Ping Privacy Notice

1. Controller

Controller/operator: Ilya Yuryevich Serdyukov, tax ID 344812968519, Riera de Sant Pere, 142, 08338 Premià de Dalt, Barcelona, Spain; info@my-ping.app. This Notice covers Ping applications, my-ping.app and related services.

2. Data categories

• Account and profile: phone and/or email, username, display name, avatar, bio, language, settings and account status.
• Relationships and content: contacts when enabled, blocks, chat/space membership, messages, reactions, calls, files, photos, video, voice, location or event information created or sent by the user.
• Technical data: account, device and session identifiers, app version, IP address, request times and outcomes, push tokens, delivery, error, security and anti-abuse logs.
• Payments: product, period, status and transaction identifier; full card details are normally handled by an app store or payment provider.
• Support and rights requests: the request, contact information and minimum identity evidence.

3. Purposes and legal bases

• Account creation, authentication, messaging, calls, synchronisation, support and enforcement of the Terms: contract or pre-contract steps.
• Account protection, anti-spam, troubleshooting and legal claims: legitimate interests balanced against user rights.
• Mandatory records and valid authority requests: legal obligation.
• Device contacts, location, camera, microphone and photos: the user's action and OS permission; consent where legally required.
• Visibility of selected public-profile fields: separate consent under Russian law. Withdrawal does not stop processing required for the account contract.
• Optional website analytics: consent where required.

4. Recipients

Access is limited to authorised personnel and necessary provider categories: data-centre, database, object-storage and CDN, email/SMS/push delivery, communications and calls, monitoring, anti-abuse, support and payments. Providers act under instructions or, where their terms and law require, as independent controllers. Data is disclosed to authorities only on a valid legal basis. Ping does not sell personal data.

5. Location and international transfers

Where Russian localisation law applies, the recording, systematisation, accumulation, storage, updating and retrieval of Russian citizens' personal data use databases located in Russia as required by Article 18(5) of Federal Law 152-FZ.

Media and certain technical operations may use object storage, CDN, notification, communications or security providers outside the user's country. Providers, countries and routes may change. Before a transfer, Ping applies the relevant Russian transfer procedure and, for EEA data, an adequacy decision, Standard Contractual Clauses or another lawful GDPR mechanism. A user may request the current recipient category and country.

6. Retention and security

Account data and content are kept while the account is active and needed for the selected features. After deletion they are erased or anonymised as purposes end, except limited records needed for law, security, disputes, abuse prevention or request fulfilment. Retention depends on category, settings, backup lifecycle and mandatory rules; there is no single period for every item.

Measures include access control, protected transport, session/device management, logging of significant actions and resilience controls. Secret chats, where available, use a separate end-to-end encrypted mode; this does not mean every chat is end-to-end encrypted. No system is absolutely secure.

7. Rights

Submit a request at /privacy-request or info@my-ping.app. Ping may reasonably verify identity. A GDPR request is normally answered within one month, subject to lawful extension; Russian statutory time limits apply where relevant.

• Access, correction, deletion, restriction and objection where applicable.
• Portability under GDPR Article 20 where its conditions apply.
• Withdrawal of consent without affecting earlier lawful processing.
• Stopping dissemination under Article 10.1 of Russian Federal Law 152-FZ.
• Complaint to the AEPD, Roskomnadzor or another competent authority and access to a court.

8. Children and changes

Ping is not intended for anyone under 16. Any legally required representative authorisation must be obtained. Updates receive a new version; material changes are notified and new consent is requested only when legally necessary.