Privacy policy

This policy describes how the Aprosop service (aprosop.ru) processes the data of its users — clients and specialists. The Russian version was prepared in line with Russian Federal Law No. 152-FZ “On Personal Data”.

Operator: name: [to be completed], tax ID [to be completed], registration number [to be completed], address [to be completed]. Full details are on the “Company details” page.

Controller and representative for users in the EU/EEA and the UK (GDPR Art. 27), data protection officer if required. [to be completed]

For clients:

• Name on the service, e.g. “quiet-whale-4821”. It is generated by the system and not linked to your real name.
• Password and recovery key, only as a hash: nobody, including us, can learn the password or key from it.
• Avatar settings: face shape, hairstyle, colours. A set of parameters, not a photo.
• Dialogues and calls: chat messages (under the retention rules you chose), the time, length and status of calls, and the specialist.
• Balance: top-ups, charges for calls, refunds.
• Preferences: interface language and the country you selected (used to show local crisis lines).

For specialists, additionally: login details, application and public profile, qualification documents, payout details. Full list: [to be completed]

Messages in a mental-health context may reveal information about health, which is a special category of data under GDPR Art. 9: the explicit-consent mechanism for users in the EU/EEA and the UK. [to be completed]

The camera recognises your expressions right in your browser. Unless you choose to show your real face, the camera image never leaves your device: only the animated avatar is sent. The voice filter also runs on your device.

Video and audio travel between browsers over an encrypted channel (WebRTC). Our server helps establish the connection but does not record the stream.

Captions and “Text only” mode: speech is recognised on the speaker's device from the original voice, before the filter. The text goes directly to the other person over the same encrypted channel, bypassing our servers, and is not stored anywhere.

An honest limitation. For a direct connection, browsers exchange network addresses, so technically a specialist may see your IP address, and our server sees it with every request, like any website.

Purposes of processing for each category of data. [to be completed]

Legal bases for processing (Russian law; for EU/EEA and UK users — GDPR Art. 6 and Art. 9 conditions, e.g. explicit consent). [to be completed]

Retention periods by category of data. [to be completed]

Never for advertising or sale. A specialist sees your name on the service, your avatar and the messages in your dialogue with them. Payment happens on the payment service's side: your card number and name never reach us.

List of processors (hosting, payment service, AI provider for Tisha and others), where they are located, and the safeguards for cross-border transfers (including transfers of EU/UK users' data to Russia). [to be completed]

Your browser stores login tokens, the interface language, the country you selected and the theme. More in the cookie policy.

The account settings have a “Delete account” button. After you confirm with your password, the account and its data are deleted. Data we are required by law to keep (for example, about payments) is kept for the statutory period: [to be completed]

How to exercise your rights (access, rectification, erasure, portability, objection, withdrawal of consent), response times, and the right to complain to a supervisory authority (EU/EEA, UK ICO) or under US state privacy laws. [to be completed]

Organisational and technical security measures. [to be completed]

Send questions about your data to support@aprosop.ru. You don't need to introduce yourself — your name on the service is enough if the question concerns your account.