Privacy Policy

1.1. We process user data in line with:

• Federal Law No. 152-FZ “On Personal Data”;
• Federal Law No. 149-FZ “On Information, Information Technologies and Information Protection”;
• Federal Law No. 436-FZ “On Protecting Children from Information Harmful to Their Health and Development”;
• Federal Law No. 38-FZ “On Advertising”;
• Federal Law No. 123-FZ (recommendation technologies);
• and other applicable Russian legislation.

1.2. This Policy covers every version of the Platform: the web version, the iOS and Android apps, and the Telegram Mini App. Anything that applies only to the mobile apps is set out in Section 6.

1.3. We keep user data confidential and secure.

2.1. Data you give us when you sign up

2.2. Data we get when you sign in through an external service

The Platform supports signing up and signing in with Yandex ID. When you use it, we receive a limited set of data from that service — and you confirm what gets shared on their side before access is granted.

Yandex ID sign-in (OAuth 2.0): your Yandex ID user ID, email address, first and last name, profile picture (if set) and date of birth (age) — provided you have filled those in on your Yandex ID account and confirmed sharing them.

You can decline. In that case registration through Yandex ID simply doesn’t happen, and signing up with an email address stays available. You can revoke access at any time in the connected apps section of your Yandex ID account.

How we use age data. We use your date of birth only to work out whether you can access material marked “explicit” and age-restricted material under Federal Law No. 436-FZ, and to confirm you meet the age requirements in the Terms of Use. We don’t use age data for ad targeting and we don’t share it with third parties. If you haven’t signed in through Yandex ID, or your account there has no date of birth, we simply don’t have that information — access to age-restricted material is then granted based on you confirming your own age.

2.3. User content

Anything you post yourself: comments on posts, episodes and videos; reactions; and reports about content and other users.

It’s up to you what you reveal about yourself in user content. We’d suggest not putting anything in comments, chats or your profile that you wouldn’t want other users to see.

2.4. Technical data collected automatically

IP address; user agent; device operating system type, model and version; app version; language and regional settings; device advertising identifier (IDFA/AAID — only if you explicitly agree through your operating system’s dialog); cookies and local storage data; push notification token; what you do in the Service (listens, views, clicks, navigation); error and crash logs, including diagnostic data about the app’s state at the moment it crashed.

2.5. Activity data

Listening and viewing history; the time and length of your interactions; Channel and podcast subscriptions; saved material; search queries; and how you interact with recommendations and the Feed.

2.6. Data related to paid subscriptions

When you take out a paid subscription, we receive and store: the fact and date of the subscription, the Channel (podcast) and plan name, the subscription status, the end date of the paid period, and the transaction ID in the payment partner’s system.

We never receive, store or process your payment card details. Card details are entered and payments are processed by our payment partner, Paywall Rus LLC (Paywall), and the credit institutions it works with, on their side. Paywall’s handling of data is governed by its own documents.

2.7. Data from public RSS sources

When we import podcasts from open RSS feeds, we receive the feed data that Authors have published as a publicly available source, leaving its structure and metadata untouched. This isn’t user data — it belongs to the rights holders of those podcasts.

To give you access to the Platform; create and manage your Account; give you access to paid content; personalize the interface and run recommendation technologies; run comments, chats and subscriptions; moderate user content and handle reports; send notifications by email, push and Telegram; keep things secure and prevent fraud and abuse; diagnose errors and make the apps more stable; analyze how the Service is used; sync data between versions of the Platform; work with rights holders; and meet legal requirements.

Your consent; performance of a contract (the Terms of Use and the Paid Subscription Terms); compliance with Russian law; and our legitimate interest (keeping the Platform secure, preventing abuse, and analytics in anonymized form).

5.1. Service notifications (account security, changes to the terms, paid subscription status, support replies) are sent on the basis of performing our contract with you, and can’t be switched off without deleting your Account.

5.2. Informational notifications (new material from Authors you follow; replies to your comments; mentions; chat messages; recommendations; Service news) are sent on the basis of your consent.

5.3. Delivery channels: email, push notifications in the mobile apps, and Telegram (if you use Telegram sign-in).

5.4. You can turn informational notifications off at any time, channel by channel, under “Profile” → “Notification settings” («Профиль» → «Настройка уведомлений» in the Russian interface), and through your device’s operating system settings (for push). Turning them off doesn’t affect your ability to use the Platform.

