The PODOCARD service (hereinafter referred to as the Service) pays great attention to the protection of its users' personal data. Users of the Service can view the pages of the website without disclosing any personal data about themselves. However, in order to provide the services offered by our Service, we need your contact details so that we can contact you and provide you with the selected services in a high-quality manner. We do not transfer your personal data to third parties and protect its confidentiality.
This policy is governed by the Law of Ukraine ‘On the Protection of Personal Data’ dated 01.06.2010 No. 2297-VI.
Last updated: 13 August 2026.
TERMINOLOGY
The following terms are used in this Privacy Policy:
‘Personal data’ means any information relating directly or indirectly to a specific or identifiable natural person (data subject).
‘Processing of personal data’ means any action (operation) or set of actions (operations) performed with or without the use of automation tools on personal data, including collection, recording, systematisation, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, destruction of personal data.
‘Confidentiality of personal data’ - a requirement that must be observed by the Administrator or other person who has access to personal data not to disclose it without the consent of the subject of personal data or the existence of another legal basis.
‘User’ - a person who has reached the age of 18 and who accesses the Service via the Internet and uses the Service.
‘User's Client’ - a natural person whose information is entered by the User into the Service within the scope of providing services in the field of podiatry, cosmetology, hardware pedicure or related areas.
‘Client Profile’ - a set of data entered into the Service about an individual client (full name, contact information, photo, visit history, notes, signed documents, etc.).
‘Administration’ - Private Entrepreneur under the laws of Ukraine Serdiukova Anna, as well as any other persons authorised to maintain the functioning, control and monitor the Service.
‘Service’ - software products, as a result of computer programming, designed to organise internal electronic accounting of clients within the professional activities of relevant specialists, whose servers are located in a secure software and hardware platform of a ‘cloud’ data centre, accessed via a website located on the Internet at http://podocard.com and/or the PodoCard mobile application, which is available for download on Google Play and the App Store, provided for personal use by users.
‘Services’ - access to the tools offered on the Website for use by the User. PodoCard is an electronic accounting tool that allows users to systematise and store customer data within the scope of their professional activities in the field of podiatry, cosmetology, hardware pedicure and related areas (hereinafter referred to as the Tools). The application is not a medical device and is not intended for the provision of medical services, diagnosis or treatment.
SECTION 1: GENERAL PROVISIONS
This privacy policy establishes the procedure for obtaining, storing, processing, using and disclosing users' personal data. We obtain users' personal data from users when they use the Service. Information marked in a special way is mandatory. Other information is provided by the user at their own discretion.
The confidentiality of personal data is a mandatory condition for the Service to comply with access to the personal data of Users and Users' Clients, with the requirement not to allow its dissemination without the user's consent or other legal basis.
Use of the Service by Users implies agreement with this privacy policy and the terms of personal data processing.
If the User does not agree with the terms of the policy, they must stop using the Service.
This policy applies only to the Service and does not control or bear responsibility for third-party websites and services.
The administration does not verify the accuracy of personal data provided by Users to the Service.
By using the Service, the User consents to the Administration processing their personal and registration data and that of their Clients. If the User decides to provide their personal data, as well as the personal data of their Clients, they thereby consent to the transfer and storage of this data.
Use of the Service is only available to persons who have reached the age of majority in accordance with the laws of the country of residence and/or citizenship of such person and who are capable of entering into legally binding contracts in accordance with applicable law. If you do not meet these requirements and/or you have not received the explicit consent of your parents and/or legal representative, please do not use the Service. If you are a parent or legal representative of a child and allow them to use our Service, these terms apply to you and you are responsible for the child's actions on our Service. Any further use of the Service and/or any part thereof means that you have read and understood the Terms of Use and Privacy Policy and agree to comply with all sections of the Terms of Use and Privacy Policy.
SECTION 2: PERSONAL DATA
To use the Service, the User must register an account, providing information such as:
Full name
Phone number
Email address
Please note that we make every effort to protect and not disclose your personal data and photos.
If you provide us with personal information, you understand that we may collect, store, use, and disclose your personal information in accordance with this Privacy Policy.
Our Service collects and analyzes various information. Such information may include your first name, last name, contact phone number, email address, mailing address, residential address, date of birth, photos, and various information regarding User Clients' procedures (hereinafter referred to as “Personal Information”).
