Privacy Policy

1. Scope and controller

This Privacy Policy explains how the Android application “vkstat - гости для вк и анализ” (also referred to as “VKStat”, “the app”, “we”, or “us”) collects, uses, stores, shares, and deletes personal data.

The data controller is Individual Entrepreneur Nikolai Olegovich Aksenov (ИП Аксенов Николай Олегович), INN 236102044122, OGRNIP 318784700295523. Questions and privacy requests may be sent to inikolay.axenov@yandex.ru.

2. Data we process

• VK account data: VK user ID, name, profile photo, public profile information, email address when VK ID provides it, and data made available through VK APIs with your authorization.
• Authentication data: VK access and refresh tokens and our backend session tokens. These are used to keep you signed in and to perform actions you request.
• Feature data: selected profiles, guest-analysis history, trap-link identifiers and transitions, saved comparison snapshots, tool results, preferences, and other content required for the requested app features.
• Device and technical data: device model, operating-system and app version, language, IP address, installation or app-instance identifiers, Firebase Cloud Messaging token, crash reports, diagnostics, and network or server logs.
• Analytics and attribution data: app opens, screen views, button presses, feature usage, campaign and referral parameters, and device, app, or advertising identifiers when they are available under the device and platform settings.
• Subscription and payment data: product, price, currency, subscription status, payment status, transaction identifiers, and limited billing details. We do not receive or store full bank-card numbers or security codes.
• Support data: the contents of messages and technical information that you voluntarily provide when contacting support.

3. How we receive data

We receive data:

• directly from you when you sign in, use a feature, change settings, pay, or contact support;
• from VK ID and VK APIs after you grant authorization;
• automatically from the app, device, and our servers when the service is used;
• from payment, analytics, attribution, crash-reporting, and messaging providers.

4. Why we use data

• to authenticate users and maintain secure sessions;
• to provide guest analytics, profile analysis, trap links, and other requested tools;
• to activate and manage subscriptions and purchases;
• to send service and push notifications where permitted;
• to diagnose failures, prevent abuse and fraud, secure the service, and provide support;
• to measure product performance, attribution, and aggregate feature usage;
• to comply with legal obligations and enforce our terms.

5. Service providers and data sharing

We use processors only for the purposes described in this Policy. Depending on the feature, data may be processed by:

• VK ID and VK APIs — authentication and VK data requested by the user.
• Google Firebase — analytics, crash diagnostics, remote configuration, and Firebase Cloud Messaging push delivery.
• Yandex AppMetrica — product analytics and advertising attribution. AppMetrica location tracking is explicitly disabled in the app.
• PostHog (EU infrastructure) — explicit product events. Automatic screen capture and session replay are disabled.
• Google Play and Adapty — subscription products, purchase validation, and entitlement status.
• CloudPayments — payment processing for eligible users in Russia. Card data is entered into the payment provider’s interface and is not stored by VKStat.
• Hosting and infrastructure providers — secure operation of our API, database, logs, backups, and content delivery.

We do not sell personal data. We may disclose limited data where required by law, to protect users and the service, or in connection with a business reorganization subject to applicable safeguards.

Providers may process data in countries other than yours. Where required, we use contractual and technical safeguards for cross-border processing.

6. Retention and deletion

We keep account and feature data while the account is active and for as long as it is necessary to provide the service. Security and diagnostic logs are retained for a limited period. Transaction and accounting records may be retained for the period required by law. Backups are deleted or overwritten according to their normal rotation schedule.

You can delete your account from the app or submit an external deletion request. Detailed steps and the categories deleted or retained are published on our Account and Data Deletion page.

7. Security

We use access controls, encrypted network connections, token-based authentication, monitoring, and reasonable organizational safeguards. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

Never send your VK password, access token, refresh token, or full payment-card details to support.

8. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, or information about your personal data. You may sign out, revoke VK authorization, disable notifications in Android, reset an advertising identifier in device settings, or delete the account.

Send requests to inikolay.axenov@yandex.ru. We may ask for reasonable verification before acting on a request.

9. Children

The app is not intended for children who cannot lawfully consent to data processing in their jurisdiction. We do not knowingly collect children’s personal data without a valid legal basis. Our zero-tolerance rules and reporting process for child sexual abuse and exploitation are published in the Child Safety Standards.

10. Changes to this Policy

We may update this Policy to reflect product, legal, or provider changes. The current version and its effective date will remain publicly available at this permanent URL.

11. Contact

Privacy contact: inikolay.axenov@yandex.ru

Postal address: 195197, Россия, г. Санкт-Петербург, пр-кт Лабораторный, д. 20, корп. 3, лит. А, кв. 390