Privacy Policy

1. The privacy of our website visitors is very important to us, and we are committed to protecting it. This Privacy Policy describes how personal information is processed on the website https://safeself.online (hereinafter — the “Website”).

2. Your consent to our use of cookies in accordance with the terms of this Policy when you first visit our website allows us to use cookies every time you visit our website.

3. This Policy describes how data is processed in the SafeSelf application (also — the “app”, the “platform”, “we”) — a web application (PWA) for online psychological support: a catalogue of psychologists, live availability, online session booking, a personal account, reminders, payments and specialist notes. The application is available at https://safeself.online.

4. The data controller (owner of the application): Individual entrepreneur Avsiukevich Yauheniya Nikolaevna, UNP 194039540, Republic of Belarus. Contact details are given in section O.

5. We process personal data in accordance with the Law of the Republic of Belarus “On Personal Data Protection” and, for users in the European Union, also in accordance with the General Data Protection Regulation (GDPR).

6. By using the application you confirm that you have read this Policy. We do not collect data for purposes other than those described in this document.

The following types of personal data may be collected, stored and used:

1. information about your computer, including your IP address, geographic location, browser type and version, and operating system;

2. information about your visits to and use of this website, including the referral source, length of visit, page views and website navigation paths;

3. information such as your email address that you enter when registering on our website;

4. information that you enter when creating a profile on our website, such as your name, contact details and preferences;

5. information that you enter when using the services on our website, including details of session bookings;

6. information generated when you use our website, including when, how often and under what circumstances you use it;

7. information relating to transactions you make through our website, including your name, address, phone number and email address;

8. information contained in any messages you send to us by email or through our website, including content and metadata;

9. any other personal information you send to us.

Depending on how you use the SafeSelf application, we process the following data:

10. account data: name, email address, phone number, city and country, preferred currency, profile picture, and your password as an irreversible hash (we do not store the password itself and cannot read it);

11. data from third-party sign-in: when you sign in with Google — your Google account identifier, email address, name and profile picture; when you sign in with Telegram — your user identifier, name and username; more about Google data in section M;

12. session booking data: the selected specialist, date, time, duration, format (online), time zone, booking comment, video meeting link, confirmation and payment status, booking change history;

13. information you provide to the platform of your own accord: your request topic, the content of messages to support or to the administrator, answers to surveys and mini-tests, notes you create in your personal account;

14. payment data: amount, currency, date and status of the payment, transaction identifier. Card details are processed solely by the payment service (internet acquiring) and are never stored on our servers;

15. technical data: IP address, browser and operating system type and version, device type, referral source, pages viewed, time and duration of the visit, cookie identifiers and anonymised web analytics statistics.

16. country by IP address: to show prices in the familiar currency (EUR, USD or BYN), the app determines the country from the IP address of the request. A local geo database, DB-IP Lite (IP Geolocation by DB-IP, https://db-ip.com, CC BY 4.0 licence), running on our server is used for this: the IP address is not sent to any external geo service and the detected country is not stored in your account — only your currency stays in the browser, and you can change it at any time with the switcher on the site.

We do not require you to provide information about your health. If you share such information with a specialist during a session or in a booking comment, it is processed as confidential information with restricted access (see sections G and N).

Before disclosing to us the personal information of another person, you must obtain that person's consent both to the disclosure and to the processing of that personal information in accordance with this Policy.

Personal information provided to us through our website will be used for the purposes set out in this Policy or on the relevant pages of the website. We may use your personal information for the following purposes:

1. administering our website and business;

2. personalising our website for you;

3. enabling you to use the services available on our website;

4. supplying services purchased through our website;

5. sending you statements, invoices and payment reminders, and collecting payments from you;

6. sending you email notifications that you have specifically requested;

7. dealing with enquiries and complaints made by you or about you relating to our website;

8. ensuring the security of our website and preventing fraud;

9. verifying compliance with the provisions and conditions governing the use of our website;

10. other purposes.

