Privacy Policy for the Kadrovy Rabotnik appEffective date: October 14, 2026This Privacy Policy describes how personal data is collected, used, stored, protected and deleted when you use the Kadrovy Rabotnik mobile application for Android and iOS (the “App”) and the server that supports it (together, the “Service”). The App lets HR professionals and other users register an account, send questions to a lawyer on labour and personnel matters, and discuss those questions with a specialist in a chat.
We wrote this policy to be readable. It explains exactly what the App does with your information, without vague promises. It is drafted in accordance with Russian Federal Law No. 152-FZ “On Personal Data” and also takes into account the requirements of Google Play and the Apple App Store. Please read it carefully. By creating an account you confirm that you have read this policy and consent to the processing of your personal data as described below.
1. Who we are. We are the operator (data controller) of your personal data. This means we decide why and how your data is processed and are responsible for processing it lawfully.
For any question about this policy or your personal data, write to kadrovikhelp@gmail.com. All contact options are listed in section 19.
2. Key terms- Personal data is any information that relates to you directly or indirectly, such as your name, email address or phone number.
- Processing is any action with personal data, including collection, recording, storage, use, transfer, deletion and destruction.
- User or you means a person who has installed the App or created an account.
- Specialist means a lawyer or consultant who answers questions on our behalf. Specialists use accounts with administrator rights in the Service.
- Account means your user profile in the Service, protected by your email address and password.
3. Data we collectWe collect only the data needed for the App to work. Almost all of it is information you enter yourself.
3.1. Account data you provide when signing upData | Required | What it is used for |
First and last name | Yes | Shown in your profile and to the specialist who answers your question |
Email address | Yes | Your login. We also use it to contact you about your requests |
Password | Yes | Signing in. Only a one-way hash is stored, never the password itself |
Company name | No | Gives the specialist context for your question |
Job title | No | Gives the specialist context for your question |
Phone number | No | Contacting you about your request if needed |
You can add a profile photo if you want to. It is uploaded as a JPEG, PNG or WebP image of up to 5 MB and stored on our server. When you replace the photo, the previous file is deleted. If you do not upload a photo, the App shows your initials instead.
3.3. Questions and messagesWhen you ask a question, we store its title, category, description and the time it was created. When you write in the chat for a question, we store the text of each message, the time it was sent and whether the recipient has read it. Please do not include more personal information in your questions than the specialist needs to understand the situation. In particular, avoid passport details, health information or data about third parties unless they are essential.
3.4. Technical dataLike most internet services, our web server may automatically record technical information about each request in its logs. This includes the IP address, the date and time of the request, the requested address and the response code. We use these logs only to keep the Service running, diagnose errors and protect it from abuse. We do not use them to build user profiles.
After you sign in, the server issues an access token that the App stores on your device and sends with each request. The token only identifies your account and your role.
4. Data we do not collectTo be clear, the App does not:
- access your location;
- read your contacts, calendar, call log or messages;
- use your camera or microphone;
- collect advertising identifiers (such as Google Advertising ID or Apple IDFA);
- contain third-party analytics, crash-reporting or advertising SDKs;
- track your activity in other apps or on websites;
- collect payment or bank card information.
5. How and why we use your dataWe use your personal data only for the following purposes:
- Providing your account. We register you, let you sign in and keep you signed in, and display and update your profile.
- Answering your questions. We pass your questions to specialists, show you their answers and keep the history of your conversations so you can return to them.
- Communicating with you. We reply to your requests and messages, including requests about your personal data.
- Keeping the Service secure and working. We prevent unauthorised access, detect errors and abuse, and maintain the technical operation of the server.
- Meeting legal obligations. We comply with requirements of the laws of the Russian Federation, including lawful requests from authorities.
We do not use your data for advertising, do not sell it and do not make decisions about you based solely on automated processing.
6. Legal basis for processingWe process your personal data on the following grounds:
- your consent, which you give when you create an account. You may withdraw it at any time (see section 14);
- performance of the agreement between you and us for using the Service. Without your account data we cannot provide the App’s functions;
- legal obligations, where the law requires us to process or retain certain data;
- our legitimate interests in keeping the Service secure and working properly, for technical logs.
7. Device permissionsThe App requests only the following permissions:
- Internet access is needed to connect to our server. It is granted automatically on Android.
- Photo library access is requested only when you tap to choose a profile photo. Only the one image you select is uploaded. The App does not scan, read or upload any other files. You can deny or revoke this permission at any time in your device settings. The rest of the App will keep working.
8. Who can see your data- You can see all of your profile data, questions and messages.
- Specialists can see the questions sent to them, the related chat messages and the profile information needed to understand them (name, company, job title and contact details). Other users cannot see your questions or messages.
