KSTATI Privacy Policy
Version 2.2 of 15.11.2026
1. General
The data controller is Кирилл Кавун (самозанятый, Санкт-Петербург) (kstati.support@gmail.com). This Policy follows Russian Federal Law 152-FZ, takes GDPR into account and complies with RuStore rules. Using the app after the Policy is updated means you accept the new version.
2. Data we collect
From you: email and password (to sign in), nickname; optionally name, city and country, phone, avatar, photo check-ins, notes and favourite places, reviews and ratings, support requests. Sign-up requires only email, password and nickname. Automatically: location (while the map, routes and tours are in use), visit check-ins (passport stamps, XP, achievements), participation in group walks, technical crash data stays on your device.
3. Purposes of processing
Account and sign-in; map, routes and tours; passport, achievements and leaderboard; friends and group walks; the AI guide (only the text of your question and the place name are sent to YandexGPT — never your name or email); offline mode; reminders; security; Premium (payment is processed by RuStore or YooKassa, we never receive your card data).
4. What other users can see
Your nickname, name, avatar, level and XP are visible in the leaderboard and friend search. Your check-ins (place name and city) are visible to friends in the feed. Group-walk participants see each other. Notes, favourites and photo check-ins are visible only to you.
5. Legal grounds
Your consent, performance of a contract (app features), legitimate interests (security, bug fixing) and legal requirements.
6. Sharing with third parties
We do not sell data or pass it to ad networks. Processors are used only for their function: Amvera Cloud (account, database, files; servers in Russia); Yandex Maps (the map); YandexGPT and SpeechKit (AI answers and voice); Wikipedia (looking up background on a place by name and coordinates); RuStore (payment and subscription check); YooKassa (card and SBP payments — card details are entered on the YooKassa page and never reach us).
7. Storage and protection
TLS, password hashing, access control (everyone sees only their own private data). On your device we keep the places cache, downloaded areas and photos for offline use — remove them in “Offline management” or by clearing app data. Accounts are deleted within 30 days; payment and security logs are kept up to 3 years as required by law.
8. Your rights
Access to your data, correction (Profile → Personal data, nickname), deletion of the account and all data instantly, without contacting support (Settings → Delete account), withdrawal of consents (location, notifications, camera — in system settings). Any request, including data export or deletion: kstati.support@gmail.com, handled within 30 days. You may complain to the data protection authority (Roskomnadzor in Russia).
9. Local storage
We do not use web cookies. Settings (theme, language), cache and offline data are stored on the device and are removed by clearing app data.
10. Notifications
Notifications about nearby places and Premium expiry reminders are sent only with your consent and can be turned off in system settings or in the app’s “Permissions” section. There are no marketing mailings: we send no promotional emails or pushes. Sign-in code and password-recovery emails are service messages, not a subscription.
11. Children
The app is not intended for children under 14: we knowingly collect no data from them and show no ads. By signing up you confirm you are at least 14; at 14–17 the account is created with a parent’s or guardian’s consent. If a child under 14 has provided data, write to kstati.support@gmail.com and we will delete the account and data.
12. Third-party links
Links to external sites (Wikipedia, RuStore) are governed by their own policies.
13. Changes to this Policy
The current version is in the app (Settings → About → Privacy policy). We will notify you in advance about material changes.
14. Contacts
Controller: Кирилл Кавун (самозанятый, Санкт-Петербург). Privacy: kstati.support@gmail.com. Support: kstati.support@gmail.com. Response time — up to 30 days. Document version: 2.2 of 15.11.2026.