Data retention policy

1. About this document

This Data Retention Policy defines retention periods and deletion procedures for user data in the Diarynchy service.

All user data is initially stored and processed in the Russian Federation.

2. Legally significant events

Legally significant events, including facts of consent acceptance and withdrawal, document versions, date and time, IP address, user-agent, document text hash, and signature method information, are stored for the period necessary to confirm lawful processing and protect the Operator's rights, but not less than the consent validity period and a reasonable period after withdrawal, unless otherwise required by law. Technical account deletion does not mean immediate destruction of such records.

3. Diary entries and account

Diary entry content, entry metadata, automated analysis results, and account data are stored until the user deletes the account or upon a data subject request.

Processing cessation upon consent withdrawal or subject request — no more than 10 business days (with possible extension up to 5 business days); details — in Section 9.

Technical deletion from active databases — within 30 calendar days after processing cessation or account deletion; this is not the response deadline for an informational request. Deletion from backups — within 30 calendar days or in the next backup rotation cycle unless otherwise required by law.

4. AI analysis results

Automated analysis results are stored with the corresponding diary entries and deleted when the entry or account is deleted.

5. Technical data

Technical logs (IP addresses, session identifiers, error logs) are stored for no more than 1 (one) month unless a longer period is required by law.

6. Support requests

Support request content and related metadata are stored for up to 3 (three) years from the last interaction on the request.

7. Payment data

Payment and receipt data are stored for periods established by the tax legislation of the Russian Federation for self-employed individuals.

8. Beta testing leads

Name and e-mail provided when signing up for beta testing on the landing page are stored until consent is withdrawn or for 2 (two) years from signup — whichever comes first.

9. Subject requests: response, cessation, and deletion

Users may send requests about personal data, withdraw consent, or request cessation of processing to k.kulakov@diarynchy.com. Account deletion is available in app settings.

• Response to a subject inquiry (providing information about processing) — no more than 30 (thirty) calendar days from receipt.
• Cessation of processing upon consent withdrawal or subject request — no more than 10 (ten) working days from receipt, with a possible extension of no more than 5 (five) working days upon reasoned notice.
• Blocking of personal data — immediately or within the cessation period.
• Technical deletion from active databases — within 30 (thirty) calendar days after cessation of processing or account deletion.
• Deletion from backups — within 30 (thirty) calendar days or the next backup rotation cycle, unless otherwise required by law.

10. Related documents

Also see:

• Personal Data Processing Policy
• Privacy Policy
• AI Policy