Privacy Policy

Effective date: June 9, 2026 · Last updated: June 9, 2026

This Privacy Policy explains how the Roovi mobile app (package md.vlalex.roovi) and the roovi.app website (the “Service”) collect, use, store and protect user information. By using the Service, you agree to the terms of this Policy.

1. Data controller

The controller that determines the purposes and means of processing personal data in the Service is [Company / sole proprietor name], [registration number], address: [legal address]. For any questions about data processing, contact [email protected].

2. Definitions

• Personal data — any information relating to a directly or indirectly identified individual.
• User — an individual using the Service (an administrator or an operator of a location).
• Organization — a business account in the Service that groups users, locations and the catalog.
• Processing — any operation on data: collection, recording, storage, use, transfer, deletion.

3. What data we collect

3.1. Account data

• user name;
• e-mail address;
• password (stored in a secured form by the authentication provider; we have no access to it in plain text);
• role (administrator or operator) and organization membership.

3.2. Organization and business data

Data you create while using the Service, which may contain personal data:

• organization name, locations and their addresses;
• item catalog, categories, tariffs, inventory numbers and photos of rental units;
• rental records (time, duration, status, payment method, item condition) and staff shifts;
• invitation codes and the list of organization members.

3.3. Technical data and identifiers

• device model, operating system version, language and theme settings;
• push notification token (Firebase Cloud Messaging);
• IP address and technical logs when accessing the servers;
• anonymized usage events and app crash reports (analytics and crash reporting).

3.4. Camera

The app requests camera access solely to scan QR and barcodes of rental units. Camera images are processed on the device in real time and are not stored or transmitted to the servers. Item photos that an administrator uploads voluntarily are stored in cloud storage and are treated as organization data (section 3.2).

3.5. Payment data

Subscription payments are processed via a third-party payment provider, Lemon Squeezy, LLC, acting as the merchant of record. Card details are entered on the provider's side; we do not receive or store full card data. We may only receive the fact, status and parameters of a payment (plan and billing period).

4. Purposes of processing

• registration and authentication of users, and role-based access control;
• providing the Service's functionality: rental tracking, timers, catalog, tariffs, shifts, reports;
• sending notifications about overdue rentals, time-up events and important updates;
• processing subscriptions and payments;
• ensuring security, preventing fraud and fixing failures;
• improving the Service based on anonymized analytics.

5. Legal bases

Processing is carried out in accordance with applicable data protection law, including, for users in Russia, Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, on the following bases: the user's consent; performance of a contract (the user agreement) for providing the Service; compliance with legal requirements; and the controller's legitimate interests in maintaining the operation and security of the Service.

6. Third parties and services we use

To operate the Service we use third-party providers that process data on our behalf:

We do not sell personal data to third parties. Data is shared with providers only to the extent necessary to deliver the relevant services. Review the providers' policies: Firebase/Google, Lemon Squeezy, Cloudflare.

7. Cross-border transfers

Some data may be processed on the servers of providers located outside the Russian Federation. Such transfers are carried out provided that adequate protection of data subjects' rights is ensured and/or based on your consent. [If applicable, specify the countries where servers are located and how data localization requirements under Article 18 of 152-FZ are met.]

8. Storage and retention

Data is stored for the duration of your use of the Service and until the purposes of processing are achieved. After an account or organization is deleted, data is deleted or anonymized within a reasonable period, except where retention is required by law (for example, for accounting and tax records of payments). On the free plan, rental history may be limited to 30 days.

9. Security

We apply organizational and technical safeguards: encryption of data in transit (HTTPS/TLS), storing passwords in a secured form, role-based access control, and access control to the cloud infrastructure. Despite these measures, no method of transmission or storage is completely secure.

10. Your rights

Subject to applicable law, you have the right to:

• obtain information about the processing of your data and a copy of it;
• request correction, blocking or deletion of inaccurate or unlawfully processed data;
• withdraw consent previously given;
• lodge a complaint with the competent data protection authority (in Russia, Roskomnadzor).

To exercise your rights, send a request to [email protected].

11. Account and data deletion

You can request deletion of your account and associated personal data by writing to [email protected] [or by using the in-app account deletion feature, if available]. Deletion of an organization by its administrator entails deletion of the associated business data. Some data may be retained to the extent and for the periods required by law.

12. Push notifications

The app sends notifications about overdue rentals and time-up events. You can disable them in your device's system settings or in the app settings. Notifications are delivered using a Firebase Cloud Messaging token bound to the device.

13. Children

The Service is intended for professional use and is not directed at individuals under 18. We do not knowingly collect data from minors.

14. Website, cookies and analytics

The roovi.app website uses your browser's local storage (localStorage) to save your preferences — the selected language and theme. This data is stored only on your device and is not used for tracking. The website is hosted by Cloudflare, which may keep technical access logs.

15. Changes to this Policy

We may update this Policy from time to time. The current version is always available at roovi.app/privacy with the date of the latest update. We will notify users of material changes in the app or by e-mail.

16. Contact

For questions about personal data processing and this Policy: [email protected].
Controller: [Company / sole proprietor name], address: [legal address].

← Back to home