Privacy Policy

1. General provisions

This Privacy Policy (the «Policy») is applied by the autonomous non-profit organisation Dialogue of Cultures (the «Operator», «we») in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 «On Personal Data» and other regulations of the Russian Federation.

The Policy covers the processing of personal data of users of the Slovo za Slovom mobile and web service (the «Service»), available at slovoedu.ru, app.slovoedu.ru and the iOS/Android mobile applications.

By using the Service the user confirms acceptance of this Policy. If the user does not agree, they must stop using the Service.

2. Operator details

• Full name: Autonomous Non-Profit Organisation «Dialogue of Cultures».
• Short name: ANO «Dialogue of Cultures».
• INN (Tax ID): 6679189854.
• OGRN (Reg. number): 1269600013143.
• Registered address: 620144, Sverdlovsk Region, Yekaterinburg, Surikova St. 63/2, apt. 4.
• Email for requests: support@slovoedu.ru.

3. Definitions

Personal data — any information directly or indirectly identifying a natural person.

Processing — any operation performed with personal data: collection, recording, storage, use, transfer, deletion, etc.

User — a natural person using the Service.

4. Data we process

Within the Service we process the following categories of personal data:

• Registration data: email address, password (stored as a hash), nickname.
• Learning profile: native language, target language, chosen tutor character, language level, lesson progress, streak count, experience points.
• Avatar (optional) — an image uploaded by the user.
• Technical data: authentication tokens, session identifiers, request timestamps — required for the Service to function.

We do not collect special-category personal data (health, race, political views, etc.), biometric data, location data, or advertising identifiers. Analytics or tracking systems are not used.

5. Purposes of processing

Personal data is processed solely for the following purposes:

• creating and maintaining a user account in the Service;
• delivering Service functionality: building personalised lessons, saving progress, displaying the leaderboard;
• technical support and replies to user requests;
• protecting Service security and the user's account;
• complying with the laws of the Russian Federation.

We do not perform marketing mailings, advertising or sale of personal data to third parties.

6. Legal grounds

Processing is based on:

• consent of the data subject given upon registration (Article 6(1)(1) of 152-FZ);
• performance of the user agreement (public offer);
• compliance with obligations imposed by Russian law.

7. Storage location and retention

Recording, systematisation, accumulation, storage, refinement and retrieval of personal data of Russian citizens take place in databases located on the territory of the Russian Federation. Hosting is provided by LLC «Registrar R01» (Reg.ru), whose data centres are located within the Russian Federation.

Personal data is retained for the lifetime of the user account and until consent is withdrawn or the account is deleted. After account deletion, personal data is removed within no more than 30 calendar days, except where Russian law requires longer retention.

8. Sharing with third parties

We do not share personal data with third parties except in the following cases:

• de-personalised text prompts are sent to the GigaChat AI service (PJSC Sberbank) to generate lesson content. The prompts contain no user registration data;
• text strings are sent to the SaluteSpeech speech synthesis service (PJSC Sberbank) to voice the learning material. Only exercise text is sent, without user identifiers;
• where directly required by Russian law, on requests from authorised state bodies.

Both providers are Russian operators and process data within the Russian Federation. No cross-border transfers are performed.

9. User rights

Under 152-FZ the user has the right to:

• obtain information about the processing of their personal data, its purposes, methods and timing;
• request correction, blocking or deletion of personal data that is incomplete, outdated, inaccurate, unlawfully obtained or no longer required for the stated purpose;
• withdraw consent at any time;
• request deletion of the account and all related personal data;
• file a complaint with Roskomnadzor or in court.

Requests should be sent to support@slovoedu.ru. We respond within 30 calendar days. See the Delete account page for instructions.

10. Security measures

We apply legal, organisational and technical measures to protect personal data, including:

• passwords stored only as cryptographic hashes;
• HTTPS (TLS) for all transport between client and server;
• restricted server access via SSH keys;
• regular database backups;
• a designated person responsible for personal-data processing.

11. Changes

We may update this Policy. The current version is always available at slovoedu.ru/en/privacy.html. Material changes are notified through the Service or by email.

12. Contact

For privacy questions write to support@slovoedu.ru with the subject «Personal Data».