The authentic version of this document is the Ukrainian one. Translations are provided for convenience.
This Privacy Policy explains how Korysnyk LTD processes your personal data when you use the Korysnyk mobile application, the korysnyk.care website and the dashboard.korysnyk.care web account (together, the "Service")
This document has been prepared taking into account the requirements of the General Data Protection Regulation of the European Union (Regulation (EU) 2016/679, hereinafter "GDPR") and the UK Data Protection Act 2018 (UK Data Protection Act 2018, UK GDPR)
The controller of your personal data under the GDPR is
If you have any questions about the processing of personal data or wish to exercise your rights, please contact us at the address indicated
The data in this section belongs to special categories of personal data under Article 9 of the GDPR and is processed only on the basis of your explicit consent (explicit consent, Art. 9(2)(a) GDPR). You provide it voluntarily, may choose not to specify it, and may also delete it at any time
| Purpose of processing | Category of data | GDPR legal basis |
|---|---|---|
| Creation and maintenance of an account | Section 2.1 | Performance of a contract, Art. 6(1)(b) |
| Authentication and session security | Section 2.1, 2.4 | Performance of a contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f) |
| Personalization of product analysis (Swapr) | Section 2.2 | Explicit consent, Art. 9(2)(a) |
| General analysis of product composition (Lumi) | Section 2.3 | Performance of a contract, Art. 6(1)(b) |
| AI consultations in themed chats | Section 2.3 | Performance of a contract, Art. 6(1)(b) |
| Analytics of the use of the application and the web resources | Section 2.4 | Consent, Art. 6(1)(a) - in the application you can disable analytics in the application settings. On the korysnyk.care website and in the dashboard.korysnyk.care web account analytics is enabled only after your consent in the cookie banner, and you can change this decision at any time through the "Налаштування cookie" link in the site footer or the "cookie та аналітика" section of the web account settings |
| Detection and correction of errors | Section 2.4 | Legitimate interests, Art. 6(1)(f) |
| Moderation of user content | Section 2.3 | Performance of a contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f) |
| Sending service notifications | Section 2.1 | Performance of a contract, Art. 6(1)(b) |
Where processing is based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal
Access to the camera and microphone is granted only with your explicit consent in the operating system dialogs and is used solely for the scanner and search functions
We transfer personal data to the following categories of processors (processors), each of which acts on the basis of a contract with us and is obliged to ensure a level of protection that complies with the GDPR
We may transfer data to competent state authorities in the case of a justified legal requirement, a court decision or an obligation provided for by legislation
Some of our processors (OpenRouter, Mixpanel, Google) are located in the USA. The transfer of personal data to third countries is carried out on the basis of
Copies of the applicable contractual mechanisms may be requested at admin@korysnyk.care
The Service contains automated analysis components
These results are of an informational nature, are not a medical diagnosis, medical advice or a prescription. We do not make any legally significant decisions about you on the basis of these results. The decision about consuming a product is made by you independently; in case of doubt, consult a doctor
You can delete your health profile data at any time, which will disable Swapr personalization. Lumi's general analysis will remain available
| Category of data | Retention period |
|---|---|
| Account data | Until the account is deleted, after which soft-delete for 30 days, then complete destruction |
| Health profile data | Until deleted by you or until the account is deleted |
| Scan and search history | Until deleted by you via the history-clearing function or until the account is deleted |
| History of chats with AI assistants | Until the chat is deleted by you or until the account is deleted |
| Error logs in GlitchTip | 90 days, after which automatic deletion |
| Analytics events in Mixpanel | Stored in accordance with the provider's data retention settings, but no longer than necessary for analytical purposes |
| Lumi cache by EAN13 | Indefinitely, as it does not contain personal data |
| Photos submitted for moderation | Stored after moderation as part of the product database, not linked to the account after acceptance |
Some anonymized or aggregated data may be stored longer for statistical and research purposes in a form that does not allow you to be identified
We apply technical and organizational protection measures in accordance with Article 32 of the GDPR
No system is absolutely secure. In the event of an incident with personal data that may create a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours in accordance with Article 33 of the GDPR, and you — in the cases provided for by Article 34 of the GDPR
You have the following rights in relation to your personal data
To exercise these rights, write to admin@korysnyk.care. We respond within one month of receiving the request in accordance with Article 12(3) of the GDPR
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority at your place of residence, place of work or place of the alleged violation
You can delete your account
Upon receipt of the request, your account is placed in a soft-delete state with a recovery window of 30 days. After the end of this period, personal data is irreversibly deleted. Anonymized statistical data and the Lumi cache (not linked to you) may continue to be stored
The Service uses two separate analytics tools for two different parts of the Service
Analytics does not include the content of messages with AI assistants and the contents of your health profile. We also do not transfer your email address, name or account identifier to Google Analytics
The korysnyk.care website uses technical (necessary) cookies required for the operation of the site, including the korysnyk_consent cookie that stores your decision about the analytical cookies. In the dashboard.korysnyk.care web account, technical cookies are additionally used to maintain the session and authentication
Both web resources also use the analytical cookies of Google Analytics (_ga and _ga_<property identifier>), which serve to collect aggregated statistics on the use of the site and the web account. These cookies are set only after your consent in the cookie banner. Until you make a choice, and also if you decline, they are not set. Marketing cookies are not set
You can change your decision about the analytical cookies at any time - on the website through the "Налаштування cookie" link in the footer, in the web account through the "cookie та аналітика" section of the account settings. When consent is withdrawn, the _ga cookies already set are deleted. The decision itself is stored in the technical cookie korysnyk_consent on the korysnyk.care domain and applies to the website and the web account at the same time, so it has to be given or withdrawn only once; in another browser or after clearing cookies it has to be given again. You can additionally refuse the analytical cookies by means of your browser settings (blocking or deleting cookies) or by installing the official Google Analytics opt-out browser add-on. Technical cookies cannot be disabled, as without them authentication and the operation of the web account are impossible
The Service is not intended for persons under 16 years of age. We do not knowingly collect the personal data of children. If you become aware that a child has provided us with data without the consent of a parent or legal guardian, please notify us at admin@korysnyk.care and we will delete this data
We may update this Policy from time to time. The date of the last update is indicated at the beginning of the document. We will notify you of material changes through the application or by email at least 30 days before the changes take effect. Continued use of the Service after the changes take effect means your acceptance of the updated version
For matters of data protection, the exercise of your rights, complaints and other inquiries
Email: admin@korysnyk.care
Website: korysnyk.care
Legal entity: Korysnyk LTD, England and Wales
Company registration number: 16942523
Registered address: 128 City Road, London, United Kingdom, EC1V 2NX