ChallengeMe – Privacy Policy & Secure Data-Transfer Statement

(revision dated 26 May 2025)

Glossary of Terms

  • Personal data - Any information about an identified or identifiable natural person (e.g. full name, phone number, e-mail address, geolocation).
  • Data processing - Any operation performed on personal data, including collection, storage, use, transfer, anonymisation and deletion.
  • Application - The ChallengeMe mobile app, the website challengeme.at and the Telegram mini-app.
  • User - A natural person who has registered in the Application.
  • Consent - Conclusive actions by the User (installing the app, completing registration, clicking "Accept") confirming agreement to data processing.

1. What Data We Collect

1. Data you provide directly:

name, phone number, e-mail address; avatar photo; favourite sports; geolocation for matchmaking.

2. Data collected automatically:

  • IP address, device type, OS version, language;
  • visit statistics, clicks, errors; cookie files.

2. Why We Use Your Data

Registration & log-in

Account creation, phone-based sign-in

Geo / skill-based matchmaking

Map of nearby games, "Beginner" filter

Notifications

Match reminders, promotions, updates

Support & analytics

Help-desk replies, bug tracking

Marketing (with consent)

E-mails about new features, promo codes

We never sell your data. It may be transferred only:

  • to payment systems (for processing subscriptions);
  • to hosting and analytics providers under confidentiality agreements;
  • to government authorities upon a lawful request.

3. Cookies

Our website uses cookies to:

  • store language preferences and log-in status;
  • measure traffic (Yandex Metrica, Google Analytics).

You can disable cookies in your browser, but some functions may become unavailable.

4. Storage & Security

  • Data are stored on servers located in the EU and Russia, encrypted at rest with AES-256 and in transit via HTTPS.
  • Daily backups; access restricted via VPN and multi-factor authentication.
  • Retention period: up to 50 years or until consent is withdrawn. After withdrawal, the account and data are deleted within 30 days.

5. User Rights

Under Article 14 of Russian Federal Law No. 152-FZ a User may:

  1. Obtain a list of personal data held.
  2. Request rectification, blocking or destruction of data.
  3. Withdraw consent by e-mailing challenge.app.me@gmail.com.
  4. Appeal the Controller's actions to Roskomnadzor or a court.

6. Liability

ChallengeMe takes reasonable security measures but is not liable for losses arising from:

  • attacks where the User has violated password-storage rules;
  • force majeure, data-centre outages, Internet failures or malfunctions of the User's devices.

7. Policy Updates

The current version is always available in the Application. We may update this document; by continuing to use the service after changes take effect, the User accepts the updated policy.

Contact for Privacy Matters

OOO "ChallengeMe"

Primary State Registration Number (OGRN): 1257700225221

E-mail: challenge.app.me@gmail.com