6.1. The mobile apps process the same categories of data as the web version, plus:

6.2. The app may ask for access to the following device features. Each permission is requested at the moment that feature is used, and you can revoke it in your device settings:

• Notifications — to deliver push notifications;
• Photos and files — to upload an avatar and media for posts;
• Device storage — to cache audio and video for offline listening.

Declining a permission limits that particular feature, but doesn’t stop you using the app.

6.3. The app doesn’t collect location data, and doesn’t access your contacts, calendar, microphone, or any of your messages outside the Platform.

7.1. The Platform uses the following third-party services:

7.2. These services process data only as far as the purposes above require, and aren’t allowed to use it for their own ends.

7.3. Cross-border transfers. Some diagnostics and feedback services (Firebase Crashlytics) process data on servers outside Russia. Those transfers are anonymized, limited to technical and diagnostic data, and never include the contents of user content, email addresses or payment data. Cross-border transfers are carried out in line with Article 12 of Federal Law No. 152-FZ.

7.4. Initial recording, organization, accumulation, storage, updating and retrieval of Russian citizens’ personal data is carried out using databases located in Russia, in line with Part 5 of Article 18 of Federal Law No. 152-FZ.

7.5. The Telegram Mini App is also governed by Telegram’s own rules. Downloading the apps from the App Store and Google Play is governed by those stores’ rules. We’re not responsible for how those services handle data outside the Platform.

8.1. The Platform uses cookies, localStorage and similar technologies to run the interface and authentication, remember your settings, run analytics, build recommendations and keep things secure.

8.2. By continuing to use the Platform, you agree to our use of cookies. You can restrict cookies in your browser, though some features may stop working properly.

9.1. Data may be shared with:

• authorized government bodies — on a lawful request, in the cases and to the extent the law provides;
• the parties listed in Section 7 — as far as providing those services requires;
• the Operator’s legal successor — in the event of a reorganization or a transfer of rights to the Platform, with notice to users.

9.2. We don’t sell personal data and we don’t hand it to third parties for commercial purposes.

10.1. We keep data for as long as the purposes of processing require:

10.2. Once those periods are up, data is deleted or anonymized.

10.3. After you delete your Account, data is deleted as described in Section 11, except for data the law requires us to keep.

11.1. You can: find out how we process your data; ask us to correct, block or erase data that’s incomplete, out of date, inaccurate or obtained unlawfully; withdraw your consent to processing; opt out of informational notifications; and challenge our actions with Roskomnadzor or in court.

11.2. Deleting your Account. You can delete your Account and the data tied to it yourself:

• in the mobile app: “Profile” → “Account settings” → “Delete account” («Профиль» → «Настройки аккаунта» → «Удалить аккаунт» in the Russian interface);
• on the web: “Profile” → “Account settings” → “Delete account” («Профиль» → «Настройки аккаунта» → «Удалить аккаунт» in the Russian interface);
• or by emailing support@mave.stream.

You don’t need to contact support, install anything else, or do anything outside the Platform to delete your Account.

11.3. What happens when you delete your Account:

11.4. Deleting your Account can’t be undone. Deleted data can’t be restored.

11.5. Deleting your Account doesn’t automatically cancel active paid subscriptions. Before you delete it, cancel any active subscriptions under “Subscriptions” («Подписки» in the Russian interface) or in your account with the payment partner. The Paid Subscription Terms explain how.

11.6. For anything to do with how we process your data, email support@mave.stream. We’ll get back to you within 30 calendar days of receiving your request.

12.1. The Platform isn’t intended for children under 16.

12.2. We don’t knowingly collect personal data from anyone below the age at which they can consent to processing on their own.

12.3. Anyone under 18 uses the Platform with the consent of a parent or other legal guardian. Parents and legal guardians are responsible for supervising a minor’s use of the Platform.

12.4. Only people with the necessary legal capacity can take out paid subscriptions.

12.5. If we find out that data was provided by someone below the required age without their guardian’s consent, we’ll delete it. A legal guardian can ask us to delete a minor’s data by emailing support@mave.stream.

13.1. We take the organizational and technical measures needed to protect user data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution and other unlawful acts — including encrypting data in transit (TLS), storing passwords as irreversible hashes, restricting staff access rights, logging access, and taking regular backups.

13.2. We can’t guarantee absolute security for data sent over the internet. You’re responsible for keeping your password safe and not sharing access to your Account with anyone else.

14.1. We may update this Policy. The current version always lives at https://mave.stream/privacy (Russian) and https://mave.stream/privacy/en (English).

14.2. If we make significant changes — to what data we process, why we process it, or your rights — we’ll let you know at least 7 calendar days before they take effect, by email, push notification or a notice inside the Platform.