Privacy policy — Diarynchy

This is an unofficial translation for informational purposes. The Russian version is legally binding.

1. About this document

This Privacy Policy describes how the Diarynchy service handles your data: what is collected in the app and on the website, how diary entries are stored, how artificial intelligence works, and what information is not recommended in entries.

Formal personal data processing terms under Russian Federal Law No. 152-FZ are set out in a separate document — the Personal Data Processing Policy.

2. Where this policy applies

This policy applies to diarynchy.com (including the landing page, pricing pages, and legal documents) and the web app app.diarynchy.com.

On the landing page we may collect your name and e-mail when you sign up for beta testing, as well as technical data and cookies (see the Cookie Policy). In the app we process your account data and diary content.

3. How your entries are stored

All user data is initially stored and processed in the Russian Federation. Diary content (text, voice recordings when used), profile data, and analysis results are stored in databases on the Operator's own technical means in the Russian Federation.

Data is transmitted over a secure connection (TLS) and stored encrypted (encryption at rest).

The team does not review entries in bulk. Access to individual texts is possible only in limited cases: fixing failures, investigating security incidents, or handling a specific support request — only to the extent necessary.

4. How AI works

Analytics are generated using language models hosted in the Russian Federation via Yandex AI Studio and/or the Operator's infrastructure. Processing follows this pipeline:

a minimum necessary text fragment is extracted from the entry for the requested feature;
account identifiers and other data that directly identify you are removed;
Before AI analysis, an entry may undergo automated Guardrail review. Guardrail is used for Service security, minimizing data volume, masking direct identifiers, and preventing transfer to AI of clearly dangerous or excessive information. Such review constitutes automated processing of entry text.
analysis is performed in the Russian Federation;
the result is returned to your account and saved with the entry.

Analysis of user entries is performed using language models hosted on Yandex.Cloud LLC infrastructure (Yandex AI Studio service) and on the Operator's infrastructure in the Russian Federation.

When Yandex.Cloud LLC services are used, personal data processing is entrusted under the Yandex Cloud terms and Data Processing Addendum (DPA) accepted by the Operator when registering in Yandex Cloud. Details: https://yandex.ru/legal/cloud_dpa

When processed through Yandex.Cloud LLC services, data is handled under Yandex Cloud terms; the Operator does not use users' personal data to fine-tune its own models.

Yandex Cloud processing terms — data processing agreement: https://yandex.ru/legal/cloud_dpa

Personal data of users is not transferred to foreign organizations.

Analysis uses the minimum necessary amount of data; only the fragment of an entry required for the requested feature is transferred.

Analysis is performed automatically without making legally significant decisions regarding the user.

Without consent to AI processing, an entry is not transferred to Yandex AI Studio and is not analyzed by language models.

AI output is auxiliary and may contain inaccuracies. Do not rely on it as medical, psychological, or legal advice.

5. Restrictions on entry content

The Service is not intended to store medical documentation, medical records, examination results, doctor prescriptions, or other medically prescribed documents. The Service accepts that the User may voluntarily describe personal circumstances, experiences, and life situations. The Service does not require special categories of personal data and is not specifically designed to collect them. If the User includes such information in diary entries, it is processed on the basis of separate consent. In some cases, the User may independently include in an entry information relating to health, intimate life, religious views, or other special categories of personal data provided for by Article 10 of Federal Law No. 152-FZ. The Service does not require such information and is not specifically designed to collect it.

Do not place in the Service information not needed for a personal diary: passport data, TIN, SNILS, bank details, card numbers, passwords, access codes, API keys, third-party data without their consent, full medical documents, and examination results.

You are responsible for complying with these restrictions.

The Operator may block or delete information that objectively should not be stored in the Service: bank cards, passwords, access keys, passport data, third-party data without their consent, unlawful content, and other clearly dangerous information.

6. Sharing with third parties

We do not sell your data. Data is shared with third parties only to operate the Service in the Russian Federation: Robokassa (payments); Yandex.Cloud LLC (Yandex AI Studio — AI features); Yandex LLC (Yandex Metrica — with analytical cookie consent); UniSender (beta lead mailings). Diary entry storage is not entrusted to third-party hosting providers.

Personal data of users is not transferred to foreign organizations.

The full list of processors and purposes is in the Personal Data Processing Policy.

7. Your rights

You may request information about processing of your data, ask for clarification, blocking, or deletion, and withdraw consent to processing and to automated processing using AI.

Cessation of processing upon consent withdrawal or subject request — no more than 10 working days (with possible extension up to 5 working days upon reasoned notice). Response with information about processing — up to 30 calendar days. Technical deletion from active databases — up to 30 calendar days after processing cessation. These deadlines differ: response to a request, processing cessation, and data deletion are separate stages. Details are in the Data Retention Policy.

You can delete your account and related entries in app settings or by sending a request to k.kulakov@diarynchy.com.

8. Related documents

Also see:

9. Contact

For privacy and personal data questions: k.kulakov@diarynchy.com