Privacy Policy — GastroDnevnik

1. Controller and scope

The data controller is Индивидуальный предприниматель Чаплыгин Артем Эдуардович (Individual Entrepreneur Chaplygin Artem Eduardovich).

This Policy applies to the GastroDnevnik Android application with package identifier ru.gastrodnevnik.app and describes processing performed when the Application is used.

TIN (INN): 463252089851
Primary State Registration Number (OGRNIP): 326460000030126
Email: support@gastrodnevnik.ru
Website: https://gastrodnevnik.ru

2. Local storage

The Application does not require registration or create an account on the Controller’s servers. Core diary data is processed locally on the device. The Controller does not receive it on its own server and has no remote access to it.

A user may export data, generate a report, or share a file through the Android system share menu. Further processing is governed by the selected recipient’s terms and privacy policy.

3. Data used by the Application

profile information, including name, date of birth, gender, language, height, weight, allergens, diseases, and settings;
diary entries concerning food, bowel movements, sleep, mood, stress, medication, body measurements, symptoms, activity, and notes;
ration items, product and dish names and composition, and user-selected photographs;
medication schedules, reminders, and notification settings;
generated reports, import files, and export files;
local record identifiers, report credits, and Application settings;
PIN-verification data and the biometric-unlock setting. Biometric templates remain within Android;
email address, message text, and attachments voluntarily sent to support.

4. Advertising

The Application uses Yandex Mobile Ads SDK for banner, native, and rewarded advertisements.

After the user chooses advertising settings, the SDK may provide Yandex LLC with the Android advertising identifier, other device identifiers, IP address, and technical information required to load, display, and measure advertisements.

Diary content, health, medication and nutrition information, photographs, notes, and report contents are not included in advertising requests. The Application does not grant the advertising SDK location access.

If personalization is allowed, a device identifier may be used to select advertisements. If non-personalized advertising is selected, limited technical information may still be processed to display and measure advertisements. Preferences can be changed under “Profile → Privacy and data.”

5. Device permissions and services

Declining a permission affects only the related feature. The Application does not request location, contacts, microphone, or health data held by other applications. Reminder text may appear on the Android lock screen depending on the user’s system settings.

camera and the system photo picker to add a dish image;
notifications and exact alarms for reminders selected by the user;
Android biometric authentication to unlock the Application;
network access and the Android advertising identifier to load and measure advertisements.

6. Purposes, legal grounds, and recipients

Data is used to provide diary, ration, analytics, reminder, report, import, and export features, store choices, protect access, display advertisements, and answer support requests.

Processing is based, as applicable, on user actions, performance of the Terms, consent, legal obligations, and other grounds permitted by applicable law. Where consent is required, it is requested separately from acceptance of the Terms.

The Controller does not sell or disclose diary data to advertising networks.

Yandex LLC and its advertising partners may receive advertising identifiers and technical data;
the Controller’s email provider receives information voluntarily sent to support;
a user-selected application receives an exported file or report;
Android and application stores process information about their services under their own policies.

7. Retention, deletion, and backups

Local data remains until the user deletes it, clears Application storage, or uninstalls the Application. To remove data from accessible Application storage, the user can clear the Application’s data in Android settings.

Deletion does not affect copies previously exported or shared. Temporary files and system backups may remain according to Android, device, and system-account settings.

Support correspondence is retained only as long as necessary to answer the request, resolve disputes, and comply with law. Yandex determines the retention of advertising data under its policy.

8. Security

The Controller applies reasonable technical and organizational measures. Local PIN-verification data is held in protected device storage, and the PIN is not stored in plain text. Advertising SDK traffic is transmitted over an encrypted connection.

The Application PIN restricts access through the interface but does not replace Android device security and encryption. Users should protect their devices and carefully select recipients for exported files.

9. User rights

Subject to applicable law, users may request information about data available to the Controller, correction, restriction, deletion, withdrawal of consent, or lodge a complaint with a competent authority.

Most information exists only on the device. The Controller cannot remotely view, restore, or delete it. Requests may be sent to support@gastrodnevnik.ru; reasonable identity verification may be required.

10. Age

On Google Play, the Application is distributed to a target audience aged 18 and over. Availability through other stores is determined by the rules and content rating of the relevant store.

If a user has not reached the age at which they may independently provide consent required by law, the Application should be used with the consent of a parent or legal guardian. Questions about a minor’s data may be sent to support@gastrodnevnik.ru.

11. Website

At publication, gastrodnevnik.ru does not use registration forms, advertising cookies, or analytics cookies. The hosting provider may process standard request logs, including IP address, request time, and browser information, to secure and deliver the website.

12. Changes and language

This Policy may be updated when processing practices change. The current Russian version is available at https://gastrodnevnik.ru/privacy/ and the English version at https://gastrodnevnik.ru/en/privacy/.

If the language versions conflict, the Russian version prevails unless mandatory applicable law requires otherwise.