Consent to the Collection and Processing of Personal Data
| Version | pawhelp-legal-1.0.0 |
|---|---|
| Effective date | 7 November 2026 |
| Public URL | https://pawhelp.app/legal/en/personal-data-consent |
I, the PawHelp app user who entered my surname, given name and patronymic before giving this consent, confirm that I am 18 or over. Acting freely, of my own will and in my own interest, in accordance with Arts. 7 and 8 of the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection" (the "Law"), I consent to the collection and processing of my personal data on the following terms.
1. Owner and operator
- Owner of the databases containing personal data: the operator (the database owner and the operator are the same individual).
- Operator: Andrei Makarov, IIN 890620050408, address 45 A. Kusaiynov Street, Uralsk, West Kazakhstan Region, Kazakhstan.
- Personal data contact: privacy@pawhelp.app.
2. List of personal data
-
Account data:
- Firebase account identifier (UID);
- email address, Google profile name and photo — if present in the Google account;
- sign-in method and times.
-
Region:
- chosen country of residence and assigned service region;
- app language.
-
Confirmations:
- declaration of being 18 or over;
- the surname, given name and patronymic (the patronymic only if my identity document has one) that I entered before consenting;
- accepted document versions, time and language of acceptance;
- consent event log.
-
Reports:
- animal type, description, help type and urgency, status, times;
- exact location coordinates;
- for the Kazakhstan region, the city;
- participation marks and status change requests.
- Photos I attach to reports.
- Messages in report chats: text, author, time. Blocks I set and that other users set on me: account identifiers and time.
- Complaints I file: reason, comment, target. Also complaints about my content, moderator decisions concerning my account (including warnings and restrictions), notices of those decisions and records of abuse-protection triggers.
- Notification data: Firebase installation ID (FID), language, platform, delivery log.
- Service data: daily usage counters, publication reservations, abuse-protection counters.
- Subscription data — if the subscription is sold: Google Play purchase token, base plan (month or year), status and end date of the paid period, auto-renewal flag, Google Play order number and history of subscription changes.
- Technical data: IP address, time and parameters of requests to the servers.
3. Purposes of processing
| Purpose | Data from section 2 |
|---|---|
| Registration, sign-in and account identification | 1, 2 |
| Admitting adult users only and proving consent | 1, 3 |
| Determining the service region and where data is stored | 2 |
| Publishing reports and showing them on the shared map | 4, 5 |
| Coordinating help and communication between participants | 4, 6 |
| Moderation, user protection, enforcing the Community Guidelines | 4–7 |
| Sending notifications, if enabled | 8 |
| Applying limits and protecting against abuse | 9 |
| Providing the subscription, if sold | 10 |
| Operating and securing the service | 1, 11 |
| Deleting the account and proving deletion | 1, 2 |
Data is not used for advertising, sale to third parties or profiling.
4. Operations on data
Collection, recording, systematisation, accumulation, storage, clarification (updating, modification), retrieval, use, distribution to other PawHelp users (section 6), cross-border transfer (section 7), transfer to recipients (section 5), blocking, anonymisation, deletion and destruction. Processing is automated; complaints are reviewed manually by moderators.
5. Transfer to third parties
I consent to the transfer of my data to parties that process it on the operator's instructions for the purposes in section 3, to the extent needed for each purpose:
-
Google LLC:
- Firebase Authentication and Google Sign-In — data from item 2.1;
- Cloud Firestore — data as described in section 11 of the Privacy Policy;
- Firebase Cloud Messaging — data from item 2.8;
- Google Play — data from item 2.10, if the subscription is sold;
-
Render Services, Inc. — hosting of the
pawhelp-apiserver; - Supabase, Inc. — photo storage for the international region;
-
Kazakhstan region hosting:
- KZ API server — Hoster.kz, Almaty, Republic of Kazakhstan;
- database — Hoster.kz, Almaty, Republic of Kazakhstan;
- photo storage — Hoster.kz, Almaty, Republic of Kazakhstan;
- backups — Hoster.kz, Almaty, Republic of Kazakhstan;
- map image provider OpenStreetMap Foundation (tile.openstreetmap.org) — IP address and requested map tiles.
The data sent to each party is listed in the Privacy Policy (https://pawhelp.app/legal/en/privacy, section 11). Data is disclosed to public authorities only where the law requires.
6. Distribution of report data to other PawHelp users
Showing report data to other users is distribution of personal data within the meaning of Art. 1 of the Law (providing access to personal data). I hereby consent to this distribution: the data of my reports is shown to all signed-in PawHelp users of both regions who have confirmed 18+, while the report is not hidden. The data shown is listed in the Privacy Policy (section 7).
The photo is shown only to users of my region. Messages are visible only to participants of the report's chat. My name and email address are not shown to other users.
The operator does not place my personal data on open web pages, in search engines or in open directories. Reports are available only inside the app after sign-in and the 18+ confirmation.
7. Cross-border transfer
Some data is transferred outside the Republic of Kazakhstan. Account data is processed by Firebase Authentication in the United States, the Render server is located in the Frankfurt region (Germany), the Cloud Firestore database in the eur3 multi-region (European Union), notifications are delivered through Google's global infrastructure, and international photos are stored in Ireland (region eu-west-1).
I hereby consent to this cross-border transfer (Art. 16(3)(1) of the Law). The data categories, recipients, purposes and the data that stays in the Kazakhstan contour are listed in the Privacy Policy (section 11).
8. Term of consent
This consent is valid until the account is deleted or until withdrawn. When the document changes, the app asks for consent to the new version. After withdrawal or account deletion, data is destroyed within the periods in the Privacy Policy (section 13), except records that must be kept by law or to fulfil an obligation.
9. Withdrawing consent
I can withdraw this consent by:
- deleting my account in the app (Profile → Delete account) or at https://pawhelp.app/delete-account;
- sending a request to privacy@pawhelp.app.
The operator stops processing within 15 working days of receiving the withdrawal or sends a reasoned refusal (Art. 8(7) of the Law). Withdrawal is not allowed if it contradicts the laws of the Republic of Kazakhstan or an obligation remains unfulfilled (Art. 8(2) of the Law).
I understand that the service cannot work without processing the data in items 2.1–2.4. Withdrawing consent therefore leads to deletion of the account.
10. Confirmation
This consent is given electronically by ticking the corresponding box in the PawHelp app. The operator keeps my identifier, the document version, language and time of consent as proof that consent was obtained.
The date and time of consent are recorded by the app. Text version: pawhelp-legal-1.0.0.
References
- Law of the Republic of Kazakhstan No. 94-V, Art. 1 (items 3-2, 15, 17), Art. 7, Art. 8 (paras. 1, 2, 4, 7), Art. 15, Art. 16, Art. 24: https://adilet.zan.kz/rus/docs/Z1300000094
- Law of the Republic of Kazakhstan No. 326-VIII of 24 June 2026 (the personal data amendments entered into force on 25 August 2026; other provisions of the Law have different dates): https://old.adilet.zan.kz/rus/docs/Z2600000326
- Rules for the Collection and Processing of Personal Data (Order No. 395/НҚ; items 6, 6-3), current version including the amendments made by Order No. 556/НҚ of 17 September 2026 (in force since 2 October 2026): https://old.adilet.zan.kz/rus/docs/V2000021498
- Order No. 524/НҚ of 31 August 2026 (in force since 19 September 2026; amendments to Order No. 199/НҚ on the necessary and sufficient list of personal data; a separate act that does not replace the Rules for the Collection and Processing): https://old.adilet.zan.kz/rus/docs/V2600039799