Plusuy+ Privacy Policy
1. Who we are
The data controller is <legal name and details, registration number, address>. Contact for data requests: <e-mail, e.g. privacy@plusuy.pro>.
2. Data we process
- Account: login, e-mail address, name, password (stored only as a one-way hash), role in the family.
- Profile: phone, date of birth, region, city, profile photo, language and time zone — optional.
- Family: links between parents and children.
- Content: photos, short videos and diary entries you add.
- Health data (pregnancy, ultrasound, a child's height and weight, etc.) — only with your separate consent, see the "Consent to process health data".
- Technical sign-in data: sign-in time, IP address and device type, to protect the account.
3. Purposes and legal basis
Providing the service and protecting the account (performance of a contract), storing your content (your consent), reminders by e-mail and Telegram (your consent, can be turned off in settings).
4. Where data is stored
Data is stored on servers located in the Russian Federation. Photos and videos are kept in private storage and served only through short-lived signed links. Metadata (EXIF, location tags) is removed from photos and container metadata from videos.
5. Who can see your data
You choose the visibility of every entry: only you, your family circle, a secret link, or public. The default is only you. We do not sell data or share it with ad networks. E-mails are sent through our own mail server, notifications through Telegram if you connect it.
6. Retention
For as long as the account exists. After you delete the account, database records are removed immediately and files within 24 hours; sign-in logs are deleted together with the account.
7. Your rights
You can obtain a copy of your data (export), correct it, withdraw any consent, delete your account with all data, and lodge a complaint with a supervisory authority (Roskomnadzor for the Russian Federation; the data protection authority of your country for the EU). Use the contact in section 1.
8. Children
Children's accounts and data about children are created by parents or with their knowledge. A parent who adds a child's data confirms that they are entitled to do so.
9. Security
Connection encryption (TLS), password hashing (Argon2id), isolation of family data, sign-in rate limiting, access logging.
10. Changes
When the policy changes we raise the document version and ask you to confirm your consent again. The current version is shown at the top.
Version: 2026-11-05