← norma Privacy

> norma/privacy

Privacy Policy

Revision dated March 9, 2026

We consider it our duty to protect and respect your privacy.

This Privacy Policy describes the types of personal data we collect through mobile devices, the "Norma" mobile application (the "Application"), the website located at https://gaivoronskii.com/norma/ (the "Website"), and when providing related digital services and content on our own and third-party platforms.

Please carefully review the information below to understand our stance, principles, and methods of processing your personal data. By continuing to use our Application and services, you confirm that you have read this Privacy Policy and understand all its provisions.

We respect your right to privacy and will not request or collect more information than necessary to provide you with the services you request. Our primary goal is to ensure that the collection and use of personal data align with the services provided to you and comply with applicable data protection laws.

About Us

The operator of the "Norma" mobile application and the Website is the sole proprietor Gaivoronskii Andrei Vyacheslavovich
INN 260806349591 OGRNIP 319265100016961
(referred to in this Privacy Policy as "Norma," "we," "us," or "our").

A. Data Collection

The confidentiality of your private life is important to us, and we have taken measures to ensure that data is collected from you only to the extent necessary to provide our services and protect your account.

The following data, including username and email address, will be collected during registration in the Application.

With the user's permission, the Application processes health data and other medical data provided by the user for processing by the Application through access permissions granted to the Apple Health service and other similar services upon the Application's request with the user's consent.

The Application's access to health data and other medical data is regulated by the user's privacy settings on their device.

When the Application requires access to health data and other medical data, the user will receive a request for access. The user can view and revoke granted permissions for access to health data and other medical data.

Certain information we collect may be classified as personal data under applicable data protection laws (hereinafter "personal data").

B. Use of Personal Data

We collect your personal data and use it for the following purposes:

  • Verifying your identity;
  • Confirming your right to register as a user of the Application;
  • Processing your registration as a user, providing you with a login ID for the Application, maintaining and managing your registration;
  • Providing you with customer service, responding to your questions, feedback, requests, and claims;
  • Identifying, developing, and promoting products and services that we believe will be valuable to you, including for various browsers and devices, in accordance with applicable laws.

The information we collect helps keep you informed about news, Application software updates, and upcoming events. If you do not wish to receive our newsletters, you can unsubscribe at any time.

We also use personal information to create, develop, operate, distribute, and improve our products, services, materials, and advertising, as well as to prevent losses and combat fraud.

Periodically, we use collected personal information to send important notices. You cannot opt out of receiving these messages as this information is necessary for interacting with us.

We may use personal information for internal purposes, such as conducting audits, data analysis, and research to improve products and services, as well as communication methods with customers.

We also collect data that is not directly related to a specific individual. We may collect, use, transfer, and disclose such information for any purpose.

C. Disclosure of Personal Data

We may disclose or transfer your personal data, except for your health and other medical data, to our partners and service providers hired by us to assist in providing you with services or who otherwise process personal data for the purposes set out in this Privacy Policy or disclosed to you during the collection of your personal data.

Such service providers are required to comply with our data confidentiality and security requirements and are entitled to use your Personal Data only for the purposes stated above, but not for their personal purposes.

If we deem it necessary to comply with applicable laws or to enforce, establish, or protect our legal rights, or to protect your fundamental interests or the fundamental interests of any other person, we may also disclose or transfer your personal data, except for your health and other medical data, to our professional advisors, agencies, insurers, the state, and regulatory authorities, as well as other organizations or otherwise, to the extent permitted or required by applicable law.

We may disclose your personal data, except for your health and other medical data, to an actual or potential buyer of the Application (its agents or advisors) in connection with any actual or proposed acquisition, merger, or purchase of any part of our business, provided that the buyer is notified of the obligation to use your personal data solely for the purposes set out in this Privacy Policy.

We may also disclose your personal data to any other person with your consent for disclosure.

We store your personal data for as long as we have a legitimate business need to store such data to provide you with services or products, or for as long as required or permitted by applicable law, particularly tax and accounting laws.

We may provide aggregated or anonymized data to third parties, with the information transmitted in a non-personally identifiable format.

D. Rights Regarding Personal Data

Visitors from the European Union

This section applies only if you use our Application or services from a country that is a member state of the European Union.

Legal Basis for Data Processing

We process personal data for the purposes set out in this Privacy Policy. The legal basis for our processing will depend on the relevant personal data and the circumstances under which we collect it. However, generally, we will collect and process your personal data only when it is: necessary to fulfill any agreements between you and us; necessary to comply with legal requirements; necessary to protect our legitimate interests, provided that this does not conflict with your rights; and/or based on your consent.

Cross-Border Transfer of Personal Data

Due to the nature of our business, it may be necessary to transfer your personal data to countries outside the European Economic Area ("EEA"), including countries that may not provide the same level of data protection. We take appropriate steps to ensure that recipients of your personal data are bound by confidentiality obligations and take appropriate measures to ensure the security of your personal data.

Your Rights

If you are a resident of the European Economic Area, you have the following data protection rights:

  • The right to access, correct, update, or request the deletion of your personal data.
  • The right to object to the processing of your personal information when it is based on your legitimate interests, and separately, the right to opt out of direct marketing.
  • The right to request us, in some cases, to restrict the processing of your personal data or to request the transfer of your personal information.
  • The right to opt out of marketing materials sent by us at any time.

If we have collected and are processing your personal information with your consent, you have the right to withdraw your consent at any time.

Visitors from Other Countries

This section applies only if you use our Application or services from a country that is not a member state of the European Union.

Your rights include:

  • The right to access, correct, update, or request the deletion of your personal data.
  • The right to object to the processing of your personal information when it is based on your legitimate interests, and separately, the right to opt out of direct marketing.
  • The right to request us, in some cases, to restrict the processing of your personal data or to request the transfer of your personal information.
  • The right to opt out of marketing materials sent by us at any time.

If you have any questions regarding this Privacy Policy or if you wish to access or correct your personal data, you may send your request to: andrei@gaivoronskii.com

E. Minors

The Application and the Website are not intended for children under the age of 16. We do not knowingly collect personal data directly from children under 16 without an appropriate legal basis or the consent required under applicable law. If you believe that a child under 16 has provided personal data to us, please contact us at andrei@gaivoronskii.com so we can review and, where appropriate, delete that information.

F. Security Measures

We use commercially reasonable security measures to prevent unauthorized access to the Application, maintain the accuracy of stored data, and ensure the correct use of the information stored with us.

Registered users of the Application can view and edit some of their information through a password-protected account. We strongly recommend that you do not disclose your password to anyone.

No data transmission over the internet or wireless networks can be completely secure. Therefore, while we strive to protect the information stored for you, we cannot guarantee the security of data transmitted to us, and you accept the risk of such transmission.

G. Changes to This Privacy Policy

From time to time, we may update this Privacy Policy due to changes in legal, technical, or commercial nature. When updating our Privacy Policy, we will take appropriate measures to inform you, considering the significance of the changes we make.

Any changes to this Privacy Policy will be communicated by posting updated versions of this Privacy Policy in the Application and on the Website. The updated Privacy Policy takes effect upon publication unless a different effective date is stated.

H. Contact Methods

If you have any requests, questions, or complaints regarding our use of your personal data and this Privacy Policy, please contact us at: andrei@gaivoronskii.com