensitive or regulated data: identity, health or medical information only where a specific service requires it and after the relevant notice or consent.

3. Why we use data

• Provide the account, feature, transaction or service you request.
• Authenticate users, prevent fraud and keep services secure.
• Provide customer support and important service notices.
• Maintain records required by tax, accounting, healthcare or other applicable laws.
• Diagnose faults and improve product reliability.
• Send marketing only where permitted and with an available opt-out.

We do not sell personal data. We do not use health data for advertising.

4. When data is shared

We share only what is necessary with:

• Infrastructure, authentication, communications, analytics and payment providers working for us under contract.
• Licensed practitioners, clinics, merchants or other service partners when needed to complete a service you request.
• Authorities or professional advisers when required by law, regulation or a valid legal process.
• A successor organization if a product or business is reorganized, sold or transferred, subject to applicable law.

Third parties must protect personal data to standards consistent with this policy and applicable law.

5. Retention and deletion

We keep personal data only while it is needed for the stated purpose, an active account, dispute prevention or a legal recordkeeping duty. When data is no longer required, we delete or de-identify it. Some transaction, tax, fraud-prevention or regulated healthcare records may need to be retained after an account is deleted.

See Privacy Choices and Account Deletion to make a request.

6. Your choices and rights

Subject to applicable law, including Thailand's Personal Data Protection Act, you may ask to access, correct, export, restrict, object to or delete personal data, or withdraw consent. Withdrawing consent does not affect processing already completed lawfully.

You can also manage optional device permissions in iOS Settings and marketing preferences through the unsubscribe method provided.

7. Security and international processing

We use administrative, technical and organizational safeguards appropriate to the data and service. No system is completely secure. Where providers process data outside Thailand, we use safeguards required by applicable law.

8. Children

Our services are not directed to children unless a product expressly says otherwise and provides suitable protections. Age-restricted or regulated services are available only to legally eligible adults.

9. Changes and contact

We will update the effective date when this policy materially changes and provide additional notice where required.

Privacy questions or requests: reach@fgc.co.th.