Privacy policy and personal data processing

1. General Provisions

The Privacy and Personal Data Processing Policy (hereinafter referred to as the Policy) applies to all information that Hyper App can obtain about the subject of personal data during the latter’s use of Hyper App's programs and products.

This Policy determines the procedure for processing personal data by Hyper App (hereinafter referred to as the Operator) in order to bring to the attention of the subject of personal data the necessary information that allows one to assess what personal data and for what purposes are processed by the Operator, methods of processing and ensuring security.In case of disagreement with the terms of the Privacy Policy, the personal data subject must stop using the programs and products of Hyper App.

The Policy uses the following basic concepts: - automated processing of personal data – processing of personal data using computer technology; - information system of personal data - a set of personal data of subjects of personal data contained in databases, and information technologies and technical means that ensure their processing; - subject of personal data (subject) - an individual to whom the personal data relates; - depersonalization of personal data - actions as a result of which it is impossible to determine without the use of additional information the ownership of personal data to a specific subject of personal data; - processing of personal data - implementation of one or a set of actions to collect, systematize, store, change, supplement, use, provide, distribute, transfer, depersonalize and destroy personal data; - personal data – any information recorded on electronic, paper and (or) other tangible media relating to a specific individual or making it possible to identify him; - provision of personal data – actions aimed at disclosing personal data to a certain person or a certain circle of persons; - destruction of personal data - actions as a result of which it is impossible to restore the content of personal data in the personal data information system and (or) actions as a result of which material media of personal data are destroyed;

2. Principles of processing personal data

The processing of personal data is carried out by the Operator based on the following principles: - legality of the purposes and methods of processing personal data; - limiting the processing of personal data to the achievement of specific, predetermined and legitimate purposes; - preventing the processing of personal data incompatible with the purposes of collecting personal data; - preventing the merging of databases containing personal data, the processing of which is carried out for purposes that are incompatible with each other; - processing only those personal data that meet the purposes of their processing; - compliance of the content and volume of processed personal data with the stated purposes of processing; - ensuring the accuracy, sufficiency and relevance of personal data in relation to the purposes of processing personal data; - destruction or depersonalization of personal data upon achievement of the purposes of their processing or in the event of loss of the need to achieve these purposes.

3. Confidentiality of personal data

The operator and other persons who have access to personal data are obliged not to disclose to third parties or distribute personal data without the consent of the subject of personal data, unless otherwise provided by the current Legislation of the countries where Hyper App provides its services. The operator does not verify the accuracy of the personal data provided by the subject and does not have the opportunity to assess his legal capacity. However, the Operator assumes that the subject acts in good faith, carefully, provides reliable and sufficient personal data and makes all necessary efforts to keep such data up to date, and does not violate the rights of third parties.

4. Personal data databases

The operator may create databases of personal data of subjects of personal data. With the consent of the subject of personal data, the Operator’s personal data databases may include his last name, first name, patronymic, date and place of birth, contact telephone numbers, email address and other personal data. Information about the subject of personal data must be excluded at any time from the personal data base of the Operator at the request of the subject of personal data or a court decision. When processing personal data of citizens of the certain countries using information technology, including on the Internet, the operator ensures their collection, systematization and storage in personal data databases on technical means physically located on the territory of the country and registered in the prescribed manner with the State register of personal data databases.

5. Consent of the subject of personal data to the processing of his personal data

The subject of personal data decides to provide his personal data and consents to their processing freely, of his own free will and in his own interest. The subject consents to the processing of personal data in any form that allows us to confirm the fact of its receipt. The subject withdraws consent to the processing of personal data in the form in which the consent was given, or in writing, including in the form of an electronic document.

6. Rights of the subject of personal data

The subject of personal data has the right to receive from the Operator information regarding the processing of his personal data, unless such right is limited in accordance with the current legislation of the country where Hyper App provides its services. The subject has the right to receive information regarding the processing of his personal data, containing: - confirmation of the fact of processing of personal data; - grounds and purposes of processing personal data; - applied methods of processing personal data; - name of the Operator and its location (postal address), information about persons who have access to personal data or to whom personal data may be disclosed on the basis of an agreement concluded with the Operator or on the basis of law; - the composition of the processed personal data relating to the relevant subject, the source of their receipt;

- terms of processing of personal data, including periods of their storage; - the procedure for the subject to exercise rights; - information about the completed or intended cross-border transfer of personal data.

The subject of personal data has the right to demand from the Operator clarification of his personal data, blocking or destruction of it if the personal data is incomplete, outdated, inaccurate, illegally obtained or is not necessary for the stated purpose of processing, as well as take measures provided by law to protect his rights . The Operator is obliged to immediately stop, at the request of the personal data subject, the processing of his personal data. The personal data subject has the right to protect his rights and legitimate interests in the event of a violation by the Operator of the legislation of the country where Hyper App provides its services to the owner of the personal data.

7. Measures taken by the Operator to protect personal data

To prevent unauthorized access to personal data, the Operator applies the following organizational and technical measures: - appointment of persons responsible for organizing the processing and protection of personal data; - limiting the number of persons who have access to personal data; - organization of accounting, storage and circulation of information carriers; - identification of threats to the security of personal data during their processing, formation of threat models based on them; - development of a personal data protection system based on a threat model; - checking the readiness and effectiveness of using information security tools; - differentiation of user access to information resources and software and hardware for information processing; - use of anti-virus tools and recovery tools for the personal data protection system.

8. Final provisions

The operator is not responsible for losses incurred by the subject in connection with the use of his personal data in accordance with the requirements of the legislation of the country where Hyper App provides its services. In case of loss or disclosure of confidential information, the Operator is not responsible if this confidential information: - became public domain until its loss or disclosure. - was received from a third party prior to its receipt by the Operator. - was disclosed with the consent of the subject of personal data. Disputes between the Operator and the subject will be resolved through negotiations. If an agreement is not reached, the dispute will be referred to a judicial authority in accordance with the current legislation of the country where Hyper App provides its services. The operator has the right to make changes to this Privacy Policy without the consent of the subject. The new Privacy Policy comes into force from the moment it is posted on the official website of the Operator, unless otherwise provided by the new edition of the Privacy Policy. The current Privacy Policy of Hyper App is posted on the page at: docs.hyperapp.cloud.

9. Contacts

For the sales/dispute/chargeback inquires please contact at: [e-mail]