Privacy Policy of the rhabits Ecosystem

1. Who we are

1.1. Your use of the accesses, opportunities, and benefits of the rhabits Ecosystem involves the collection and utilization of your personal information by us, the Rhabits community, and entities providing relevant services or tools. Detailed information about the entity providing specific services or tools can be found in the User Documentation of the corresponding service or tool.

1.2. This Privacy Policy outlines the principles of collecting and using your personal information, along with the procedures for processing and protecting this information. It covers your use of the rhabits Ecosystem, including rhabits Ecosystem Services and/or tools.

1.3. This Privacy Policy is supplementary to our rhabits Ecosystem User Agreement, the terms of separate User Agreements for rhabits Ecosystem Services and/or tools, and their respective Privacy Policies. In case of any conflict, this Privacy Policy takes precedence.

2. This Privacy Policy

2.1. This Privacy Policy applies to registration and every access or use of any rhabits Ecosystem Service and/or tool, both current and future, with reference to the rhabits Ecosystem User Agreement.

2.2. By accessing the rhabits Ecosystem, we assume, in good faith, that you: (a) possess the necessary rights to register and use the rhabits Ecosystem Services and/or tools; (b) provide accurate information about yourself for using the rhabits Ecosystem Services and/or tools; (c) are aware of and accept this Privacy Policy.

2.3. We do not verify user information unless necessary, assuming you provide reliable and sufficient information.

2.4. This Privacy Policy is available at https://rhabits.io/privacy.

2.5. The applicable version of this Privacy Policy is the one in effect at the time of its use.

3. Information we collect about you

3.1. To fulfill the agreement between you and us and provide rhabits Ecosystem access, we collect, process, and use your data. The purposes and legal basis for data collection are detailed in the table below:

Data we collect Purpose Legal basis
1. Data you provide when registering Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
2. Data when signing up for any rhabits Ecosystem Service Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
3. Copy of your identification document if necessary Verify your account Legal interests, Fulfilling the agreement
4. Additional data when editing your account Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
5. Additional data when using rhabits Ecosystem Services Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
6. Additional data obtained when accessing rhabits Ecosystem Services Internal control, provide recommendations Legal interests, Fulfilling the agreement
7. Location data Generate recommendations, improve advertisements Legal interests, Fulfilling the agreement
8. Information submitted to Support Service Fulfill support requests Legal interests, Fulfilling the agreement
9. Behavioral actions data in the rhabits Ecosystem Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
10. Data from payment functions Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
11. Data collected through third parties Import information into your profile Legal interests, Fulfilling the agreement
12. Information resulting from actions of other users Manage and administer the rhabits Ecosystem Legal interests, Fulfilling the agreement
13. Information received through cookies Improve advertisements Fulfilling the agreement

3.2. Our legitimate interests include maintaining and administering the rhabits Ecosystem, providing access, opportunities, and benefits, improving and personalizing user experiences, understanding user interactions, ensuring account protection, offering relevant services, complying with legal obligations, and collecting statistical data.

3.3. Personal data collected may be correlated with other information about you. The processing of your personal data is carried out exclusively for the purposes specified in this Privacy Policy.

3.4. In certain cases, we collect technical data about you, starting from accessing the rhabits Ecosystem Service until registration with the relevant Service.

3.5. The processing of personal data will adhere to the purposes specified in this Privacy Policy unless otherwise provided in the User Documentation of the corresponding Service/tool.

3.6. Users may post additional information via Services' functionality and User Documentation, but we do not aim to process such information.

3.7. Information in your profile may be viewable by other users, subject to the Service's architecture, functionality, and privacy settings.

3.8. Personal information may be processed to comply with legal obligations or defend/enforce legal requirements.

3.9. Sensitive data should not be published on the rhabits Ecosystem. We cannot ask for consent to process such data as we are not informed in advance of its potentially sensitive nature.

3.10. Withdrawing consent may result in the inability to access rhabits Ecosystem Services and tools.

3.11. If processing is needed for other purposes, details will be provided before processing.

3.12. To fulfill the agreement, we may send service mailings and collect relevant data.

4. Data exchange

4.1. Personal data is not transferred to third parties except as expressly provided in this Privacy Policy or individual rhabits Ecosystem Service policies.

4.2. Data may be shared with rhabits Ecosystem Services and external Services using rhabits Ecosystem tools, subject to user agreement and User Documentation.

4.3. Data may be shared with third-party contractors and developers of rhabits Ecosystem Services and tools, ensuring compliance with confidentiality obligations.

4.4. Users may transfer account data to third parties with their consent.

4.5. Some Services may display advertisements through their own advertising services.

5. International transfers

5.1. Personal information may be transferred and maintained outside of Russia and the European Economic Area (EEA).

5.2. Measures like encryption or Standard Contractual Clauses are applied to protect data.

6. Storage periods

6.1. Personal information is retained for the necessary duration based on the legal basis and additional legal/regulatory obligations.

6.2. Users can delete personal data using the "delete account" function.

6.3. Account deletion or account termination may occur based on applicable law or the rhabits Ecosystem User Agreement.

6.4. Deleted accounts may have data stored for the period required by applicable law.

7. Your rights

7.1. Users have rights regarding their personal information, including access, updating, blocking, deletion, restricting use, objecting to processing, data portability, and the right not to accept automated decisions.

7.2. Requests to exercise rights should be sent to prem. 

7.3. Users can view a summary of information via their personal account on the website.

7.4. Users can independently delete their account and make changes to personal data.

7.5. Users can disable individual Services through their account.

8. Security measures

8.1. Technical, organizational, and legal measures, including encryption, are taken to protect personal data from unauthorized access.

8.2. User access involves a login and password, and users are responsible for maintaining the privacy of this information.

8.3. Data is stored on electronic media, processed using automated systems, and access is limited to those performing official duties or contractual obligations.

8.4. Mobile phone number linking enhances information protection.

8.5. Additional confirmation measures may be implemented for access from unusual servers.

8.6. Missed call verification may be used for registration, authorization, and account recovery.

8.7. Users can receive information about authentication times and devices used through their account.

9. Amendments to this Policy

9.1. This Privacy Policy may change, with updated versions posted on the website.

9.2. Users have the right to refuse amendments, leading to the termination of rhabits Ecosystem Services and tools.

9.3. Users can also refuse amendments to individual Service policies, leading to the termination of the Service.

10. Contact us

10.1. For questions, send requests to prem

10.2. Correspondence is classified as restricted information and cannot be disclosed without written consent.