- Profile photo: the image file is served from our server by its address. Anyone who obtains that direct link could open the image, so please do not use a photo you would not want to show.
- Our technical staff may access the server and database only when needed to maintain the Service, fix errors or respond to your requests.
9. Third parties and service providersWe do not sell, rent or trade your personal data, and we do not share it with third parties for their own marketing. Your data may be handled by third parties only in the following cases:
- Hosting provider. Our server is hosted by a hosting provider. The provider stores the data on our behalf and has no right to use it for its own purposes.
- App stores. Google Play and the Apple App Store distribute the App. They may collect data in line with their own privacy policies, for example when you download the App or send a crash report through the system. We do not control that processing.
- Legal requirements. We may disclose data if the laws of the Russian Federation require it, for example in response to a lawful request from a court or a government authority.
- Change of ownership. If the Service is transferred to another operator, your data may be transferred too. The new operator will be bound by this policy, and we will notify you in advance.
10. Where your data is storedYour data is stored in a database and file storage on our server. Data on your device is limited to the access token, which is kept in the system’s secure storage, and to temporary data the App needs to display screens.
11. How we protect your dataWe take reasonable technical and organisational measures to protect your data from unauthorised access, alteration, disclosure and destruction:
- all traffic between the App and the server is encrypted with HTTPS (TLS);
- passwords are stored only as salted bcrypt hashes. Nobody, including us, can see your password;
- the access token is stored in the device’s secure storage: Keychain on iOS, Keystore-backed encrypted storage on Android. The token expires after 30 days, after which you need to sign in again;
- every request to your data is checked on the server. A user can access only their own questions and messages;
- uploaded files are limited by type and size;
- access to the server is restricted to authorised personnel.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You can help by choosing a strong password that you do not use anywhere else and by not sharing your device or account with others.
12. How long we keep your data- Account data, profile photo, questions and messages are kept for as long as your account exists. They are deleted immediately when you delete your account.
- Technical server logs are kept only for as long as needed for security and diagnostics, and are then deleted or overwritten.
- Data we must keep by law is kept only for the period required by law and only to the extent required.
Backup copies, if made, are overwritten as they rotate. Deleted data disappears from them over time and is not restored to active use.
13. Deleting your account and dataYou can delete your account yourself at any time, right in the App:
- Open the App and sign in.
- Go to Profile.
- Tap Delete account and confirm.
When you confirm, the following are deleted from our server immediately and permanently: your profile (name, email, company, job title, phone number and password hash), your profile photo, all your questions and all messages in their chats. This action cannot be undone. If you want to use the App again later, you will need to create a new account.
If you can no longer access the App, for example because you deleted it or forgot your password, send a deletion request to kadrovikhelp@gmail.com from the email address linked to your account. We will confirm that the request comes from you and delete your data within 30 days.
14. Your rightsUnder the laws of the Russian Federation and, where applicable, other data protection laws, you have the right to:
- get information about whether we process your data, what data we hold, why, and how long we keep it;
- get a copy of your personal data;
- correct inaccurate or incomplete data. You can change your name, company and job title in the Profile screen. To change your email address or phone number, contact us;
- delete your data (see section 13);
- withdraw your consent to processing at any time. In practice this means deleting your account, because the App cannot work without the account data. Withdrawing consent does not affect processing carried out before it;
- object to or restrict processing in cases provided by law;
- complain to the data protection authority. In Russia this is Roskomnadzor. You can also go to court.
To exercise any of these rights, email kadrovikhelp@gmail.com. We will reply within the time limits set by law and no later than 30 days. We may ask you to confirm your identity so that we do not disclose your data to someone else.
15. ChildrenThe App is a professional tool intended for adults. It is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
16. Cookies and trackingThe App does not use cookies, tracking pixels or similar technologies, and it does not track you across other apps or websites. This privacy policy page does not set cookies either.
17. Data breachesIf a security incident affects your personal data, we will take immediate steps to contain it and reduce the harm. We will notify the competent authority and, where required, the affected users within the time limits set by law.
18. Changes to this policyWe may update this policy when the App changes or the law requires it. The current version is always published on this page, and the effective date at the top shows when it was last changed. If the changes are significant, for example if we start collecting new types of data or using data for new purposes, we will tell you in the App or by email before they take effect. Where required, we will also ask for your consent again.
19. Contact usIf you have questions about this policy, want to exercise your rights or want to report a privacy concern, contact us:
- Operator: Kristina Polikarpovna
- Email: kadrovikhelp@gmail.com
We aim to answer all requests as quickly as possible.
