Legal
Privacy Policy
How Synlit collects, uses, stores, and protects your personal data.
Effective date: 20.10.2026 Last updated: 20.10.2026
1. Who we are (the Operator)
Section titled “1. Who we are (the Operator)”Synlit (“Synlit”, “we”, “us”) is operated by:
- Individual entrepreneur (ИП): Kirill Andreevich Lakhov (Лахов Кирилл Андреевич)
- ОГРНИП: 325527500100411
- ИНН: 526215248062
- Address: Nizhny Novgorod, Russia
- Contact email for privacy matters: privacy@synlit.app
We act as the Operator of personal data within the meaning of Russian Federal Law No. 152-FZ “On Personal Data” and, where applicable to users in the EU/EEA, as the data controller within the meaning of the GDPR. The Russian version of this Policy prevails.
This Policy explains what personal data we process when you use the Synlit web application at https://hub.synlit.app and the sites https://synlit.app and https://docs.synlit.app (the “Service”), why, on what legal basis, and what rights you have.
2. What data we collect
Section titled “2. What data we collect”| Category | Examples | Source |
|---|---|---|
| Account data | Email address, username, password (stored only as a cryptographic hash) | You, at registration |
| Service content | Tasks, habits, goals, notes, uploaded images, time-tracking entries, mastery progress, items and purchases in the in-app shop | You, while using the Service |
| Payment data | Amount, date, and status of a payment, the YooKassa payment ID, the email address for the cash receipt. Card details are entered on the YooKassa side — we neither receive nor store them. | You / YooKassa |
| Technical data | IP address, browser and device type, session tokens, log records, time zone | Automatically, when you use the Service |
| Communications | Messages and images you send us for support | You |
We do not intentionally collect special categories of data (health, biometrics, political views, etc.). The Service is intended for people aged 18 and over, and we do not intentionally collect data of anyone under 18. Do not submit such data through the Service.
3. Why we process it (purposes)
Section titled “3. Why we process it (purposes)”- To register and authenticate your account.
- To provide the core Service (tasks, habits, goals, notes, timers, gamification, shop).
- To accept payment for Premium, keep payment records, issue refunds, and send cash receipts.
- To send you service and transactional emails (e.g. email verification, password reset, Premium ending, important notices).
- To provide support and respond to your requests.
- To ensure security and prevent fraud and abuse.
- To meet obligations imposed by law (tax records, cash receipts).
- To improve the Service using aggregated or de-identified statistics.
4. Legal basis for processing
Section titled “4. Legal basis for processing”Depending on the situation and your location, we rely on:
- Your consent (152-FZ art. 6(1)(1); GDPR art. 6(1)(a)) — given at registration with a separate checkbox and set out in a separate document, the Consent to Data Processing.
- Performance of a contract with you — the Terms of Service and the Public Offer (152-FZ art. 6(1)(5); GDPR art. 6(1)(b)).
- Compliance with a legal obligation — tax records and cash receipts under Federal Law No. 54-FZ (152-FZ art. 6(1)(2); GDPR art. 6(1)(c)).
- Legitimate interests in securing and improving the Service, where these do not override your rights (152-FZ art. 6(1)(7); GDPR art. 6(1)(f)).
You may withdraw consent at any time (see §9), which will not affect processing carried out before withdrawal.
5. How we store and protect your data
Section titled “5. How we store and protect your data”We apply organisational and technical measures appropriate to the risk, including access controls, storing passwords only as a hash, encrypted transport (HTTPS), and restricted access to production systems.
Data localisation. In accordance with 152-FZ (art. 18, para. 5), the recording, systematisation, accumulation, storage, updating, and retrieval of personal data of citizens of the Russian Federation is carried out using databases located in the territory of the Russian Federation: a server of ООО «Админвпс» (AdminVPS) in a data centre in the Russian Federation. Database backups are also stored in the Russian Federation.
6. Who we share data with (processors)
Section titled “6. Who we share data with (processors)”We do not sell your personal data. We share it only with service providers who process it on our behalf, and only as needed to run the Service:
| Recipient | Purpose | Location |
|---|---|---|
| ООО «Админвпс» (AdminVPS) | Hosting of the application and the primary database | Russian Federation |
| ООО «Яндекс.Облако» (Yandex Cloud Postbox) | Delivery of transactional and service emails | Russian Federation |
| ООО НКО «ЮМани» (YooKassa) | Accepting payments, refunds, issuing cash receipts | Russian Federation |
On the YooKassa payment page, YooKassa itself processes the payment details you enter (including card details) under its own rules.
Cash-receipt data (amount, email address) is passed to the fiscal data operator and the Federal Tax Service of Russia, as Federal Law No. 54-FZ requires. We may also disclose data where required by law, court order, or a lawful request from a competent authority.
7. Cross-border transfer
Section titled “7. Cross-border transfer”We do not transfer personal data across borders: hosting, email delivery, and payments all take place in the Russian Federation. If you are outside Russia, please note that your data is processed in Russia. If this changes, we will comply with 152-FZ art. 12 and update this Policy before any transfer begins.
8. How long we keep data
Section titled “8. How long we keep data”We keep personal data for as long as your account exists and for as long as necessary for the purposes above. After you delete your account, we delete or anonymise your personal data within 30 days, including in backups as they are replaced by newer ones.
An account deleted in the app is first kept for 7 days, so that you can restore it by signing in, and is then deleted permanently. This period counts towards the one above.
Records of payments and refunds (amount, date, payment ID) are kept for the periods set by tax law, including after the account is deleted — without the account’s content. Data may also be kept longer where needed to resolve disputes.
9. Your rights
Section titled “9. Your rights”Depending on your location, you have the right to:
- access the personal data we hold about you and learn how it is processed;
- have inaccurate data corrected and incomplete data completed;
- have your data deleted (“right to be forgotten”) and your account closed;
- restrict or object to certain processing;
- withdraw consent at any time;
- receive your data in a portable format (GDPR);
- lodge a complaint with a supervisory authority — Roskomnadzor in Russia, or your local data-protection authority in the EU/EEA.
To exercise any of these, email us at privacy@synlit.app. We respond within the timeframes required by applicable law. Many actions (edit profile, delete account) are also available directly in the app.
10. Cookies and similar technologies
Section titled “10. Cookies and similar technologies”We use strictly necessary cookies and the browser’s local storage to keep you signed in and to operate the Service. We do not use third-party analytics or advertising services, and the “I’m not a robot” check runs on our own server. The YooKassa payment page may use its own cookies. If we later add analytics or non-essential cookies, we will request your consent where required.
11. Changes to this Policy
Section titled “11. Changes to this Policy”We may update this Policy. The current version is always published at https://docs.synlit.app/legal/privacy-policy/ with an updated “Effective date”. Material changes will be communicated through the Service or by email.
12. Contact
Section titled “12. Contact”Questions or requests about your personal data: privacy@synlit.app, individual entrepreneur Kirill Andreevich Lakhov, Nizhny Novgorod, Russia.