For the SafeSelf application this means in particular:

11. creating and maintaining your account, signing in to your personal account and protecting the account from unauthorised access;

12. showing specialists' available times, creating and confirming session bookings, rescheduling and cancelling bookings;

13. reminders about an upcoming session by email, in Telegram and in the application;

14. upon your subscription to the SafeSelf calendar — an .ics feed link your calendar app reads to show confirmed and paid sessions (section M);

15. settlements, refunds and accounting;

16. analysing anonymised usage statistics so that the application runs reliably and remains easy to understand.

Legal bases for processing: your consent, which you give when registering and confirm with a separate consent to personal data processing on your first sign-in; performance of the services agreement (public offer, https://safeself.online/oferta); compliance with legal requirements (accounting and tax records); our legitimate interests in ensuring the security, availability and abuse protection of the service. You may withdraw your consent at any time — see section I.

We will not, without your express consent, provide your personal information to any third party for their direct marketing.

We may disclose your personal information to our employees, insurers, professional advisers, agents, suppliers or subcontractors where necessary for the purposes set out in this Policy.

We may disclose your personal information:

1. to the extent provided by law;

2. in connection with any current or prospective legal proceedings;

3. in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk);

4. to the buyer (or prospective buyer) of any business or asset that we are selling (or planning to sell);

5. to the platform's specialists — to the extent necessary to provide the services you have chosen (your name, contact details and the content of your enquiry).

6. to infrastructure and service providers: hosting and application servers, the database, email delivery, payment services (internet acquiring), web analytics services — to the extent necessary for them to perform their functions on our behalf;

7. to Google services — only if you signed in with Google or connected calendar sync yourself; the scope of data and the purposes are described in section M.

We do not sell or rent personal data, we do not share it with third parties for their own marketing, and we do not use data received from Google APIs for advertising.

Except in the cases provided for in this Policy, we will not provide your personal information to third parties.

1. The information we collect may be stored, processed and transferred between any of the countries in which we operate, so that we can use the information in accordance with this Policy.

2. Personal information that you publish on our website or provide for publication on our website may be available via the internet around the world. We cannot prevent the use or misuse of such information by others.

3. You expressly agree to the transfer of the personal information described in this section.

1. This section sets out our data retention policies and procedures, which are designed to help us comply with our legal obligations regarding the retention and deletion of personal information.

2. Personal information that we process for any purpose must not be stored longer than is necessary for that purpose or those purposes.

3. Without prejudice to clause F-2, we normally delete personal data within 30 days after the purpose of processing it has been achieved.

4. Notwithstanding the other provisions of this section, we retain documents (including electronic documents) containing personal data: to the extent provided by law; if we believe that the documents may be relevant to any current or future legal proceedings; in order to establish, exercise or defend our legal rights.

5. Specific retention periods: account data — while the account exists and for no more than 30 days after its deletion; booking, payment and settlement data — for the period established by the legislation of the Republic of Belarus for accounting documents; Google access tokens — until you revoke access or delete your account; technical logs and anonymised statistics — no longer than 24 months.

1. We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

2. We will store all the personal information you provide on secure (password- and firewall-protected) servers.

3. All electronic financial transactions carried out through our website will be protected by encryption technology.

4. You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data transmitted over the internet.

5. You are responsible for keeping confidential the password that you use to access our website; we will not ask you for your password (except when signing in to our website).

We may update this Policy from time to time by publishing a new version on our website. You should check this page periodically to make sure you understand any changes. We may notify you of changes by email.

You may instruct us to provide you with any personal information we hold about you; the provision of such information will be subject to the provision of appropriate evidence of your identity.

We may withhold the personal information you request to the extent permitted by law.

You may at any time instruct us not to process your personal information for marketing purposes.

