Privacy policy

Version of 27 August 2026

This is a translation. The binding version is the Russian one, at tessera-app.ru/legal/privacy: the operator is registered in Russia and the processing of personal data is governed by Russian law.

If you have no time to read it all, here is the essence: your diary is stored on your phone and never reaches us. What goes to the server is an anonymous installation identifier, and your email address is asked for once — at the purchase, for the fiscal receipt.

1. Who processes the data

The operator is individual entrepreneur Maksim Sergeyevich Kuznetsov, TIN 773391216156, state registration number 326508100402717. Enquiries: support@tessera-app.ru.

2. What stays on your phone and goes nowhere

Everything the diary contains: your ratings of your own state, habit marks, time by category, sleep times, notes, photos of the day and voice notes. It is kept in the device memory, in the app’s own data.

We do not receive any of it and cannot read it. The app has no sign-up, no account and no link to a phone number or an email address — we do not know who you are.

The only exception is one you switch on yourself — the cloud copy, see section 5.

3. What the app sends to our server

• The installation identifier. A random string the app makes up for itself on the first launch. It is not connected to your name, phone number, account or the advertising identifiers of the device, and it changes when the app is reinstalled. It exists so that the app can tell whether the full version has been bought.
• Build details: the platform (Android or iOS), the app version, the interface language, the store it was installed from, and the time of the first and the latest request to the server.
• Anonymous events: the name of an action and its time — for example, “the purchase screen was opened”. Neither the content of entries nor any text from them is included.
• Support conversations: what you wrote to us yourself, and our answers.
• At a purchase: the email address, the amount and the payment identifier. See section 4.

The app does not request and does not send: location, contacts, the list of installed software, advertising identifiers, phone number.

4. The purchase and the fiscal receipt

The full version is bought on the website, at tessera-app.ru/pay. An email address is asked for there, and nothing else.

It is needed for the fiscal receipt: under Russian Federal Law 54-FZ a receipt is mandatory, and it cannot be issued without the buyer’s address. The legal basis for the processing is the performance of the contract you enter into by paying, and the performance of a duty imposed on us by law.

The address is passed to the payment service YooKassa, which issues and sends you the receipt. Bank card details are entered on the bank’s side, never reach us and are not stored by us.

We send you no letters: the app has no mailing list. The only letter you will get is the receipt from YooKassa.

5. The cloud copy of the diary

This is an optional feature of the full version. Until you switch it on, nothing from the diary reaches the server.

If you do switch it on, the app packs the diary into a single archive and encrypts it on your phone before sending. What travels to the server is an encrypted file. The key is derived from the recovery code that the app shows you once, and it never reaches the server.

We store: the encrypted file itself, its size and its name — a fingerprint of the recovery code from which neither the code can be restored nor the owner identified. We keep no link between a copy and an installation.

We cannot read your copy. That is a property of the scheme rather than a promise on our part: we do not have the key. For the same reason we cannot help if the recovery code is lost.

You delete the copy in the app — Settings → Cloud copy → switch off. The file is erased from the server.

6. Device permissions

• Microphone — to record a voice note, saved as a file on the device.
• Photos — to attach a picture to a day; it is copied into the app’s data and stays on the device.
• Notifications — a reminder to write the day down and a note that a report is ready.

Each one is requested at the moment it is needed, and each may be refused: the app keeps working, only the feature the permission was asked for becomes unavailable.

7. Who we share data with

• YooKassa — the payment service: the email address and the amount, to carry out the payment and issue the fiscal receipt.
• Beget — the hosting provider whose servers run our server. It processes data on our instruction and may not use it for its own purposes.

Nobody else. There are no advertising or analytics services in the app: no counters, no ad networks, no third-party statistics kits.

Data may be provided to state authorities where the law requires it and the request is properly formed.

8. Where the data is stored

Our server is located in the Russian Federation, in Moscow. Personal data of Russian citizens is recorded, systematised and stored in a database located in Russia, as required by part 5 of article 18 of Federal Law 152-FZ.

We carry out no cross-border transfer of personal data.

9. How long the data is kept

• Installation details and anonymous events — while the app is installed and talks to the server.
• Purchase details, including the email address — five years from the year of the purchase: that is how long the law allows for confirming settlements and answering possible claims.
• Support conversations — until the enquiry is closed and one year after.
• The cloud copy — until you switch it off.

10. Your rights

You are entitled to learn whether we process your data and which data exactly, to require its correction, blocking or destruction, and to withdraw your consent to the processing.

Write to support@tessera-app.ru or use the app: Settings → Support. We answer within thirty days — that is what the law requires, though in practice it is faster.

To let us find your data, the email address used for the purchase or the full-version key will help.

The diary you delete yourself and without us: it is on your phone. Deleting the app erases it together with photos and voice notes. Switch the cloud copy off before deleting the app if you want that erased as well.

11. How we protect the data

The app talks to the server over a secure connection. The cloud copy is encrypted on the device. Access to the server and to the admin panel requires a password with a second confirmation step, and one person has it.

12. Children

The app is not addressed to children under 13. We collect no information about age.

13. Changes

A new version is published on this page with the date at the top. If something substantial changes — a new recipient of data, for example — we will say so in the app rather than quietly editing the text.

14. Contact

support@tessera-app.ru — for anything about this document and about your data.