ShakomakuShakomaku
← Back to homePrivacy PolicyTerms of UseConsent to Personal Data ProcessingCookie Policy
Privacy Policy

Privacy Policy

Updated: 2026-10-10

This Privacy Policy (the "Policy") describes how [SITE OWNER / OPERATOR NAME] (the "Operator", "we", "us") processes the personal data of users of the service available at shakomakou.com and its subdomain app.shakomakou.com (the "Service"). The Policy has been prepared in accordance with Russian Federal Law No. 152-FZ "On Personal Data" and takes into account the principles of the EU General Data Protection Regulation 2016/679 (GDPR) for users in the EU.

1. Data we process

  • Registration data: email address, name/display name, username, password (stored as a hash).
  • Usage data: messages, files, voice and video attachments you send in chats; call history.
  • Technical data: IP address, browser/device type (user agent), session and device information, time of actions.
  • Payment data: when you pay, it is processed by the payment provider; we do not store bank card details.
  • Voice and calls: voice messages; if a call participant turns on “call summary”, the audio recording and transcript of that call.

2. Purposes of processing

  • providing the Service's features (messaging, calls, file storage);
  • authentication and account security, protection against abuse;
  • communicating with you (notifications, account recovery);
  • fulfilling payment obligations (for paid plans);
  • complying with legal requirements.

3. Legal bases

We process data on the basis of your consent (given at registration), to perform the contract (the Terms of Use / public offer), in our legitimate interests (security of the Service) and to comply with the law.

4. Who receives the data

We do not sell personal data. To run the Service, data is shared only with parties that perform a specific task for us, and only to the extent that task requires:

  • Backblaze, Inc. (USA) — storage of the files, photos, voice messages and videos you send.
  • Ollama (ollama.com cloud service) — AI features: translation, writing assistance, call summaries. Only the text you send for processing yourself is shared, plus a call transcript if a participant turned on “call summary”.
  • Groq, Inc. (USA) — speech recognition: transcription of voice messages and call recordings, only when a transcription is requested.
  • Stripe, Inc. (USA, EU) — payment processing. Only Stripe sees bank card details.
  • Timeweb (Russia) — sending emails: sign-in codes, notifications.
  • Google (Firebase Cloud Messaging) and browser push services — delivering notifications: the sender’s name and the beginning of the message. For “view once” and disappearing messages no text is sent.
  • GIPHY (USA) — GIF search: only the search query is sent, through our server, without your data.

Calls run through our own media server. Data may also be disclosed to competent authorities when lawfully required.

Cross-border transfer. Some recipients are located outside Russia (USA, EU). The transfer is made to perform the contract with you and on the basis of your consent.

5. Retention and protection

  • Account data — for as long as the account exists. When you delete your account (Settings → “My data”), your name, email, avatar, password, devices and chat memberships are removed immediately; your messages stay with the people you talked to, without your name.
  • Messages and files — until the sender or the chat deletes them; disappearing messages — until the set time expires.
  • Files uploaded but never sent — 7 days.
  • Sign-in sessions — until you sign out, or 90 days without activity.
  • Sign-in and administrator action log (IP address, device, time) — 1 year.
  • Consent records (cookies, documents) — 3 years, as proof of consent.
  • Verification codes and password reset links — until they expire (15 minutes to 2 hours).
  • Technical diagnostic logs for sound and recording — limited in size and overwritten as they fill up.
  • Backups — 14 days, encrypted.

We apply organisational and technical safeguards: password hashing, encryption of connections and backups, restricted and logged access.

6. Your rights

You can download all your data in one file and delete your account yourself: Settings → “My data”.

You have the right to obtain information about the processing of your data, to request its correction, blocking or deletion, to withdraw your consent to processing, and (for users in the EU) to exercise your GDPR rights (access, portability, objection). To do so, send a request to contact@ndbh.pro.

7. Cookies

The Service uses cookies and similar technologies. See the Cookie Policy for details.

8. Changes to this Policy

We may update this Policy. The current version is always available on this page. The date of the last update is shown on this page.

9. Contact

Operator: [SITE OWNER / OPERATOR NAME]. For questions about personal data processing: contact@ndbh.pro.