CONSENT TO DATA PROCESSING

This is an English translation of the Russian original. In case of any discrepancy, the Russian original prevails.

Version of 10 October 2026. We store the date of your consent separately.

1. Who you give consent to

The operator is Ivan Kovalev, Republic of Kazakhstan. IIN (individual identification number) 061119550604. Address: Astana, Kravtsova St., 2. Email: ik914735@gmail.com.

By creating an account in the Onom app, you give the operator your consent to the collection and processing of your personal data on the terms described below and in the privacy policy.

2. Who gives consent

You — the account holder. We link the consent to the name and email address you provided at registration and store them together with the date.

If you are under eighteen, consent on your behalf is given by a parent or another legal guardian. We ask about this at the same registration step.

3. What data

Email address and sign-in identifier. First name, last name, city, club, date of birth, sex, photo — if you filled them in. Sports rank and the document confirming it — if you attached it. Shooting results and equipment, photos of the bow — if you took them. Technical information about the device and the app version. Events about app usage — which screens and features are opened — with an installation identifier, without your name, email or the content of your records.

4. For what purpose

So that you can sign in to your account and see your trainings from any device. To calculate statistics. To take part in the general ranking and online events. So that the coach you connected can see what you opened to them. To answer you in support and fix errors. To understand which screens and features are used and to improve the app and our services.

5. What actions with the data

Collection, recording, storage, updating, use, transfer to the recipients listed below, anonymization, blocking, deletion and destruction — both automated and manual.

6. Who we share it with

The coach you connected — to the extent you opened to them. The organizer of an event you registered for. Other athletes — only if you turned on publishing of results. The company we rent servers from — it stores the data but does not use it. The analytics service PostHog — only events about app usage.

No one else. We have no advertisers or data brokers; we do not sell data and do not pass it to third parties for advertising.

7. What becomes public

By default — nothing. Your trainings and insights are seen by you and by the coach you connected.

Data becomes public only where you have turned this on yourself: in the general ranking and when publishing results. Then other athletes see your name, bow class, gender, age group, city, club, rank and results over the last 14 days. Your opponent in a match — the person you gave your code to, the one you challenged or whose challenge you accepted — sees your name, bow class, rank, club, city, profile photo and your arrows in that match.

If you registered for an event, your name, rank, category and result of that event are published by the organizer: this is how competition results work, and it cannot be turned off in the app. If you do not want this, do not register for the event.

You can turn off publishing and leave the ranking at any time in your profile.

8. Transfer to other countries

Such a transfer takes place, and you agree to it. We rent two servers: one in the Russian Federation, the other in the Republic of Kazakhstan. Data of citizens of Russia is stored in the Russian database, data of citizens of Kazakhstan — in the Kazakhstan database; if you live in another country, your data is kept on one of these two servers. Analytics events are stored in the PostHog cloud in the European Union, in Frankfurt (Germany).

The app cannot work without this consent: results need to be on the server, otherwise there will be no sync, no ranking and no online events.

9. How long the consent is valid

As long as you have an account. We do not set a separate term: the consent ends together with the account. We delete an account without an active subscription one month after the subscription ends. After that only information about the consent itself remains — the law requires it to be kept.

10. How to withdraw

Delete your account in your profile, the “Data” section, or on the account deletion page on the website. Withdrawing consent means deleting the data: the app cannot be used without data processing, because sign-in and statistics do not work without it. Withdrawal does not cancel what was processed before it.

11. What we keep about the consent itself

The date and time you gave it, the version of the text you saw, and whether you gave it yourself or a legal guardian did so on your behalf. The law requires this: consent must be verifiable.