# DigiDala — Privacy Policy

**Revision:** 1.0
**Revision date:** 03.10.2026
**Operator:** Individual Entrepreneur Ivan Ilyich Mironov
**Data contact:** `digidala-sup@yandex.ru`

## 1. General provisions

This Privacy Policy describes what data DigiDala may process when the Telegram bot and Mini App are used, why this is done and how the user can contact the Operator.

DigiDala processes only data that is needed to operate service features, maintain security, provide support, process payments, perform moderation and meet mandatory legal requirements.

## 2. What data may be processed

Depending on the user's actions, DigiDala may process:

- Telegram user ID;
- username, display name and other Telegram profile information available to the service;
- the selected language and information needed for interface localization;
- information about participation in mandalas, occupied cells and user actions;
- messages, images and other user content submitted to DigiDala;
- reports, report comments and related data;
- information about moderation measures and access restrictions;
- Telegram Stars payment information, including amount, purpose, status and payment operation identifier;
- technical logs and diagnostic information needed for security and troubleshooting.

DigiDala does not receive the user's bank-card details through the ordinary Telegram Stars digital-goods payment flow: such payments are processed by Telegram's payment infrastructure and the relevant providers.

## 3. How the data is used

Data may be used to:

- operate the Telegram bot and Mini App;
- authenticate and identify the user;
- save and synchronize language settings;
- run mandala mechanics and maintain participation history;
- process and reconcile payments;
- provide support and handle refund inquiries;
- process reports and apply moderation measures;
- prevent fraud, abuse and technical attacks;
- diagnose problems and maintain service security and resilience;
- comply with obligations established by applicable law.

## 4. Legal bases for processing

Depending on the operation, processing may be carried out to perform a contract with the user, comply with legal requirements, protect the legitimate interests of the Operator and users, or on the basis of consent where consent is required by applicable law.

## 5. Who may have access to the data

For DigiDala to operate, data may be processed by:

- the Operator;
- Telegram and its infrastructure as part of the Telegram bot and Mini App;
- technical providers that supply hosting, storage, diagnostics, security or other necessary service functions.

The Operator does not sell users' personal data.

Data is not provided to third parties for their independent sale of advertising or other goods to the user on behalf of such third parties.

## 6. Payment data

When digital goods are purchased using Telegram Stars, DigiDala receives the information needed to confirm and account for the operation. A Telegram payment-operation identifier may be required to process a Stars refund.

DigiDala does not ask the user for a bank-card number or CVV to pay through Telegram Stars.

## 7. Retention periods

Data is retained for as long as necessary for the relevant processing purposes, including service operation, security, handling inquiries, confirming payments and resolving disputes.

Certain records, including payment, security, audit and legally required records, may be retained longer than ordinary user data.

The retention period for particular data may depend on its purpose and the requirements of applicable law.

## 8. User rights

To the extent provided by applicable law, the user may contact the Operator regarding access to their data, its correction and, where permitted by law, deletion or restriction of processing.

Use `digidala-sup@yandex.ru` for such requests.

A deletion request cannot always be fulfilled immediately: certain information may need to be retained for payments, security, abuse prevention, dispute resolution or legal compliance.

## 9. Telegram

DigiDala operates inside Telegram, so some processing is carried out by Telegram and governed by its own documents.

The user is also responsible for their own privacy settings and compliance with Telegram's terms.

## 10. Security

The Operator takes reasonable technical and organizational measures to protect data from unauthorized access, alteration, loss and destruction.

However, no internet service can guarantee absolute data security in every possible circumstance.

## 11. Changes to the Policy

This Privacy Policy may be updated. The current version is published through the bot and Mini App.

If a change is material to functions already used or to the user's rights, additional information may be provided through available DigiDala channels.

## 12. Operator contact

**Individual Entrepreneur Ivan Ilyich Mironov**
**Email:** `digidala-sup@yandex.ru`