Privacy Policy

Effective date: September 10, 2026

"Капитал здоровья" (Human Change) ("we," "us") operates humanchange.app (the "App"). This policy describes how we handle information in connection with the App. We are currently operated directly by Sergey Shneyder; this policy will name a corporate entity once one is formed for U.S. operations.

If you use the App's health-tracking features, please also read our separate Consumer Health Data Privacy Policy, which covers your health data specifically and the rights that apply to it. See also our Terms of Use.

What stays on your device

Your onboarding answers (age, sex, height, weight, body fat percentage, region, sleep, nutrition, activity, smoking, alcohol, and self-reported stress/social/cognitive/purpose levels) and your daily habit logs are stored only in your browser's local storage, on your own device. We do not receive, transmit, or store this data on any server — it never leaves your device unless you choose to send it to us yourself, for example by email. This is a deliberate design choice: we cannot lose or be breached out of data we never received.

The honest trade-off: because this data lives only on your device, if you clear your browser's site data, switch browsers (for example, opening the App inside Telegram's or Instagram's built-in browser instead of Safari/Chrome), switch devices, or lose your device, that data cannot be recovered — we don't have a copy to restore it from. Creating an account only saves your email for signing in; it does not currently back up your onboarding answers or daily log. If this matters to you, avoid clearing site data and be mindful of which app or browser you're using.

What we do collect

If you create an account, we collect the email address and password you provide, handled by our authentication provider (Supabase), so you can sign in. We do not use this email for marketing without your consent, and we never sell it.

We use self-hosted analytics (Umami), running on our own server, to count anonymous usage events — for example, that someone reached a given onboarding step. This does not include the content of your health answers, does not use third-party tracking cookies, and is not linked to your name or email.

If you email us for support, billing, or feedback, we use your message only to respond to you.

We do not collect precise location data, and we do not currently collect payment information, since the App does not yet process payments.

Who we share information with

We do not sell, rent, or share your personal information with advertisers, data brokers, or any third party for marketing purposes. We use a small number of service providers strictly to operate the App: Supabase (authentication — holds only your email/password if you create an account), DigitalOcean (server hosting — does not access the content of your data), and our own self-hosted Umami installation (analytics). We may disclose information if required by law, or to protect the rights, safety, or property of our users or the public.

Data security and breach notification

Because most of your data stays on your device, your device's own security is your best protection — we recommend not using the App on a shared or public device. For the limited data we hold on our servers, we take reasonable technical measures to protect it. If we are ever required by law to report a breach of unsecured personal health information, we will notify affected individuals without unreasonable delay and no later than 60 days after discovery, and notify the Federal Trade Commission within the timeframe its Health Breach Notification Rule requires.

Your rights

Depending on where you live, you may have rights to know, access, correct, delete, and opt out of the sale or sharing of your information (we do not sell or share it, so there is nothing to opt out of) — including rights available under the CCPA/CPRA and other U.S. state privacy laws. Because most of your data lives only on your device, you can view, export, or delete it yourself at any time in the App or by clearing your browser's site data for humanchange.app. To request deletion of your account (email/password) or to ask any question about your data, contact us at support@humanchange.app. We will respond within 45 days.

Children's privacy

The App is not directed to, and we do not knowingly collect information from, anyone under 18 years old. If we learn that someone under 18 has created an account, we will delete it.

Changes

We'll update this page as the product evolves, and will update the effective date above when we do. Material changes affecting how we handle health data will be highlighted, not just silently dated.

Contact: support@humanchange.app