Legal

Privacy Policy

How SoloDApp processes and protects user data.

Privacy Policy

Last updated: March 27, 2026

Operator: SoloDApp Educational Platform ("we", "us", "our")

Contact: privacy@solodapp.local

1. General Provisions

This Privacy Policy describes how SoloDApp ("Operator") collects, uses, stores, and protects personal data of users ("User", "you") in accordance with Federal Law No. 152-FZ "On Personal Data" of the Russian Federation and other applicable laws.

By using our website and services, you consent to the collection and processing of your personal data as described in this Policy.

2. What Data We Collect

We may collect the following categories of personal data:

2.1. Data provided by you:

  • Full name
  • Email address
  • Username/nickname
  • Password (stored in encrypted form)
  • Profile information (photo, bio, links)
  • Payment information (processed by third-party payment providers)

    • 2.2. Automatically collected data:

  • IP address
  • Browser type and version
  • Device information (type, OS)
  • Cookies and similar technologies
  • Usage data (pages visited, time spent, clicks)
  • Referral source

    • 2.3. Data from third parties:

  • Information from authentication providers (if applicable)
  • Public blockchain data (wallet addresses for certificates)

    • 3. Purposes of Processing

    We process personal data for the following purposes:

    | Purpose | Legal Basis |
    |---------|-------------|
    | User registration and account management | Consent (Art. 6 152-FZ) |
    | Providing access to courses and materials | Performance of contract (Art. 6 152-FZ) |
    | Tracking learning progress and achievements | Legitimate interest |
    | Technical support and communication | Consent / Performance of contract |
    | Sending transactional emails (notifications, reminders) | Legitimate interest |
    | Analytics and service improvement | Consent / Legitimate interest |
    | Marketing communications (with separate consent) | Consent (Art. 6 152-FZ) |
    | Compliance with legal obligations | Legal obligation |

    4. Legal Grounds for Processing

    Under Article 6 of Federal Law No. 152-FZ, we process personal data based on:

  • Consent of the data subject - for marketing communications, analytics cookies, and optional features
  • Performance of a contract - for providing access to purchased courses
  • Legitimate interests - for ensuring security, preventing fraud, and improving services
  • Legal obligations - for compliance with tax and other applicable laws

    • 5. Data Storage and Protection

    5.1. Data Localization

    In accordance with Russian law, personal data of Russian citizens is stored and processed on servers located within the Russian Federation.

    5.2. Security Measures

    We implement the following measures to protect your data:

    Technical measures:

  • TLS/SSL encryption for data transmission
  • Password hashing (bcrypt)
  • Regular security audits
  • Access logging and monitoring
  • DDoS protection

    • Organizational measures:

  • Limited access to personal data (only authorized personnel)
  • Confidentiality agreements with employees
  • Regular staff training on data protection
  • Incident response procedures

    • 5.3. Data Retention

    We retain personal data for:

  • Active accounts: duration of account existence
  • Deleted accounts and learning history: up to 5 years (for legal compliance, dispute resolution, and service audit)
  • Payment records: 5 years (tax requirements)
  • Cookies: as specified in Cookie Policy

    • 6. Data Subject Rights

    Under Russian law (Article 14 of 152-FZ), you have the right to:

  • Access - Request information about your personal data we process
  • Rectification - Correct inaccurate or incomplete data
  • Erasure - Request deletion of your data (with limitations)
  • Restriction - Limit processing in certain circumstances
  • Objection - Object to processing based on legitimate interests
  • Data portability - Receive your data in a structured format
  • Withdraw consent - At any time (without affecting prior lawful processing)

    • How to exercise your rights:

  • Email: privacy@solodapp.local
  • Account settings: Profile → Privacy Settings
  • Response time: within 30 days

    • 7. Cookies and Tracking

    We use cookies and similar technologies as described in our Cookie Policy.

    Essential cookies (required for site functionality) are set automatically.

    Non-essential cookies (analytics, marketing) require your consent.

    You can manage cookie preferences through the cookie banner or browser settings.

    8. Data Transfers

    We may transfer personal data to:

  • Service providers (hosting, email delivery, analytics) - under data processing agreements
  • Payment processors - for transaction processing
  • Legal authorities - when required by law

    • We do not sell personal data to third parties.

    International Transfers

    Data transfers outside the Russian Federation are conducted only:

  • With your explicit consent, or
  • To countries with adequate data protection levels, or
  • Under standard contractual clauses approved by Russian authorities

    • 9. Children's Privacy

    Our services are not intended for children under 16. We do not knowingly collect data from children under 16. If you believe we have collected data from a child, please contact us immediately.

    10. Changes to This Policy

    We may update this Privacy Policy periodically. Significant changes will be notified via:

  • Email notification
  • Website banner
  • Account notification

    • Effective date: Changes take effect upon posting unless otherwise stated.

    11. Contacts

    For privacy-related questions or to exercise your rights:

    Data Protection Officer:

  • Email: privacy@solodapp.local
  • Address: [Your Legal Address in Russia]

    • Supervisory Authority:

    You have the right to file a complaint with the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor).

    Note: This Privacy Policy is prepared in accordance with Federal Law No. 152-FZ "On Personal Data" of the Russian Federation and GDPR principles for international compliance.