Privacy Policy for the Zabota App

Effective date: January 1, 2025

Last updated: October 27, 2026

1. General Provisions

This Privacy Policy (hereinafter referred to as the "Policy") defines the procedure for collecting, storing, processing, using, and protecting personal data of users of the Zabota mobile application (hereinafter referred to as the "App").

The personal data controller is an individual entrepreneur (hereinafter referred to as the "Operator"), TIN (INN) 771385639022. The Operator processes personal data in accordance with Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" and other regulatory legal acts of the Russian Federation.

By using the App and registering an account, you confirm that you have read this Policy and consent to the processing of your personal data under the conditions set forth herein.

2. Data We Collect

In the course of using the App, we collect the following categories of personal data:

• Registration data: first name, last name, email address, phone number.
• Geolocation data: GPS coordinates of the loved one's device, collected in the background to provide the location monitoring feature.
• Device data: device model, operating system version, unique device identifier, OneSignal Player ID for delivering push notifications, device advertising identifier (IDFA on iOS — only with your permission, Google Advertising ID on Android).
• Usage data: activity log (check-ins, incidents, actions within the App), date and time of interactions.
• Payment data: subscription information, transaction history. Full bank card details are not stored on the Operator's servers — they are processed by the payment provider CloudPayments.

3. Purposes of Data Processing

We process your personal data for the following purposes:

• Monitoring loved ones: displaying the locations of loved ones on the map, processing check-ins and incidents to ensure the safety of elderly relatives.
• Push notifications: sending notifications about events related to loved ones (missed check-ins, incidents, notifications from the operator call center) via the OneSignal service.
• Incident handling: recording and transmitting incident information to call center operators for timely response.
• Billing: managing subscriptions, processing payments, issuing invoices.
• Service improvement: analyzing anonymized usage data to improve the quality and reliability of the services provided.
• Analytics and ad measurement: identifying the ad campaign that led to the App install and counting target actions (sign-up, subscription) via the AppMetrica service.

4. Legal Basis for Processing

The processing of personal data is carried out on the following legal grounds:

• User consent: by registering in the App, you provide explicit consent to the processing of your personal data. Consent may be withdrawn at any time through the App settings.
• Contract performance: data processing is necessary to provide services under the user agreement (subscription management, monitoring of loved ones).
• Legitimate interests of the Operator: ensuring the security of the App, preventing fraud, improving the quality of services.

5. Data Storage and Security

Personal data is stored on secure servers with encryption applied. All data is transmitted through secure communication channels using TLS/SSL protocols.

We apply the following security measures:

• Encryption of data in transit and at rest.
• Access control for the Operator's personnel regarding personal data.
• Regular backups and security system audits.

Retention periods:

• Geolocation data is retained for 90 days from the date of collection, after which it is automatically deleted.
• Account data is deleted within 30 days after the user deletes their account.
• Payment data is retained in accordance with the requirements of Russian Federation legislation on accounting.

6. Disclosure to Third Parties

We share personal data with third parties only in the following cases:

• OneSignal: OneSignal Inc. is used for delivering push notifications. The device identifier (Player ID), language settings, and notification metadata are shared. OneSignal Privacy Policy: https://onesignal.com/privacy_policy.
• AppMetrica (YANDEX LLC): mobile analytics service. Technical device data, the advertising identifier (IDFA — only if you allow it in the iOS system prompt, Google Advertising ID), an internal user identifier, in-app events and crash reports are shared. The data is used for statistics and for measuring Yandex Direct ad performance and is processed on servers in the Russian Federation. Yandex Privacy Policy: https://yandex.com/legal/confidential/.
• CloudPayments: the payment provider that processes transactions. Data necessary for processing payments (amount, user identifier) is shared. Full card details are processed directly by the providers and do not pass through the Operator's servers.
• Legal requirements: we may disclose personal data at the request of authorized government bodies in cases and in the manner prescribed by the current legislation of the Russian Federation.

We do not sell personal data. Your name, phone number, email address and location data are not shared with AppMetrica or advertising services.

You can opt out of the advertising identifier: on iOS in Settings → Privacy & Security → Tracking, on Android in Settings → Google → Ads.

7. User Rights

You have the following rights regarding your personal data:

• Right of access: you may request information about what data we store about you.
• Right to rectification: you may update or correct your data through the profile settings in the App.
• Right to erasure: you may delete your account and all associated data through the "Settings" section of the App. Deletion will be completed within 30 days.
• Right to withdraw consent: you may withdraw your consent to the processing of personal data at any time, which will result in the termination of the App's services.
• Right to data portability: you may request an export of your data in a machine-readable format by contacting our support team.

8. Cookies

The Zabota mobile application does not use cookies. The App uses the AppMetrica SDK for analytics and ad measurement (see section 6).

The App's website (landing page) may use technical cookies necessary for the proper functioning of the site. These cookies are not used for user tracking or targeted advertising.

9. Age Restrictions

The Zabota App is intended for persons who have reached the age of 18. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been provided by a person under 18, we will take steps to delete such data.

10. Changes to the Policy

The Operator reserves the right to make changes to this Policy. Users will be notified of significant changes at least 14 days before the changes take effect via push notification and/or a message to the email address provided during registration.

Continued use of the App after the changes take effect constitutes your acceptance of the updated Policy.

11. Contact Information

For all questions related to the processing of personal data, you may contact us at:

• Email: support@zabota.app

Operator: Individual Entrepreneur, TIN (INN) 771385639022.