Privacy Policy

Who is responsible for your data

The data controller under the GDPR is Pavlo Yamchinsky. For questions about this policy or to exercise your rights, write to y.p.p@i.ua.

If you believe we process your data unlawfully, you have the right to complain to the data protection authority where you live.

What we collect

Account data: email address, password hash, display name, chosen language, time zone.

Health data: weight, height, sex (used solely to select a safe minimum calorie floor), your weight goal, and your onboarding health-screening answers. This is special-category data under Article 9 GDPR.

Content you create: progress photos and videos, captions, reports about other people's content, and the gifts you send.

Technical data: push notification tokens, request timestamps, device type. Analytics is collected only after separate consent and never carries record or profile identifiers.

Why, and on what legal basis

To provide the service — create your account, show your daily plan, store your gallery: performance of a contract (Art. 6(1)(b) GDPR).

To process health data — calculate calories and apply safety limits: your explicit consent (Art. 9(2)(a) GDPR). You can withdraw it at any time in the app, and that data is then deleted.

To send morning reminders: performance of a contract. You choose the time and frequency.

To moderate content and block abuse: our legitimate interest in a safe community (Art. 6(1)(f) GDPR).

To measure product analytics: separate consent, withdrawable in settings. Without it, no event is sent.

Who else sees it

We do not sell personal data and we do not share it with advertisers.

Service providers process data on our behalf: application and database hosting, object storage for photos, an email sending service, a push notification service, a payment intermediary for in-app purchases, an automated image screening service, and — only with your consent — a product analytics service.

Other users see your photos only for entries you have explicitly made public. Every entry is private by default.

How long we keep it

Account data: for as long as the account exists.

Consent records: after withdrawal we keep the fact and its date, as evidence that processing was lawful.

When you delete your account we anonymise your email, name and password and destroy your gallery media. Anonymising frees your address for signing up again.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a copy in a machine-readable format.

Account deletion is available directly in the app: Settings → Privacy. It is immediate and irreversible.

For anything else, write to y.p.p@i.ua. We answer within one month.

Children

Shchodenno is for people aged 16 and over. We do not collect a date of birth — at sign-up you confirm you meet the minimum age. If we learn an account belongs to someone younger, we delete it.

Transfers outside the EEA

Some providers may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

Changes to this policy

If we change this policy materially, we will say so in the app before the change takes effect. The date at the top always reflects the current version.