← Back to home RU EN

Privacy Policy

Effective from 06.08.2026

This Privacy Policy (the “Policy”) sets out how personal data of users of the EchoDay mobile application and service (the “Service”) is processed and protected. It applies to all information the Operator may obtain about a user while the Service is used.

The Policy is drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and other regulatory acts of the Russian Federation in the field of personal data processing.

By using the Service, completing registration and providing personal data, the user confirms their consent to the terms of this Policy. If the user does not agree with the Policy, they must stop using the Service.

1. Terms and the operator

Personal data — any information relating to a directly or indirectly identified or identifiable user of the Service.
Processing of personal data — any action or set of actions performed with personal data (collection, recording, storage, modification, use, deletion, etc.).
Operator — the person who organises and carries out the processing of personal data.
User — a natural person who uses the Service.

The operator of personal data is: Individual Entrepreneur Iluhin Pavel Evgenievich, INN 575206136965, OGRNIP 304575201900030, address: 302023, Orel, ul. Razdolnaya 26, apt. 134, Russia. Contact email: info@iluhin.pro.

2. What personal data we process

Depending on the features used, the Operator processes the following categories of data:

Registration data: mobile phone number (used for passwordless sign-in by call).
Profile data: display name, profile image (avatar), user settings.
User content: video circles, reactions, comments (“echo”), follows and other actions within the Service.
Technical data: device and operating system information, application identifiers and push tokens, IP address, date and time of requests, and Service logs.
Subscription data: the status of the “Echo+” subscription and purchases, and confirmation of payment. Payment card details are neither collected nor stored by the Operator — payment is processed on the app stores’ side.
Website data: technical information obtained when visiting echoday.ru (see the section on cookies).

The Operator does not process special categories of personal data (race, political views, health, etc.) and does not request them from users.

3. Purposes of processing

Personal data is processed solely for the purposes of:

registering and authenticating the user in the Service (sign-in by phone number);
providing the core features of the Service: publishing and delivering video circles, reactions, comments, follows and notifications;
operating the “Echo+” subscription and purchasing themed reaction packs, and verifying payment;
ensuring security, moderating user content, and preventing violations and abuse;
improving the quality and stability of the Service and analysing usage in an anonymised form;
communicating with the user about the Service and complying with legal requirements.

4. Legal grounds for processing

Personal data is processed on the following legal grounds:

the user’s consent to the processing of personal data, given upon registration and use of the Service;
performance of the Terms of Use between the user and the Operator;
the Operator’s legitimate interests in ensuring the operability and security of the Service, without infringing the rights of the data subject;
compliance with obligations imposed on the Operator by the legislation of the Russian Federation.

5. Consent and its withdrawal

By providing personal data upon registration and use of the Service, the user grants the Operator consent to process it under the terms of this Policy.

The user may withdraw consent to the processing of personal data at any time by sending a request to info@iluhin.pro or by deleting their account in the Service. Withdrawal of consent entails the cessation of the use of the relevant features of the Service.

6. Processing and storage periods

Personal data is processed throughout the entire period of use of the Service (for as long as the user’s account exists).

After the account is deleted, personal data and user content are deleted or anonymised within a reasonable technical time frame, except for data that the Operator is required to retain under the legislation of the Russian Federation for the periods it establishes.

7. Storage of data within Russia

In accordance with Part 5 of Article 18 of Federal Law No. 152-FZ, the recording, systematisation, accumulation, storage, clarification and retrieval of the personal data of citizens of the Russian Federation are carried out using databases located within the territory of the Russian Federation.

The servers and infrastructure of the Service are hosted with a hosting provider within the territory of the Russian Federation.

8. Transfer of data to third parties

The Operator does not sell personal data and does not transfer it to third parties, except where this is necessary for the operation of the Service or required by law. Engaged processors act on the Operator’s instructions and are obliged to maintain confidentiality:

Telecom provider (sms.ru) — to confirm sign-in via an incoming call (flash-call); the phone number is transferred.
RuStore and the App Store — app stores that process payments for the “Echo+” subscription and purchases, and verify payment.
Yandex AppMetrica — analytics and crash reporting: anonymised usage events, device/app technical data, and a profile identifier as a UUID (no phone number or full name). Processing is carried out on Yandex infrastructure within the Russian Federation.
Push notification services (Firebase Cloud Messaging, RuStore Push) — to deliver notifications; device push tokens are transferred.

Personal data may also be provided to authorised state bodies on the grounds and in the manner established by the legislation of the Russian Federation. The Operator does not carry out cross-border transfer of personal data.

9. Protection of personal data

The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, distribution and other unlawful actions. In particular, passwordless sign-in, access control, encryption of data transfer channels and server-side enforcement are applied.

10. Rights of the data subject

The user has the right to:

obtain information concerning the processing of their personal data;
request the clarification, blocking or deletion of their personal data if it is incomplete, outdated, inaccurate or unlawfully obtained;
withdraw consent to the processing of personal data;
appeal the actions or omissions of the Operator to the authorised body for the protection of the rights of data subjects (Roskomnadzor) or in court.

To exercise these rights, the user may contact the Operator at info@iluhin.pro.

11. Account and data deletion

The user may delete their account using the Service or by sending a request to info@iluhin.pro. When the account is deleted, the associated personal data and user content are deleted or anonymised, subject to the periods specified in section 6.

12. Age restrictions

The Service is intended for users aged 14 and over. Persons who have not reached the age at which they may independently give consent to the processing of personal data use the Service with the consent of their legal representatives in the cases provided for by the legislation of the Russian Federation.

If the Operator becomes aware of the collection of data of a person below the permitted age without the consent of a legal representative, such data will be deleted.

13. Cookies and the website

The echoday.ru website is informational (the landing page, this Policy and the Terms of Use) and may use technically necessary cookies and server logs to ensure operation and security. The website does not use third-party advertising trackers. The user can restrict the use of cookies in their browser settings.

14. Changes to the Policy

The Operator may make changes to this Policy. The current version is always available on this page, indicating the effective date. Continued use of the Service after changes are made signifies the user’s acceptance of the updated Policy.

15. Contacts

For any questions related to the processing of personal data, and to exercise their rights, the user may contact the Operator:

Operator: Individual Entrepreneur Iluhin Pavel Evgenievich, INN 575206136965, OGRNIP 304575201900030.
Address: 302023, Orel, ul. Razdolnaya 26, apt. 134, Russia.
Email: info@iluhin.pro.

The current version is always published on this page, indicating the effective date. Terms of Use: echoday.ru/en/terms.