Atticlet Privacy Policy

Controller and contact details

Data controller: Sergey Devyatov. Contact email: atticlet@gmail.com.

1. Information we process

When you use Atticlet services, we may process:

• your email address;
• a password hash — we do not store your password in plain text;
• an internal account identifier;
• email verification and account recovery information;
• account settings and links to other accounts;
• application data created by you;
• the version of your application, browser, and operating system;
• your device model and technical characteristics;
• application, installation, or device identifiers;
• your IP address and approximate location derived from it;
• information about your use of a website or application;
• diagnostic data and error and crash reports.

We do not ask for your name, telephone number, postal address, date of birth, identity documents, or precise location.

You should not enter confidential or sensitive personal information into an application unless a feature is expressly intended for that purpose.

2. Purposes of processing

We use information to:

• create accounts and authenticate users;
• verify email addresses and restore account access;
• save application settings and data;
• provide shared features between linked accounts;
• maintain security;
• diagnose errors and crashes;
• analyze usage and improve our services;
• comply with legal requirements.

We do not sell personal information or use it for personalized advertising.

3. Cookies and browser storage

Our websites and web applications may use necessary cookies and local browser storage for authentication, security, language preferences, settings, and application state. They may also use Yandex Metrica analytics cookies to produce website usage statistics.

Analytics cookies are set only after you give consent. Refusing analytics does not restrict the core functions of a website. You can withdraw consent through the cookie settings and delete stored information using your browser controls.

4. Information stored on mobile devices

Applications may store settings, state, progress, and other information required for their operation locally on your device.

This information remains on your device until you remove it using the application or operating system controls, or uninstall the application. Uninstalling an application does not always automatically delete a server-side account.

5. Links between accounts

Some applications allow linked accounts to share information, such as shopping lists.

A link is created only after an invitation and mutual confirmation by both users. Our services do not provide unrestricted user search, public account directories, public profiles, or unrestricted messaging.

You can end an account link. Further access to shared information will then end according to the features of the application. Information that another user previously copied or exported may remain on that user's device.

We do not show your email address to other users unless this is required for a feature you expressly select and you are informed in advance.

6. Analytics and diagnostics

We may use Google Analytics for Firebase, Firebase Crashlytics, Firebase Remote Config, and Yandex AppMetrica for application analytics, crash diagnostics, and remote configuration. We use Yandex Metrica for website analytics.

These services may receive application or installation identifiers, IP addresses, device and operating system information, usage events, diagnostic information, and crash reports.

We seek to prevent email addresses, passwords, and the contents of user records from being sent to analytics systems. Passwords are not sent to these services in plain text or as hashes.

Analytics is enabled after any required consent has been obtained. You can withdraw consent in the application or website settings. Technical information that is strictly necessary for security and resolving critical failures may be processed separately to the extent permitted by law.

Processing by these services is also governed by the privacy policies of Google and Yandex.

7. Disclosure and location of processing

Hosting, email, analytics, and diagnostics providers may access information only to the extent necessary to provide their respective services.

Google, Yandex, and other providers may process information in different countries. Where this occurs, safeguards required by applicable law are used.

Apple, Google, application stores, and operating system providers may independently process payment, technical, and account information under their own policies.

8. Retention and deletion

We retain account information until you delete your account.

You can initiate deletion within an application or by contacting atticlet@gmail.com. We may ask you to verify ownership of the account to prevent unauthorized deletion.

After a request is verified, the account and associated information are removed from active systems without undue delay. Residual copies may remain in backups for up to 30 days, are not used for any other purpose, and are removed through the regular backup rotation.

You must separately remove local information using the application, browser, or device controls.

Analytics and diagnostic information is retained for the periods configured in the relevant services, or anonymized or deleted when it is no longer needed.

9. Security

We use reasonable technical and organizational safeguards, including encrypted transmission, access controls, and storage of passwords only as strong cryptographic hashes.

No method of storing or transmitting information can guarantee absolute security.

10. Children

Atticlet services are not specifically directed to children. We do not knowingly request users' ages or collect children's information beyond what is required to provide the selected features.

A parent or legal guardian who believes that a child's information is being processed unlawfully may contact atticlet@gmail.com.

11. Your rights

You may request:

• information about how your personal information is processed;
• access to your personal information;
• correction of inaccurate information;
• deletion of your account and information;
• restriction of processing;
• withdrawal of consent;
• a portable copy of your information, where applicable.

We may ask you to verify ownership of the relevant account before completing a request.

12. Changes to this Policy

We may update this Policy when our services, technologies, or legal requirements change. The current version and its effective date are published on this page.

We will provide notice of material changes by an appropriate method before they take effect.

13. Contact

Controller: Sergey Devyatov. Email: atticlet@gmail.com. You can use this address for privacy questions, account deletion requests, and other privacy-related requests.