You have the right to: access your data and obtain a copy of it; correct inaccurate or incomplete data; delete your data or your entire account; restrict or object to processing; receive your data in a structured machine-readable format; withdraw your consent to processing at any time; lodge a complaint with the competent personal data authority (in the Republic of Belarus — the National Personal Data Protection Centre).

To exercise any of these rights, write to us at safeself-platform@yandex.by from the email address registered to your account; we will reply within 15 calendar days.

You can delete your account in your personal account or by a request to the address above. Together with the account, the related bookings and notes are deleted or anonymised, except for documents we are obliged to keep by law.

You can revoke the application's access to your Google account at any time at https://myaccount.google.com/permissions — after that calendar sync stops.

Our website contains hyperlinks to and details of third-party websites. We do not control and are not responsible for the privacy policies and practices of third parties.

Please let us know if the personal information we hold about you needs to be corrected or updated.

Our website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server every time the browser requests a page from the server.

We use cookies to recognise the computer when it visits the website, to analyse the use of the website, to improve the usability of the website and to personalise content.

Most browsers allow you to refuse to accept cookies (for example, through the privacy settings in Chrome, Firefox or Safari). Blocking all cookies will adversely affect the usability of many websites. You can delete cookies already stored on your computer through your browser settings.

When you first visit the website, we ask for your consent to the use of cookies — you can accept or decline them.

1. Google Sign-In. If you choose to sign in with Google, the SafeSelf application uses OAuth 2.0 and requests only basic scopes: openid, email, profile. We receive your Google account identifier, email address, name and profile picture and use them solely to create your account and to authenticate you at sign-in. We have no access to your Gmail messages, Google Drive files, contacts, location or any other Google account data.

2. Calendar. Sessions can be added to your own calendar without giving the application access to your Google account: your personal account has a subscription link to the SafeSelf calendar (an .ics feed that your calendar app — Google, Apple, Outlook or another — re-reads periodically), and booking emails contain “add to Google Calendar” and .ics links. These links use no Google APIs: the application requests no calendar scopes and never reads or copies your events.

3. Storage and protection. The subscription link contains a random token and works as a password: it exposes only your sessions (for a psychologist, their schedule). The token is stored on our server, is not shared with third parties, can be re-issued with one button in your account (the old link stops working immediately) and is deleted together with your account.

4. Use limitations. We do not sell data obtained from Google APIs, do not use it for advertising, creditworthiness assessment, for training or tuning artificial intelligence models, or for any other purposes unrelated to the operation of the application.

5. SafeSelf's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

6. You can revoke the application's access to your Google account at any time at https://myaccount.google.com/permissions or by turning calendar sync off in your personal account.

1. The SafeSelf application does not use Google APIs to create, generate, alter, distribute or store intimate imagery of individuals without their consent, including imagery created or edited with artificial intelligence (AI-generated non-consensual intimate imagery, AI NCII), or any other sexually explicit material involving minors.

2. The service provides no image generation or image editing features. The use of Google APIs in the application is limited to signing in (section M): Google API data is used neither for image generation nor for the calendar.

3. Users are prohibited from using the platform to prepare, distribute or store AI NCII or other unlawful material. Such activity is blocked and the accounts of offenders are deleted; detected cases are reported to law enforcement.

4. By using the application you confirm that you comply with the Google APIs Terms of Service (https://developers.google.com/terms) and do not use Google APIs in any way that violates those terms.

1. The current version of this Policy is always published on this page: https://safeself.online/privacy. Last updated: 22 October 2026.

2. Data controller: Individual entrepreneur Avsiukevich Yauheniya Nikolaevna, UNP 194039540, 220102, Republic of Belarus, Minsk, Michurina st. 8, apt. 22.

3. Contacts for personal data matters: email safeself-platform@yandex.by, tel. +375 44 728-81-46.

4. We publish material changes to this Policy on this page and, where necessary, notify users by email; by continuing to use the application after an update you agree to the new version.