Consent to the processing of personal data

For an account in the Pora app (com.malkvlab.pora).
Version dated 20 October 2026.

By tapping the "Get code" button on the sign-in screen in the Pora app, I give Kirill Maluzenko, sole proprietor (individual entrepreneur registered in Russia; OGRNIP 325784700278800, INN 781142818837; "the operator" below), my consent to the processing of my personal data. I give this consent freely, of my own will and in my own interest, as Russian law puts it.

The account is intended for people who are 18 or older.

Purposes

To create my account, let me sign in to it with a code from an email, and reply to my requests.
To keep a cloud backup of my reminders and restore it on my command.

What data

email address;
account information: date of creation, the accepted versions of the terms of use and of this consent with their dates, whether consent to emails about what is new has been given and where;
internal account and sign-in information: internal account number, whether the address is confirmed, how the account was created, pricing plan, which phone saves the backup, a counter of unfinished restores, whether the account is blocked while a request or a breach of the terms is being checked, records of code requests and attempts to enter a code, check values (one-way hashes) of codes and sign-in keys;
information about sign-ins: phone manufacturer and model, app build number, the month of sign-in and the month of last use;
cloud backup: reminders with their texts, emoji and schedules, response history with notes, app settings that are not tied to the phone, the phone's time zone; the date, time and size of each backup, the manufacturer and model of the phone it was made from, and internal information about it: the app's format and database versions, the build number, internal storage keys;
my emails to the operator: the address they were sent from and their text.

The operator does not request health information or other special categories of personal data and does not single them out from what I write in reminders and notes.

What the operator does with the data

The operator will collect, record, organise, accumulate, store, update (clarify), retrieve, use, transfer to the contractors named below, block, delete and destroy the data, using automated means. These are the processing operations listed in Article 3 of Russian Federal Law No. 152-FZ on Personal Data.

Who the operator entrusts with processing

Yandex.Cloud LLC, INN 7704458262, 16 Lva Tolstogo St., Moscow 119021 (the Yandex Cloud service): the server that runs accounts and stores backups; storage for the server's internal backups; the Postbox service, which sends emails with the sign-in code and service emails about the account.
Yandex 360 for Business LLC, INN 9704259180, 11 Timura Frunze St., bldg. 44, Moscow 119021: the mailbox that receives requests and from which replies are sent.

The data is stored in Russia.

Duration

The consent is valid from the moment I request a code. Once the account is created, the consent is valid for as long as the account exists. After the account is deleted:

the data stays in the internal database backups for up to 14 more days and is then erased;
a deletion record is kept for three years: the internal account number, a one-way (irreversible) code derived from the email address (it can be used to check whether a given address had an account, but the address itself cannot be recovered from the code), the date and method of deletion, the number of backups deleted, the dates and versions of the accepted texts and where in the app they were accepted, and the records of consent to emails about what is new, including withdrawn consent. It confirms that the account was deleted. The operator keeps this record not on the basis of this consent: it is required by the Roskomnadzor order on confirming the destruction of personal data, and it allows the operator to prove that consent was given.

How to withdraw

Delete the account: in the app - "Settings" → "Profile" → "Delete account" → "Delete", or by email from the account address to support@pora.malkvlab.com. The account cannot work without this consent, so withdrawing the consent means deleting the account and the backup. The app and the reminders on the phone remain.

Consent to emails about what is new in Pora is separate: it is given with the checkbox on the sign-in screen, the "Emails from Pora" line in the profile or the card on the "Today" screen.

Details of what data is processed, where it is stored and how to delete it are in the privacy policy: malkvlab.com/pora/privacy/en/.

This consent is published in Russian and English. If the versions differ, the Russian version prevails.