2. Terms, Definitions, and Abbreviations

2.1 The following terms and definitions are used in this document:

1. Mobile Application – Software designed to run on smartphones, tablets, and other mobile devices, developed for a specific platform (iOS, Android);
2. Personal Data – A combination of personal information and/or anonymized data about the User, provided by the User to, or automatically collected by, the Right Holder and/or third parties;
3. User – A person who has installed the mobile application on a mobile device and/or activated such an application;
4. Right Holder – KRIT LLC, the entity that holds the exclusive rights to the intellectual property of the mobile application;
5. Cookies – Small files that a mobile application or website stores on the User’s smartphone, tablet, or other device to enhance functionality and improve content quality.

2.2 The following abbreviations and terms are used throughout this document:

1. Policy – This Mobile Application Privacy Policy;
2. Right Holder – KRIT LLC.

3. General Provisions

3.1 By installing and/or activating the mobile application, the User agrees to the terms of this Policy and provides their consent to the Right Holder for the collection, processing, retention, and storage of personal data in accordance with the procedures and conditions outlined herein.

3.2 If the User does not agree with the terms of this Policy and/or does not understand specific provisions of the Policy, they must immediately cease using the mobile application.

4. User Rights

4.1 To obtain from the Right Holder information related to the processing of their personal data (the legal basis and purposes of such processing, methods used, details of individuals who have access to the data or to whom it may be disclosed under contract or applicable law).

4.2 To request information from the Right Holder regarding the location of personal data processing and storage.

4.3 To receive information from the Right Holder about the retention periods of personal data.

4.4 To be informed by the Right Holder about any actual or intended cross-border transfer of personal data.

4.5 To demand compensation for damages and/or moral harm through legal proceedings in the event of violations of the User’s rights to the protection of their personal data by the Right Holder.

4.6 To exercise any other rights related to the protection of personal data as provided by applicable law or the provisions of this Policy.

5. List of Collected Personal Data

5.1 The Right Holder collects the following personal data:

• click statistics, traffic data, logs, and other usage-related metrics;
• Device information (identification number, mobile network provider), operating system, platform, browser type and other browser-related data, IP address.

• Full name (last name, first name, patronymic);
• Email address;
• Mobile phone number;
• Place of employment (organization, city, department);
• Job title;
• Photo.

5.2 The User is solely responsible for the accuracy and completeness of the personal data they provide and is obligated to update (verify, correct, revise) this data on a regular basis.

5.3 The Right Holder assumes that all personal data provided by the User is accurate and that the User maintains the information in an up-to-date state.

5.4 The mobile application does not use cookies to store IP addresses, user preferences, or device type information.

6. Purposes of Collecting and Processing Personal Data

6.1 Personal data is collected for the following purposes:

• To ensure the stable and proper operation of the mobile application, improve its performance, optimize its content, and enhance its internal structure and functionality;
• To identify the User;
• To comply with applicable legal requirements;
• To provide technical support for the mobile application, identify and fix technical issues;
• To maintain communication with the User;
• To fulfill other obligations of the Right Holder toward the User;
• For any additional purposes, subject to the User’s separate and explicit consent.

6.2 Personal data may be processed in the following cases:

• Upon obtaining the User’s consent;
• In order to achieve the Right Holder’s purposes as required by applicable law;
• To fulfill other obligations of the Right Holder to the User, including but not limited to providing specific content;
• In emergency situations where the User’s life or health is at risk and it is not possible to obtain their prior consent for the processing of personal data.

6.3 In the event that personal data is anonymized in such a way that it no longer allows the User to be identified directly or indirectly, further use and disclosure of such data to third parties is permitted, and the provisions of this Policy shall no longer apply to such data.

6.4 The Right Holder undertakes all possible measures to ensure the confidentiality of the collected personal data, except where the User has voluntarily made such data publicly available.

6.5 Personal data is processed both with and without the use of automated tools.

7. Access of Third Parties to Personal Data

7.1 The Right Holder is entitled to disclose personal data to:

• Its affiliated companies, branches, and representative offices established within the Russian Federation;
• Legal successors of the Right Holder, as a result of its liquidation, merger, reorganization, or bankruptcy, and who have acquired exclusive rights to the mobile application;
• Third parties, if the User has given consent to such disclosure, transfer, or processing of their personal data, as well as in other cases explicitly provided by applicable law or this Policy.

7.2 The Right Holder will only disclose personal data only if it has a reasonable assurance that third parties will comply with the terms of this Policy and adopt confidentiality protection measures comparable to those applied by the Right Holder, and provided that the User has given prior consent to such disclosure and/or it is allowed by applicable law.

8. Advertisement Placement

8.1 The Right Holder does not place advertisements in the mobile application.

9. Requests to the Right Holder

9.1 Request to Terminate Personal Data Processing

9.1.1 Each User has the right to object to the processing and/or storage of their personal data by the Right Holder. Such an objection must be submitted in writing via email to the Right Holder at: office@krit.pro.

9.2 Request for Clarification

9.2.1 If the User has any questions regarding the application or interpretation of this Policy, or the procedure and/or method of personal data processing, they may send such a request in writing to the Right Holder via email at: office@krit.pro.

9.3 Modification or Deletion of Personal Data

9.3.1 The User has the right to independently modify or delete their personal data at any time.

9.3.2 The Right Holder reserves the right to delete the User’s account and all associated personal data and all related personal data at any time if the User violates the terms of this Policy.

9.3.3 Upon deletion of the User’s personal data, all of the User’s publications (comments, ratings, reviews, submitted reports, videos and photos, likes, rankings) and/or any other forms of activity available in the mobile application will be automatically deleted as well.

10. Duration and Procedure for Storing Personal Data

10.1 Data storage is performed directly by the Right Holder.

10.2 Data is stored for the entire duration of the User's use of the mobile application.

10.3 The Right Holder undertakes to immediately destroy or anonymize the User’s personal data upon termination of their use of the mobile application.

11. Personal Data Protection Procedure

11.1 Protecting the confidentiality of personal data is a top priority for the Right Holder. The Right Holder complies with all applicable legal requirements.

11.2 The Right Holder employs technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction.

12. Final Provisions

12.1 The Policy may be changed at any time by the Right Holder. The Right Holder bears no responsibility to the User for changes to the Policy made without prior notice to the User.

12.2 The User is solely responsible for regularly reviewing the Policy to stay informed of any changes or amendments.

12.3 This Policy has been developed in accordance with applicable data protection legislation of the Russian Federation, including the Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data", and the Federal Law No. 242-FZ dated July 21, 2014 "On Amendments to Certain Legislative Acts of the Russian Federation Regarding the Clarification of the Procedure for Processing Personal Data in Information and Telecommunications Networks". This Policy is governed by the legislation of the Russian Federation. Users outside the Russian Federation should be aware that data protection laws may differ in their jurisdiction.

12.4 Regardless of the protective measures taken by the Right Holder, the User hereby acknowledges that any transmission of personal data over the Internet cannot be guaranteed to be completely secure and, therefore, such transmission is undertaken at the User’s own risk.