Privacy policy
Draft. Before the app is published in the stores, the service owner reviews this text and fills in the highlighted places.
This policy explains what data the Poshumim service (the poshum.im website, the app.poshum.im web app, and the Windows, iOS and Android apps) collects, why, and how you can control it. It follows Russian Federal Law No. 152-FZ “On Personal Data”.
1. Who processes the data
The personal data operator is [legal name / sole proprietor, tax number, registration number, address]. For questions about your data, write to [contact address, e.g. privacy@poshum.im].
2. What we collect
- Account: email address, username, display name, password (stored only as a hash), settings, avatar, banner and status, and the two-factor authentication secret if you turned it on.
- Content: messages, attachments, reactions, direct and group conversations, the servers, channels and roles you create, personal emoji and sounds, message reports.
- Technical data: the IP address and a description of the device or browser for each sign-in, and the time of last activity (the list is in the security settings); push notification tokens of your devices; the name of the game you are playing, if enabled in the Windows app.
- Voice and video travel in real time through our media server and are not recorded.
- App error reports: the error text, app and system versions, a short log of call events. A report is not linked to your account and contains no messages or passwords; it is kept for 60 days. You can turn reports off in Settings → About.
- The poshum.im website uses Yandex Metrica (including Webvisor) for visit statistics; it sets cookies. The apps use no analytics or advertising identifiers and do not track you.
3. Why
- to run the service: sign-in, message delivery, voice channels, notifications;
- to keep your account safe: email confirmation, sign-in codes, the device list;
- for moderation: reviewing reports and banning violators;
- to fix app errors;
- for service emails (confirmation codes, password recovery). There is no marketing email.
Grounds: performing our agreement with you (the terms of use), your consent (notifications, error reports) and our legitimate interest in protecting the service.
4. Where the data is stored
On servers in Russia [hosting provider and city].
5. Who receives data
We do not sell data or share it for advertising. Only those the service cannot work without receive it:
- [email provider] — to send emails with codes;
- Expo, Apple Push Notification service and Google Firebase Cloud Messaging — to deliver push notifications (the device token and the notification text);
- Klipy — GIF search: the query goes through our server, without data about you;
- websites you link to: link previews are loaded by our server, not by your device;
- public authorities — only where the law explicitly requires it.
6. How long it is kept
- account data and content — while the account exists;
- after you request account deletion — 14 days (you can change your mind), then the profile and personal data are deleted for good; messages in servers and conversations stay, with “Deleted user” shown as the author;
- error reports — 60 days; server logs — [period].
7. Your rights
- correct your profile data — in the app settings;
- delete your account — in the app (Settings → Delete account) or at app.poshum.im;
- turn off notifications and error reports — in the app and phone settings;
- ask what data we hold about you or ask us to delete it — at the address in section 1;
- complain to Roskomnadzor (the Russian data protection authority) if you believe your rights were violated.
8. Children
The service is not intended for anyone under [16]. If you learn that an account belongs to a child, write to us and we will delete it.
9. Security
Connections are encrypted (TLS), passwords are stored only as hashes, two-factor authentication is available, and you can end any other session from the device list.
10. Changes
We will announce significant changes in the app or by email. The current version is always on this page.