Privacy Policy

Last updated: 2026-10-04. Applies to the MiyRayon app ("My District", a Telegram Mini App) and the website miyrayon.com. The Ukrainian version is the primary text.

1. Who processes the data

The operator is ФОП Герасименко Сергій Юрійович, Одеса (the "Operator"). Data requests: support@miyrayon.com. A business you contact through the app is a separate data controller for its own customers' data.

2. What we process and why

• Telegram: your Telegram ID and profile name, to recognize you at sign-in. We have no passwords.
• District and residential complex: the one you choose, so we show the directory for your area.
• Place cards and content: photos and data you add yourself (for example as a directory contributor or a business owner), to publish a place card.
• Orders and bookings: data needed to fulfil an order or booking (selected items, time, status), visible to the business or professional you contacted. The exact fields depend on the feature you use.
• Geolocation: only on your action and with your permission in Telegram or the browser (for example to drop a pin on the map). There is no background tracking. If you decline, pick a point on the map manually.
• App usage events (opening the app, search, viewing a place card), to understand whether the app is useful. They are linked to your ID, without phone number or address.
• Google Calendar data, only if a professional connects their own calendar; see section 3.

3. Google Calendar data

This feature is optional and available to professionals who connect their calendar by clicking "Allow" on the Google consent screen.

• Access requested: a single scope, https://www.googleapis.com/auth/calendar.events.freebusy ("See the availability on Google calendars you have access to").
• What we read: only "busy" time intervals (start, end, an all-day flag) of the primary calendar.
• What we do not read: event titles, descriptions, attendees, locations, meeting links or any event content.
• Why: solely to hide busy times from clients and prevent double bookings with the professional. There is no other purpose.
• What we store: an access token in an encrypted store, and the busy intervals themselves (start and end). Tokens are never written to logs.
• Who receives it: nobody. Calendar data is not sold, not transferred to third parties, and not used for advertising, profiling or training AI models. Operator personnel do not read it, except where necessary for security, to investigate abuse, or where required by law.
• How to revoke and delete: press "Disconnect" in the app. We stop push notifications, revoke the token with Google, erase the stored token and delete the stored busy intervals. You can also revoke access at any time at myaccount.google.com/permissions; the token then stops working and any stored intervals are purged automatically within 24 hours.

MiyRayon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Retention

Account data is kept while the account is active. After a deletion request the account is anonymized. The action log keeps anonymized identifiers and the fact of an action; the right to deletion does not remove it. Data we are legally required to keep (for example accounting records) is kept for as long as the law requires.

5. Sharing

We do not sell personal data and we do not show ads. Data is stored on the Operator's servers. A business or professional receives only the data needed for your order or booking. Telegram processes data under its own rules. The website miyrayon.com is hosted on Cloudflare, and the support@ mailbox works through Cloudflare Email Routing forwarding. Data may be disclosed to authorities where the law requires it.

6. Your rights

You may ask what data we hold about you, have it corrected, withdraw consent, object to processing and request deletion (Ukrainian Law on Personal Data Protection; where applicable, GDPR rights). In the app: Settings → "About" → "Delete my data", or email support@miyrayon.com. We respond within 30 days.

7. Website, cookies, analytics

This website uses no cookies, trackers, analytics, advertising pixels, or third-party fonts and scripts. The hosting provider may keep technical request logs (IP address, time) for security and operation.

8. Children

The app is not intended for children under 14 and we do not knowingly collect their data.

9. Changes

We may update this policy; the current version date is shown at the top. We will announce material changes in the app.

10. Contact

ФОП Герасименко Сергій Юрійович, Одеса · support@miyrayon.com