Privacy Policy

This Policy explains how personal data of Site users is processed and protected. The data controller is Butakov Maksim Vladimirovich (Self-employed (professional income tax payer, НПД)), the "Operator". Processing is carried out under Russian Federal Law No. 152-FZ "On Personal Data". The Russian-language version of this Policy is the legally governing text; this English version is provided for convenience.

By using the Site and paying for access to the Course, the user consents to this Policy.

1. Data we process

• Account data: email address, name, and password (stored as a cryptographic hash, the Operator cannot read it in plain text).
• Learning data: your progress through the Course (completed lessons, audio playback position).
• Technical data: IP address and access logs for Course materials, for security and content protection.
• Cookies: strictly necessary cookies for authentication and session. No advertising or third-party tracking cookies are used.
• Payment data is processed by the payment provider. The Operator does not receive or store bank card details.

2. Purposes of processing

• providing access to the Course and performing the agreement (the offer);
• identifying and authenticating you in the personal cabinet;
• tracking learning progress;
• protecting Course materials from unauthorized access and distribution;
• contacting you, support, and handling requests;
• meeting legal obligations, including tax obligations.

3. Legal basis

Processing is based on your consent, the necessity of performing the agreement to which you are a party, the Operator's legitimate interests (content protection and security), and the requirements of the law of the Russian Federation.

4. Sharing with third parties

The Operator does not sell personal data. Data may be shared with:

• the payment provider, to process payment;
• the hosting and infrastructure provider, to operate the Site;
• the tax authority, to the extent needed to issue a receipt and pay tax;
• others, only where required by law.

If infrastructure is located outside the Russian Federation, cross-border transfers comply with the requirements of 152-FZ.

5. Retention

Personal data is kept for as long as your account and Course access exist, and for periods required by law (including tax records). Once the purposes are fulfilled, data is deleted or anonymized.

6. Your rights

You have the right to:

• obtain information about the processing of your data;
• request correction, blocking, or deletion of your data;
• withdraw your consent;
• lodge a complaint with the supervisory authority (Roskomnadzor).

To exercise these rights, write to max@quidni.dev. Withdrawing consent may result in termination of access to the Course.

7. Security

The Operator takes the necessary legal, organizational, and technical measures: passwords are stored hashed, paid materials are served via short-lived signed links, access to materials is logged, and access rights are segregated.

8. Cookies

The Site uses only strictly necessary cookies for authentication and the personal cabinet. Disabling these cookies in your browser may prevent you from signing in.

9. Changes to this Policy

The Operator may amend this Policy. The current version is published on the Site with its effective date.

10. Operator contact

Butakov Maksim Vladimirovich
Self-employed (professional income tax payer, НПД)
Tax ID (ИНН): 540131536845
Email: max@quidni.dev