Aiyra Privacy Policy

1. General Provisions

This Privacy Policy describes how Aiyra (the "Service", "we") collects, uses, stores and protects users' personal data ("you").

Data Controller: IE Petrov Ruslan Borisovich, TIN: 772023670305.

By using the Service, you agree to the terms of this Policy.

2. What data we collect

• Registration data: email, Google authorization data (if you use Google sign-in).
• Onboarding data: your answers in the introductory dialog with Aiyra — field of activity, experience, income goals, time constraints, communication preferences. This data is used to create an internal profile summary for task personalization only.
• Chat history: message content in the chat, daily check-ins, barrier analysis conversations.
• Task and result data: which tasks were suggested, completed, skipped or declined (with your stated reason), recorded deals (amounts, currency, dates).
• Subscription and payment data: subscription status, payment history. We do not store bank card details — they are processed directly by T-Kassa (JSC "T-Bank"). We only have access to payment status, not card data.
• Telegram (when connected): Telegram username and technical chat identifier — only if you voluntarily connect Telegram notifications.
• Technical and analytics data: Service usage events (e.g., onboarding completion, task completion), used to improve the product, not for advertising.

3. How we use data

• To provide and personalize Service functionality — task generation, Aiyra conversations, progress dashboard.
• To process payments and manage subscriptions.
• To send notifications (in-app and, with your consent, via Telegram) — e.g., daily check-in reminders.
• To improve Service quality based on aggregated usage statistics.

We do not use your data for advertising and do not sell it to third parties.

4. Data transfer and storage

We do not transfer personal data to third parties except in the following cases:

• you have given explicit consent to such transfer;
• transfer is required by law, court order or authorized government agency request.

Russian hosting providers' infrastructure is used for the Service. All personal data is stored on servers located in the Russian Federation, in accordance with Federal Law No. 152-FZ, Art. 18.1.

5. Retention period

We retain your data for as long as you have an account with the Service. Upon account deletion, personal data is deleted or anonymized within a reasonable period, except where longer retention is required by law (e.g., payment data for accounting purposes).

6. Your rights

You may at any time:

• request a copy of your data;
• request correction of inaccurate data;
• request deletion of your account and associated data;
• withdraw consent to data processing, which may mean you can no longer use the Service.

To exercise these rights, contact us as specified in section 9.

7. Cookies

The Service uses technical cookies necessary for authentication and the referral program (tracking referral link clicks). We do not use advertising or tracking cookies from third-party networks.

8. Security

We apply reasonable technical and organizational measures to protect your data from unauthorized access, including traffic encryption and database-level access control.

9. Contact

For questions related to personal data processing: structuradigital@yandex.ru.

10. Policy changes

We may update this Policy. The current version is always available at this address, with the last update date at the top of the document.