This document is the policy on the processing of personal data required by Article 18.1 of Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data". It describes what data the Voone service collects, why, on what legal basis, how long it is kept, who it is shared with and how to have it deleted.
In short: almost everything you do in the app stays on your device. Only what the account, the community, syncing and payment cannot work without goes to the server. We do not sell data, we show no ads and we do not track you across other apps and sites.
This is a translation for convenience. The Russian text at voone.ru/legal/privacy prevails.
1. The operator
The operator of personal data is:
Operator: Andrey Sergeevich Sokolov, self-employed individual under the Russian professional income tax regime
Taxpayer number (INN): 616804568492
Postal address: 344049, Rostov Region, Rostov-on-Don, Eremenko street 93, flat 117, Russia
Email: hello@voone.ru
Website: voone.ru
The operator alone decides the purposes and the composition of the data processed and is answerable for them. There is no separate data protection officer: the operator is an individual and performs these duties personally.
2. Principles
The operator processes data lawfully and fairly, only for the stated purposes, in the volume those purposes require, and no longer than needed. Data collected for one purpose is not used for another that is incompatible with it. Anonymised figures and statistics are not personal data.
The operator does not process special categories of personal data (race, ethnicity, political views, religion, health, sex life) or biometric personal data. A profile photo illustrates the member card and is not used to identify anyone biometrically.
3. What data is processed
3.1. Account data
| Data | Why |
|---|---|
| Email address | signing in, account security messages, activation code |
| Password, as an irreversible hash | signing in with a password on the web; the password itself is unknown to the operator |
| One-time sign-in codes | signing in with a code from an email |
| Name, city, "about", profile photo, experience and certificates | your member card in the community |
| Device identifier, platform, app version, language | signing in, account recovery, diagnostics |
| Push notification token | delivering notifications, if you turned them on |
3.2. Service data
| Data | Why |
|---|---|
| Messages and their attachments | delivery to the recipient |
| Clubs, training events and sign-ups | the community sections |
| Boats, trips and tracks — when syncing is on | access to the logbook from another device |
| Position on the map — if you turned it on | the member map; details in the Location Data document |
| Questions to the assistant and its answers | running the assistant, counting the daily allowance, handling complaints about quality |
| Reports about members and the material of their review | moderation |
3.3. Payment data
| Data | Why |
|---|---|
| Email address, amount, date, payment status, order number | performing the contract, issuing the activation code, tax and accounting records |
| Activation code and the note that it was applied | proof of the access paid for |
The operator never receives or stores bank card details: they are entered on the side of the Robokassa payment service.
3.4. Website data
When you visit voone.ru, the web server logs your IP address, browser type and language, the page requested and the date and time. Your chosen language and the web-app mode are stored in the browser's local storage. If website analytics counters (Yandex Metrica, Google Analytics) are enabled, they receive anonymised information about page visits; they can be blocked with browser settings.
3.5. What never leaves the device
Without an account and without syncing turned on, the following is not sent to the server:
the logbook: trips, tracks, notes, engine hours;
handover and return checklists and their photos;
photos of documents (certificates, licences, insurance);
learning progress: finished lessons, test results, the lights trainer;
settings, language, units, chosen goals.
Deleting the app deletes this data with it.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating an account and signing in | Article 6(1)(5) of Law 152-FZ — performance of a contract |
| Payment, issuing the activation code, support | Article 6(1)(5) — performance of a contract; the Law on Consumer Rights Protection |
| Tax records and keeping details of settlements | Article 6(1)(2) — compliance with a legal obligation |
| Member card, messages, clubs, training events, the member map | Article 6(1)(1) — your consent |
| Assistant answers and the request allowance | Article 6(1)(1) — your consent |
| Push notifications | Article 6(1)(1) — your consent |
| Security of the service, protection against brute force and abuse, handling reports | Article 6(1)(7) — the legitimate interests of the operator and of other users |
Data needed to conclude and perform the contract is processed without separate consent. For the other purposes, consent is given with a tick box at registration; the text of the consent is a separate document published at voone.ru/legal/consent and included in the app.
5. How data is processed
Processing is mixed — automated and non-automated. The actions performed are: collection, recording, systematisation, accumulation, storage, updating, retrieval, use, transfer (provision, access), blocking, deletion and destruction.
The operator makes no decisions producing legal effects solely by automated processing.
Databases containing the personal data of citizens of the Russian Federation are hosted on a server in the Russian Federation (REG.RU hosting, Moscow), as required by Article 18(5) of Law 152-FZ.