Other information is provided by the User at their discretion.
If we receive personal information about you from a third party, we will protect it in accordance with this Privacy Policy. If you are a third party providing personal information about someone else, you represent and warrant that you have that person's consent to provide us with their personal information.
If you have previously consented to our use of your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below and stating “Privacy Request” in the subject line.
You may request details of the personal information we hold about you by contacting us using the details below, specifying “Privacy Request” in the subject line.
If you believe that any information about you is inaccurate, outdated, incomplete, irrelevant, or misleading, please contact us using the details below, specifying “Privacy Request” in the subject line. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or outdated.
If you believe that we have violated applicable data protection laws and wish to file a complaint, please contact us using the details below and provide us with full details of the alleged violation, marking your email subject line with “Privacy Request.” We will investigate your complaint immediately and respond to you in writing, setting out the results of our investigation and the steps we will take to address your complaint. You also have the right to contact a regulatory authority or data protection authority in connection with your claim.
The administration has the right to send information, including advertising messages, to the User's email and mobile phone with their consent. The User has the right to refuse to receive advertising and other information without giving reasons for the refusal. Notifications from the Service about orders and the stages of their processing cannot be rejected by the User.
SECTION 3: PURPOSES OF COLLECTING AND PROCESSING USERS' PERSONAL DATA
The purpose of processing personal data is to ensure the implementation of civil law relations and the provision/receipt of Services.
The Service collects and stores only the personal data necessary to provide the Services.
The Service collects data for communication with the User, including notifications about the provision of Services, informing the User about the provision of Services, as well as for processing requests and applications from Users.
The processing of personal data of the User and the Users' Clients is carried out throughout the entire period of use of the Service and, after access to it ends, for the retention periods specified below, or until the consent is withdrawn / a deletion request is submitted.
Data retention periods after access to the Service ends: if the User has never purchased a paid subscription — 2 (two) months from the end of the trial period; if the User has purchased a paid subscription — 2 (two) years from the end of the last paid period. After that period expires, the User's account and all data entered into it, including the data of the User's Clients, are deleted automatically without the possibility of recovery.
SECTION 4: TERMS OF ACCESS TO THE DATABASE
We do not transfer Users' personal data to third parties except in cases specified by Ukrainian law.
The disclosure of the User's personal data may occur when using the Service. In particular, the User agrees that the Service has the right to transfer personal data solely for the purpose of fulfilling its obligations to Users.
In the event of loss or disclosure of personal data, the Service shall immediately inform the User.
The Service takes the necessary organizational and technical measures to protect personal information from unauthorized or accidental access, destruction, blocking, copying, distribution, and other unlawful actions of third parties.
SECTION 5: CHANGING USERS' PERSONAL INFORMATION
The user may at any time change (update, supplement, delete) the personal information provided by them or part thereof by sending a message to the email address posted on the Service at the following address: support@podocard.com.
SECTION 6: CHANGES TO THE PRIVACY POLICY
We reserve the right to change the terms of the privacy policy. In this case, we will replace the version of the document in the “Privacy Policy” section. Please review these terms periodically to stay informed about how the Service protects the personal data of its users.
If the User disagrees with any changes made to the Policy, they must stop using the Service and request that the Administration delete their Personal Data.
SECTION 7: LINKS TO OTHER SITES
The Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Please note that these external sites are not operated by us. Therefore, we strongly recommend that you review the privacy policies of these sites. We do not control and are not responsible for the content, privacy policies, or practices of any third-party sites or services.
SECTION 8: FEEDBACK
All suggestions or questions regarding this policy should be communicated to the Service Administration at the email address provided on the Service at the following address: support@podocard.com.
SECTION 9: USER RIGHTS TO PRIVACY (GDPR)
GDPR - is a European Union law that regulates how companies protect the data of EU residents and gives EU residents more control over their personal data.
The GDPR applies to any international company, not just companies based in the EU and EU residents. Our customers' data is important regardless of where they are located, which is why we have implemented GDPR compliance as a basic standard for all our operations worldwide.
