This Privacy Policy describes how personal data is processed in the KarboAI mobile app.
This Privacy Policy (the “Policy”) is prepared in accordance with Federal Law of the Russian Federation No. 152-FZ “On Personal Data” and defines the procedure for processing personal data and the measures taken to ensure its security.
The owner of the application and the Operator processing personal data is the self-employed individual Andrey Alekseevich Mashnyuk (TIN: 550521260123).
Email for contact and user requests: support@karboai.com
The Operator processes data solely to operate the KarboAI social network (user registration, profile creation, messaging, content publishing, chats and communities):
Authentication data: Name (nickname), email address.
Public user content: Profile photos (avatars), media files, images, post and comment texts voluntarily uploaded by the user to public access.
Private messages: Text messages and media files sent in private (direct) dialogues. Processed only for delivery to the recipient; confidential and not subject to public distribution.
Technical logs: IP address, device identifier (Device ID), OS version, session date and time.
Behavioral data and preferences: For personalization and push notifications, the Operator may process anonymized interaction data (views, likes, subscription topics). These data do not identify a person outside the profile and are used by in-app algorithms without transfer to third-party ad networks.
3.1. In accordance with Part 5 of Article 18 of Federal Law No. 152-FZ “On Personal Data”, all databases containing personal information of citizens of the Russian Federation are physically located and localized in the territory of Russia.
3.2. Project server infrastructure:
Accounts, text profiles, settings, private messages and system logs: Stored in a database on servers of HOSTKEY LLC (Russian Federation).
Media files, photos, avatars and user images: Stored in S3 cloud storage of Yandex.Cloud LLC.
4.1. The Operator does not use third-party foreign or domestic analytics trackers, libraries or external statistics services (including Google Analytics, Firebase and others).
4.2. All technical, system and personal data are processed and stored exclusively on the Operator’s own server capacity in Russia (HOSTKEY LLC and Yandex.Cloud LLC).
4.3. Cross-border transfer of personal data (transfer to the territory of foreign states) is not carried out by the Operator. Any disclosure to third parties is excluded, except for lawful requests of state authorities of the Russian Federation.
5.1. The KarboAI mobile application has an age rating of 13+. Users aged 13 to 18 may use the Application only with the consent of their legal representatives (parents, adoptive parents or guardians).
5.2. By completing registration and tapping “Continue”, a user aged 13 to 18 warrants to the Operator that such consent from legal representatives has been obtained in accordance with Article 26 of the Civil Code of the Russian Federation.
5.3. The Operator does not knowingly collect data of persons under 13. If registration of a user under 13 is discovered, the account and all personal data will be immediately and irreversibly deleted from the servers of HOSTKEY LLC and Yandex.Cloud LLC.
The user has the right to:
Obtain information about which of their data are stored by the Operator.
Request clarification (correction) or blocking of data if they are incomplete, outdated or inaccurate.
Withdraw consent to data processing (see Section 7).
The user may at any time withdraw consent to data processing by fully deleting their account via the KarboAI application interface or by sending a written request to support@karboai.com.
The Operator undertakes to fully destroy the user’s data on the servers of HOSTKEY LLC and Yandex.Cloud LLC within 30 calendar days from receipt of the withdrawal of consent.
Public user content (posts, comments in public chats) published before account deletion may remain in anonymized form (without linkage to name and profile) to preserve discussion integrity, provided this does not violate the author’s rights.
KarboAI is a user-generated content platform.
8.1. Publication of materials containing cruelty, drug propaganda, hate speech, scenes of sexual violence, or content that infringes third-party copyright is strictly prohibited.
8.2. The Operator does not perform pre-moderation, but applies post-moderation and a user reporting system. A user may report any material or profile.
8.3. The Operator reserves the right to immediately and without prior notice remove prohibited content and block accounts of violators to maintain community safety.
The Operator takes necessary organizational and technical measures to protect personal data against unlawful access, destruction, alteration and blocking. Data are transmitted using SSL/TLS encryption.
The Operator reserves the right to amend this Policy. A new version becomes effective upon publication in the Application or on the Website, unless otherwise provided by the new version. By continuing to use the Application after changes, the User expresses consent to them.
This policy is effective as of 2026-07-27
If you have questions about this Privacy Policy or wish to exercise your rights, contact us via the support site or email.
support.karboai.com© 2026 KarboAI. All rights reserved.