Privacy Policy

Who operates Rostok

Rostok is the service name used by the business above. For privacy questions and requests, contact me@alexkonyakhin.com.

Information we collect

• Account and profile. Your phone number, verification status, account identifiers, name, language, and profile details you provide, such as date of birth, sex, about text, and contact links.
• Dance activities. School and teacher relationships, roles, invitations, groups, levels, lesson schedules, bookings, attendance, and teaching notes or progress summaries entered by you or an authorized teacher or school administrator. Booking records can include prices, rates, and rental amounts.
• Sign-in and security. Session identifiers, session expiry, IP address, browser or device information sent with requests, phone-verification records, and security or activity records needed to operate the service.
• Launch waitlist. The email address or phone number you submit, selected role, language, and signup and consent records.
• Support. The contact details and contents of messages you send us.

We receive information directly from you, from teachers and schools you interact with, and automatically when your device connects to our service.

How we use information

We use information to verify your phone number, keep you signed in, provide your profile and dance activities, manage access to schools and teaching relationships, and respond to support and privacy requests. We use operational records to protect accounts, prevent abuse, resolve problems, and keep the service reliable.

Waitlist contact details are used to send the launch updates you requested. You can withdraw this consent by emailing me@alexkonyakhin.com; include the contact you used to sign up. Withdrawing waitlist consent does not delete an app account.

For the launch waitlist, the legal basis is your consent. When app features are available, processing needed to provide requested account and activity features is based on performance of the service agreement; necessary security and abuse-prevention processing is based on legitimate interests in protecting the service and its users; mandatory records and responses are processed to meet legal obligations. Optional uses require consent where applicable. Providing a waitlist contact is voluntary, but we cannot send a launch notification without it. Account features require the information necessary to provide them.

Who can access information

Relevant information is available to teachers, school owners, administrators, and other participants where needed for the activities and relationships you use. Access depends on their role and relationship to you; private teaching notes are restricted to the applicable teaching context.

Service providers and planned infrastructure:

• Cloudflare: current website delivery and security, launch waitlist storage in D1, and forwarding messages addressed to our support email.
• Amazon Web Services (AWS), planned: hosting of the international application, its database and backups. This infrastructure is not yet in use.
• Phone verification provider, not yet selected: a provider will receive the phone number needed to deliver one-time sign-in codes when this feature launches. No provider is named as active before selection and setup.
• Email services: delivery and handling of support and privacy correspondence.

We may disclose information where required by law or to protect the security of the service and its users.

Storage and security

The website and launch waitlist currently use Cloudflare, which may process information in countries outside Serbia. Email providers process the information needed to handle correspondence. AWS regions, the phone verification provider, and the applicable international-transfer arrangements for the planned app infrastructure have not yet been finalized; we will update this policy before that processing begins. Contact me@alexkonyakhin.com for information about recipients and transfer safeguards relevant to your data.

Rostok uses HTTPS for public connections. App access uses authenticated sessions and role-based permissions. The application database and waitlist are not public directories. No transmission or storage system can guarantee absolute security.

Retention and deletion

Account and activity information is kept to provide the service while your account and relevant activities remain active. You can request deletion of your account and associated personal information using the account deletion page. Uninstalling the app or signing out does not delete server records.

Some records may need to be retained to comply with a legal obligation, resolve a dispute, or protect against fraud or abuse. Any such exception must be limited to the information and period needed for that purpose. Backup copies can remain until the applicable backup cycle expires.

Waitlist information is kept for the launch notifications you requested, until you withdraw consent or the launch-notification purpose ends. Contact me@alexkonyakhin.com to request removal without waiting for a launch message.

Your choices and requests

You can edit the profile details available in the app. Contact me@alexkonyakhin.com to request access to, correction of, or deletion of your information, or to ask about restricting or objecting to its use. Depending on the law that applies to you, you may also have rights to a portable copy of your data and to complain to a data protection authority.

We may need to verify that a request comes from the account holder before disclosing or deleting information. Please do not email passwords or one-time sign-in codes.

A school or independent teacher may also keep its own records outside Rostok. Contact that organization about those records; a Rostok deletion request concerns the information held through Rostok.

Under Serbian personal-data protection law, you may also complain to the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik). Withdrawing consent does not affect the lawfulness of processing before withdrawal. We do not use your data to make solely automated decisions producing legal or similarly significant effects.

Cookies and device access

The web app uses a session cookie to keep you signed in and local preferences for the interface. The launch website does not use advertising trackers. Phone verification uses the number you enter; it does not require access to your address book or call history.

Children’s information

Dance records may include students who are minors. A parent or guardian can contact me@alexkonyakhin.com about a child’s information and request correction or deletion, subject to appropriate verification. Schools and teachers must have the authority required to provide a student’s information.

Changes to this policy

We will update this page when our practices change and show the revised date here. Where required, we will provide additional notice or request consent before a new use of information.