Privacy Policy

The following privacy and personal data policy of the Kardio application (hereinafter referred to as the Privacy Policy) is published on the website kardio.space and formulated by the limited liability company "Kardio Lab", registered under the laws of the Russian Federation under the Primary State Registration Number 1257800007860 (hereinafter referred to as "Kardio Lab" LLC).

The terms "Kardio application", "User" and "User Agreement" are used in the meaning given to them in accordance with the User Agreement of Kardio Lab LLC, published on the website kardio.space.

The Privacy Policy is changed by Kardio Lab LLC unilaterally without notice to the User. If the User does not agree with the Privacy Policy of Kardio Lab LLC, the User must stop using the Kardio application and does not have the right to use the Kardio application.

1. The Privacy Policy of Kardio Lab LLC applies to all information transmitted by the Users of the Kardio application (including personal data) that Kardio Lab LLC may receive about the User in the process of using the Kardio application and in the performance of the User Agreement.

Kardio Lab LLC may receive information and personal data of Users from its partners, to whom Users transfer any information and personal data (for example, from advertisers), from publicly available sources.

2. The purpose of the Privacy Policy is to establish a list of transferred personal data, the purpose of their processing and a list of actions of Kardio Lab LLC with personal data, the protection of information and personal data of Users when processing personal data.

The User provides the following personal data to Kardio Lab LLC through the Kardio application:

• name, nickname, photo of the User, phone number, e-mail address and date of birth;
• electronic data (HTTP headers, IP address, cookies, web beacons/pixel tags, browser identifier data, hardware and software information, wi-fi network data);
• the date and time of access to the Kardio application;
• information about activity during the use of the Kardio application (for example, the history of search queries and selection of search results, data on public actions, reactions to information, preferences (likes), phonebook data, information about interaction with other Users, as well as files and information stored in the Kardio application);
• geolocation information;
• data of electronic means of payment (bank cards);
• cookie-files;
• health information and biometric data (weight, height, gender, age, information about pregnancy and menstrual cycles, mass fraction of fat, mass fraction of muscles, mass fraction of skeleton, mass fraction of protein and mass of water, pulse, duration and phases of sleep, metabolism), which the User provides to Kardio Lab LLC independently through the Kardio application or through paired devices specially used by the User to collect and provide to Kardio Lab LLC through the Kardio application.

Kardio Lab LLC processes the User's personal data for the following purposes:

• verification of the User's identity;
• maintaining personal statistics and monitoring by the User, recording the User's information;
• the User's interaction with other Users of the Kardio application;
• performance by the Kardio application of the functions used by the User, including push notifications;
• recommendations to the User;
• settlements (including when making a paid subscription);
• compliance with the User Agreement and legal requirements.

3. When using the Kardio application by a User under the age of 18, the processing of personal data is carried out with the consent of the User's legal representative responsible for the possession and use of the devices running the Kardio application, and who has agreed to conclude the User Agreement

4. When processing the information provided by the User (including personal data), Kardio Lab LLC has the right to transfer to other Users the information that the User has designated as available to other Users using the functions of the Kardio application.

5. The processing of the User's personal data is carried out from the moment the User's account is created in the Kardio application. From this moment and throughout the entire period of using the Kardio application, the User gives Kardio Lab LLC consent to the processing of his personal data. The User agrees to the processing of his/her personal data by leaving his/her account in the Kardio application, and this consent can only be withdrawn by a direct application of the User to Kardio Lab LLC, including through the Kardio application.

If the User withdraws consent to the processing of personal data, Kardio Lab LLC deletes the User's personal data. Personal data that can only be destroyed by the User is depersonalized and blocked.

Deletion of the User's account entails the same consequences as the withdrawal of consent to the processing of the User's personal data.

6. Users' rights in relation to personal data are determined by applicable law, including the EU General Data Protection Regulation (GDPR), and consist of the following

• access to personal information
• data rectification where it is inaccurate or incomplete
• erasure of personal information
• data portability - to obtain personal information in a digital format
• to object the processing of personal information
• not to be subject to automated individual decision making processes
• to withdraw consent at any time where processing is based on consent

7. For any questions related to personal data (including to withdraw consent to the processing of personal data), please contact us on hello@kardio.space.