Help · mappa

Privacy Policy

For the MAPPA mobile app and the website https://mappa.com.ru
Effective Date: July 6, 2026

1. General Provisions

This Privacy Policy (hereinafter referred to as the “Policy”) sets forth the procedures for processing and protecting the personal data of users of the MAPPA mobile app (hereinafter referred to as the “App”) and the website https://mappa.com.ru (hereinafter referred to as the “Website”).

By using the App or the Website, the User confirms that they have read this Policy and agree to the terms set forth herein.

2. Data Controller

Sole Proprietor Vasily Stanislavovich Kholodnov
OGRNIP: 323665800182433
INN: 665819217419
Email: support@mappa.com.ru
Website: https://mappa.com.ru

3. Legislation

Personal data is processed in accordance with:

When using certain foreign services, data processing may also be governed by the laws of the countries in which those services are located.

4. What Data We Collect

4.1 Registration Data

When you create an account, the following data may be processed:

Passwords are never stored in plain text and are stored exclusively as cryptographic hashes.

4.2 Profile Data

The user may provide:

4.3 Geolocation Data

The app uses:

When geolocation is used

Location is determined only while the App is actively in use ("While Using the App" permission). The App does not collect location data in the background and does not record the User’s route history.

Geolocation is used exclusively for the following features:

Only the User’s last known location is stored on the server — each update overwrites the previous value.

Users have the right to disable geolocation sharing in the App settings or to revoke the permission through their operating system; their location then stops being visible to other users.

4.4 Chat

To ensure the chat functions properly, the following may be processed:

Messages are transmitted over a secure channel (TLS) and stored on the Operator’s server for delivery and synchronization across the User’s devices. End-to-end encryption is not used in the current version of the App. Message content is not used for advertising purposes and is not shared with third parties, except in cases provided for by law.

4.5 Friends

Users can add friends:

A user’s location information is available exclusively to verified friends, unless the user has restricted this access through privacy settings.

4.6 Technical Information

The following may be collected automatically:

5. Purposes of Personal Data Processing

Personal data is used exclusively for:

5.1. Legal Bases for the Processing of Personal Data

The Operator processes Users’ personal data on the following legal grounds:

In cases where the processing of certain categories of personal data requires obtaining separate consent from the User in accordance with the laws of the Russian Federation or the requirements of operating systems and app stores, such consent is requested prior to the commencement of the relevant processing.

The use of the App’s features related to the processing of geolocation data is carried out exclusively after the User grants the appropriate permission via the device’s operating system settings. The App requests location access only for the time the App is in use. The User has the right to revoke such permission at any time through their device settings; however, certain features of the App may become unavailable.

6. Third-Party Services Used

Third-party services are used to enable the App to function, specifically: Google Maps Platform, Yandex Maps API, the OSRM routing service, the Expo push notification service, as well as Google Sign-In and Sign in with Apple for account login.

These services may receive certain technical information necessary to provide their respective services, including IP addresses, device data, location information, and other technical information to the extent necessary for the operation of the respective services. Data processing by these services is carried out in accordance with their own privacy policies.

7. Cookies and Local Storage

The Website and the App use Cookies, Local Storage, and Session Storage. These are necessary for authentication, saving user settings, speeding up the application, and ensuring security.

8. Analytics

In-house technical logs on the Operator’s servers are used to analyze the app’s performance. Analytical data is used exclusively for detecting errors, improving performance, and improving the stability of the app.

The App does not use advertising or tracking SDKs, does not build an advertising profile of the User, and does not share personal data with third parties for advertising purposes or with data brokers. No tracking, as defined by the App Store guidelines, takes place.

9. Transfer of Personal Data

Personal data may be transferred to mapping service providers, cloud infrastructure providers, and to government agencies in cases provided for by law.

Personal data is transferred to third parties only to the extent necessary to provide the relevant services or to comply with legal requirements.

10. Cross-Border Data Transfer

The primary processing and storage of personal data takes place within the territory of the Russian Federation. The application’s servers are located within the Russian Federation (St. Petersburg, hosted by Timeweb).

When using Google Maps Platform, Expo, Apple, and other foreign services, cross-border transfer of certain categories of data may occur in accordance with Article 12 of Federal Law No. 152-FZ. By using the application, the User consents to such transfer to the extent necessary for the operation of the relevant services.

11. Localization of Personal Data

The initial collection, recording, organization, accumulation, storage, updating, and retrieval of personal data of citizens of the Russian Federation are carried out using databases located within the territory of the Russian Federation, in accordance with Article 18(5) of Federal Law No. 152-FZ.

12. Data Retention Period

Personal data is stored for the period necessary to achieve the purposes of processing.

After an account is deleted:

13. Deleting an Account

The user has the right to delete their account independently using the app’s features. Once deleted, it may not be possible to restore the account.

14. Security

To protect personal data, we employ modern organizational and technical security measures, including:

Despite the measures taken, absolute security of information transmission over the Internet cannot be guaranteed.

15. User Rights

The user has the right to:

15.1. Procedure for Exercising User Rights

The User has the right to contact the Operator regarding the processing of their personal data, including obtaining information about such processing, clarifying, correcting, or restricting the processing of personal data, withdrawing consent, and requesting the deletion of personal data in cases provided for by the legislation of the Russian Federation. Requests are accepted via email at: support@mappa.com.ru.

To ensure the security of personal data, the Operator has the right to request information that allows the User to be identified and to confirm their right to receive the relevant information.

The Operator reviews User requests within the timeframes established by the legislation of the Russian Federation. Information regarding the existence and processing of personal data is provided to the User no later than 10 business days from the date of receipt of the request. This period may be extended by no more than 5 business days, provided that the User is sent a reasoned notice specifying the grounds for the extension.

Upon receiving a request to correct, block, or delete personal data, the Operator takes the necessary measures in accordance with the procedures and timeframes established by the legislation of the Russian Federation. If it is impossible to comply with the request for reasons provided for by law, the User is sent a reasoned response specifying the relevant grounds.

The User also has the right to:

If the User disagrees with the Operator’s actions, the User has the right to contact the authorized state body for the protection of the rights of data subjects or to defend their rights in court in accordance with the legislation of the Russian Federation.

16. Age Restrictions

The App is intended exclusively for individuals who are at least 18 years of age. The Operator does not intentionally collect personal data from individuals under the specified age.

17. Changes to the Policy

The Operator reserves the right to amend this Policy. The new version takes effect upon its publication at: https://mappa.com.ru/privacy-policy, unless a different effective date is specified in the new version.

18. Contact Information

For all questions related to the processing of personal data, the User may contact:
Sole Proprietor Vasily Stanislavovich Kholodnov
Email: support@mappa.com.ru
Website: https://mappa.com.ru

If you have any remaining questions about account deletion or data processing, please write to us at support@mappa.com.ru.