Subject to certain conditions, you have the following rights:
request copies of their personal data;
request correction of information that Users believe to be inaccurate;
request supplementation of information that Users believe to be incomplete;
request deletion of personal information about Users at any time and will take reasonable steps to delete the User's personal information from our current records. If Users request the deletion of User personal information, we will inform Users how this deletion will affect the User's use of the Service or products and services. There may be exceptions to this right for specific legal reasons, which, if possible, will be explained to Users in response to the User's request;
request restriction of processing of the User's personal data if (i) Users are concerned about the accuracy of the User's personal data; (ii) Users believe that the User's personal data has been processed unlawfully; (iii) Users need to retain personal data solely for the purposes of legal proceedings; or (iv) in the process of considering the User's objection to processing based on legitimate interests;
object to the processing of the User's personal data based on Our legitimate interests or public interests. In this case, we are required to provide compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the User in order to continue processing the User's personal data;
request a copy of the personal information provided by the User; the format of such information must be structured, commonly used, and machine-readable.
We have 30 days to respond to you if you have submitted a request. To exercise any of these rights, please contact us with “GDPR Privacy Request” in the subject line.
SECTION 10: USER CLIENT CONSENT
The User is fully responsible for obtaining duly executed consent from its customers (the User's Customers) for the processing of their personal data, including photos, medical information, signatures, and other sensitive information entered into the Service.
The PodoCard Service does not directly collect the personal data of the User's Clients. All such information is entered into the Service by the User, solely for professional purposes. The Service provides the User with an informed consent template, which the User can use as an example for establishing the appropriate legal basis.
In the event of a request from a personal data subject regarding the processing, deletion, or modification of their data, the User is obliged to take the appropriate actions themselves or forward the request to the Administration.
SECTION 11: OTHER TERMS
The Service may use cookies, third-party SDKs (including but not limited to Google Analytics, Appsflyer, Firebase, etc.), as well as automatically collect technical information about Users (such as IP address, device type, browser, operating system, device ID, etc.). Information about the privacy policies of analytical pixels and third-party SDKs used by the Service will be provided further in this Policy.
The Service uses Meta Pixel to collect statistics and analytics that help improve the functionality and user experience of the Service. More details about Meta’s Privacy Policy can be found at: https://www.facebook.com/privacy/policy.
To manage subscriptions and purchases in the mobile application, the Service uses the RevenueCat platform. Through the RevenueCat SDK, the Service automatically receives and stores technical information about the User's device: platform type (iOS, Android, web, etc.), operating system version, application version, country based on the last app launch, and the dates of the first and last app launch. This data is used to provide and support the Services, and to diagnose and improve the operation of the Service. More details about RevenueCat's Privacy Policy can be found at: https://www.revenuecat.com/privacy.
Payments are processed by payment providers: the Apple App Store (purchases on iOS devices), as well as the WayForPay and monobank payment services (payments on PodoCard payment pages). The Service does not collect or store full payment card details of Users — payment data is processed by the respective payment provider in accordance with its privacy policy. After a successful payment, a payment confirmation with an invoice in PDF format is sent to the User's email address.
Within the partner (referral) programme, when a visitor follows a referral link in the form podocard.com/r/{code}, the Service records technical data about the visit (IP address, an anonymised browser (user-agent) hash, platform type, date and time of the visit) and stores a cookie named podocard_ref in the browser for up to 90 days (for the podocard.com domain and its subdomains). This data is used solely to attribute a subsequent registration to the referring partner; on Android devices, the Google Play Install Referrer mechanism may be used for the same purpose, and an installation (registration) may be matched with a recorded visit by IP address within 72 hours. The referring partner sees limited information about referred users in the application: the first name and the first letter of the last name of the account owner, the organisation identifier, the registration date and the subscription status; contact details of referred users are not shared with the partner.
All information processed within the Service is provided by the User voluntarily solely for the purpose of using the customer accounting functionality within the scope of their professional activities.
The Administration of the Service reserves the right to implement additional data collection tools in the future, and Users will be notified by means of amendments to this Privacy Policy.
The User undertakes to periodically review the current version of this Privacy Policy.
DETAILS
Private Entrepreneur under the laws of Ukraine Serdiukova Anna
TIN 3117915209
Tel. +380731234011
E-mail: support@podocard.com