Privacy Policy

1. Data we process

• Account: username, first and last name (as entered), email, phone number, password (hashed only), profile picture and cover, bio, country.
• Sign-in and security: session data (IP address, browser, device and OS, country by IP, sign-in time), security event log, two-factor settings, passkey public keys. Passkeys and authenticator codes stay on your device.
• Third-party sign-in: Telegram ID and name; Yandex ID email, phone and ID — to the extent you allowed.
• Content and communication: posts, comments, reactions, chat messages and attachments, uploaded images, audio and lyrics, communities, subscriptions, friends; unsent drafts of messages and posts (kept on the device and on our servers so they can be shown on the User's other devices, and deleted when sent or published, when the cache is cleared in settings, or when the account is deleted).
• Usage: Pulse listening history and likes, playlists, bookmarks, presence status (visibility is configurable), Cinema viewing data.
• Wallet: accounts, balances and transaction history of anci tokens, top-up and withdrawal orders (payout details as required by the chosen method).
• Calls: technical connection data (time, participants, IP addresses used to connect). Call content is not recorded.
• Device and notifications: push token, device model and OS, app settings; notification history in the account (who did what, a link, a short preview; read items are deleted after 90 days); one-time sign-in codes are stored encrypted for no longer than their validity (5 minutes).
• Location — only if you allow it, to show the weather. Coordinates are used for the forecast request and not stored in your profile.
• Anonymous visit statistics: cookies and Yandex Metrica — see the Cookie Policy.
• Support requests: email correspondence.

We do not intentionally collect special categories of data (race, political views, religion, health, sex life) or biometric data.

2. Purposes and legal grounds

We process data to register and protect your account; operate the Services (publishing, message and notification delivery, calls, music playback, Wallet operations); provide personalised recommendations; moderate content and handle complaints; comply with the law; compile anonymous statistics; and inform you about the Services. Legal grounds: your consent, performance of the Terms of Service, legal obligations, and data you made public yourself.

3. Sharing

We do not sell personal data. Data is shared only as needed to operate the Services:

Transfers to Google LLC (USA) and Telegram FZ-LLC (UAE) are cross-border and are based on your consent. You can avoid them by turning off push notifications and not using Telegram sign-in. Personal data of Russian citizens is recorded and stored in databases located in the Russian Federation.

4. Retention

Account data and content — while the account exists, deleted within 30 days after account deletion (except data we must keep by law); session data — until sign-out, at most 60 days of inactivity; security log — up to 1 year; complaints and moderation records — up to 3 years; Wallet transaction records — as required by law; support requests — up to 3 years.

5. Your rights

You may request information about and a copy of your data, have inaccurate or unnecessary data corrected, blocked or deleted, withdraw consent, delete your account (how), and complain to Roskomnadzor or a court. Send requests to contact@zypo.cc with the subject [Personal Data]; we reply within 10 business days (extendable by 5 business days with notice).

6. Mobile apps

The apps ask for permissions only when a feature needs them and work without them if you decline: notifications (push), camera and microphone (calls, QR scanning in Wallet), location (weather), background playback (Pulse). The app stores your sign-in token, page and image cache and offline tracks on the device; clear them in Settings → Cache or by uninstalling the app.

7. Children and changes

The Services are for users aged 14 and over. We may update this Policy; a new version takes effect upon publication.