6. Who data is shared with
Data is shared only with those the service cannot work without, and only in the volume their task requires. Each of them processes it on the operator's instruction under Article 6(3) of Law 152-FZ.
| Who | What is shared | Why |
|---|---|---|
| Robokassa (payment service) | email address, amount and order number | taking the payment |
| Hosting provider (REG.RU, Russia) | all server data as part of hosting | running the server and the database |
| Email delivery provider | address and the text of the message | sign-in codes, activation codes, notifications |
| Anthropic (USA) | the text of your question to the assistant and, for "What is this?", the photo | the language model's answer |
| Apple, Google (USA) | the device token and the notification text | delivering push notifications |
| Open-Meteo (Germany) | the coordinates of a point, without a name or identifier | weather forecast and the nearest place name |
| Yandex, Google — if counters are enabled | anonymised information about page visits | website statistics |
Other members of the service see only what you publish yourself: name, city, "about", profile photo, experience, your messages, your membership in clubs and events, and — if you turned the map on — your point at the precision you chose.
Data may be disclosed to state authorities on a reasoned request in the manner set by law.
The operator does not sell personal data, does not pass it to advertisers or data brokers, does not use it for targeted advertising and does not track users across other apps and sites.
7. Cross-border transfer
Some recipients are outside the Russian Federation: Anthropic, Apple and Google are in the USA, Open-Meteo is in Germany.
The USA is not a party to the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data and is not on the list of countries providing adequate protection. Transfer to such countries requires the subject's consent (Article 12(4)(1) of Law 152-FZ) — which is why cross-border transfer is set out in a section of its own in the consent text you confirm at registration.
Germany is a party to the Convention, so transfer to it takes place on general grounds. Open-Meteo receives only the coordinates of a point — no name, email or account identifier.
You can opt out of cross-border transfer: do not use the assistant and object recognition, turn notifications off in the settings, or write to hello@voone.ru. Those sections will then stop working and the rest of the service will carry on.
8. Retention periods
| Data | Period |
|---|---|
| Account, profile, messages, clubs, training events | while the account exists |
| One-time sign-in codes | up to 10 minutes |
| Log of assistant requests | 90 days |
| Server technical logs | 30 days |
| Material from handling reports | up to 1 year after the case is closed |
| Records of settlements and receipts issued | 4 years — the period set by tax law |
| Backups | 14 days |
When the period expires, the data is destroyed. Data is also destroyed when the purpose is achieved, when consent is withdrawn and when the account is deleted — within thirty days at most. Destruction is recorded in a certificate kept by the operator.
9. Your rights
Under Articles 14, 20 and 21 of Law 152-FZ you may:
obtain confirmation that processing takes place and information about its legal basis, purposes, methods, periods and the parties data has been shared with;
see your data and receive a copy of it;
have incomplete, outdated or inaccurate data corrected;
have data blocked or destroyed if it is processed unlawfully or is no longer needed for the stated purpose;
withdraw your consent;
object to processing based on legitimate interests;
complain about the operator to Roskomnadzor or in court.
Some of these rights work straight from the app: the profile is edited under Profile, permissions for location, camera, gallery and notifications are revoked in the device settings, and the account is deleted in one step.
10. How to contact the operator
Send your request to hello@voone.ru from the email address the account is registered to, or by post to the address for correspondence.
The request should state what identifies you (the account address), what you ask for and, for a paper request, your signature. No other documents are required.
The reply time is ten business days from receipt. It may be extended by no more than five business days, with notice of the reason.
If the operator refuses a request, the refusal will be reasoned and cite the relevant provision of law.
11. Deletion and withdrawal of consent
The account can be deleted in the app — Profile → Delete account — or by writing to hello@voone.ru. The procedure, what is deleted and the timing are described in the Account Deletion document.
Consent is withdrawn by writing to hello@voone.ru with the subject "Withdrawal of consent". The operator then stops processing that rested on consent and destroys such data within thirty days at most.
Withdrawal does not stop processing on other bases: records of settlements are kept for as long as tax law requires, and data needed to perform the contract is kept until the contract ends. The community sections cannot be used after withdrawal: without processing this data they do not work.
12. Security
The connection to the server is encrypted with HTTPS. The sign-in token is kept in the device's secure storage: Keychain on iOS, Keystore on Android. The password is stored on the server only as an irreversible hash and cannot be recovered. Server access is limited to keys, administrator actions are logged and backups are encrypted.
Complete protection does not exist. If the operator learns of an unlawful disclosure of personal data, Roskomnadzor will be notified within the periods set by Article 21(3.1) of Law 152-FZ and the affected users will be informed. If you notice anything suspicious, write to hello@voone.ru.
13. Children
The service is not intended for children under sixteen and their data is not collected deliberately. For a person under fourteen, consent is given by their legal representative. If a child's data has reached the operator, write in and it will be deleted.
14. Changes to this policy
A new version is published at voone.ru/legal/privacy and in the app with its date. Material changes are announced in advance by email or in the app. Continuing to use the service after a new version takes effect means accepting it; if you do not accept it, you may withdraw your consent and delete your account.
15. Contacts
Questions, data requests and complaints: hello@voone.ru. We reply within a working week, and within ten business days for requests under Article 14 of Law 152-FZ.
The supervisory authority is Roskomnadzor, the Russian federal service for supervision of communications, information technology and mass media.