Privacy Policy

The data controller is the Dharana project. Contact for personal data matters: support@dharana.ru.

This Policy is drafted in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and other applicable legislation of the Russian Federation.

By using the website, app or bots, you confirm that you have read this Policy. Processing that requires consent is carried out only after such consent is obtained. If you disagree with this Policy, please stop using the service.

We may update this Policy. The current version is always available on this page; the effective date is shown at the top of the document.

• Personal data — any information relating directly or indirectly to a user.
• Processing — collection, recording, systematisation, accumulation, storage, clarification (updating, changing), extraction, use, transfer, anonymisation, blocking, deletion and destruction of data.
• User — a person using the project’s website, mobile app or bots.
• Cookies — small text files stored by the website in the user’s browser.

We collect only the data needed to operate the service and do not seek to collect more than necessary.

• Account data: name, email address, password hash, username, profile bio, avatar, interface language and time zone.
• Third-party sign-in data: identifiers and public profile data from Google, VK, Yandex and Telegram (name, username, email, avatar) to the extent provided by the relevant provider.
• Practice data: selected asanas and sequences, session history and duration, practice dates, streaks, favourites, asana-of-the-day settings and statistics.
• Subscription and payment data: subscription status, term, payment and receipt identifiers. Bank card details are processed by the payment provider; we do not store them.
• Technical data: IP address, device and browser type, operating system, language, time zone, pages and interface elements visited, date and time of access, referral source.
• Analytics data: website events and behaviour, including Yandex Metrica data — only if you consent to analytics cookies.
• Support messages: the content of messages and contact details you provide.

We do not collect special categories of personal data (health, religion, political views, etc.) and do not ask you to provide them. If you voluntarily mention such information in correspondence, we process it only to respond to your request.

• Registration, authentication and account management.
• Providing website, app and bot features, and storing practice history and statistics.
• Personalising content, interface and settings.
• Purchasing, renewing and servicing subscriptions and payments.
• Responding to requests and providing support.
• Security, abuse prevention and technical diagnostics.
• Product improvement and usage analysis — based on consent to analytics cookies.
• Service and informational messages; you can opt out of informational newsletters.

• Performance of the contract with the user — providing access to the service and its features.
• User consent — analytics cookies, certain newsletters and other processing for which the law requires consent.
• Legitimate interests — security, fraud prevention and service improvement, provided that users’ rights are not violated.
• Compliance with legal requirements.

Necessary cookies enable sign-in, security, saving settings (theme, language, consent choice) and the operation of the website. They are used without separate consent because they are essential to the service.

Analytics cookies and Yandex Metrica help us understand how the website is used and make it more convenient. They are enabled only after you click “Accept all” in the cookie banner.

You can decline analytics with the “Necessary only” button, change your decision via “Cookie settings” in the website footer, or delete site data in your browser. Disabling analytics cookies does not restrict access to the main features.

We do not use cookies for advertising targeting and do not share Yandex Metrica data for advertising.

We do not sell personal data or share it with third parties for their own marketing purposes.

Data may be shared with providers that support the service: hosting and infrastructure, the payment provider, the email delivery service, Yandex Metrica (analytics with consent) and Telegram (when using the bots). Sharing is limited to what is necessary to provide the services and is subject to confidentiality obligations.

Data may be disclosed to public authorities upon a lawful request and used to protect the rights and legitimate interests of the project in the event of a dispute.

When transferring data outside the Russian Federation, we take the measures required by personal data legislation.

• Account and practice data is stored while the account is active and is deleted or anonymised after account deletion, unless otherwise required by law.
• Technical logs — no longer than 12 months, unless a longer period is required for security.
• Consent records — for the duration of consent and for 3 years after withdrawal to confirm legal compliance.
• Payment data — for the periods established by accounting legislation.
• Data required to comply with legal requirements may be retained longer.

• Obtain information about the processing of your personal data.
• Request clarification, blocking or deletion of data that is incomplete, outdated, inaccurate or unlawfully obtained.
• Withdraw consent to personal data processing.
• Object to processing based on legitimate interests.
• Request a copy of your data in a machine-readable format.
• Lodge a complaint with Roskomnadzor or a court.

To exercise your rights, email support@dharana.ru. We respond within the periods established by law (usually within 10 business days) and may ask you to confirm your identity so that data is not disclosed to third parties.

You can request deletion of your account and related data at support@dharana.ru. After deletion, data may remain in backups for a limited time and to the extent required by law.

We use HTTPS encryption, password hashing, access restrictions, logging and organisational safeguards. Access to personal data is granted only to those who need it to operate the service.

No method of transmission or storage guarantees absolute security. In the event of an incident, we take the necessary measures and notify users where required by law.

The service is not intended for children under 18 without the consent of a legal representative. If you are a legal representative and believe a child’s data is processed without consent, contact us and we will delete it.

We may update this Policy. Material changes are published on this page with a new effective date. Continued use of the service after the changes take effect means that you have read the new version, unless otherwise required by law.

Policy version: 1.0.

• Email: support@dharana.ru
• Website: https://dharana.ru
• We respond to personal data requests within 10 business days.