Privacy Policy
Last Updated: August 12, 2025.
⚠️ DISCLAIMER:
This application is not affiliated with the government and does not represent any governmental entity. The information provided is for informational purposes only and should not be considered an official government recommendation. It was created by an independent team with no connection to any state organization.
All information is sourced from open official sources:
– Ministry for Reintegration of the Temporarily Occupied Territories of Ukraine — https://minre.gov.ua
– Unified State Web Portal of Electronic Services “Diia” — https://diia.gov.ua
– Ukrainian Parliament Commissioner for Human Rights — https://www.ombudsman.gov.ua
– Verkhovna Rada of Ukraine — https://zakon.rada.gov.ua
– Cabinet of Ministers of Ukraine — https://www.kmu.gov.ua
At “Ya-VPO”, we aim to provide you with the best possible experience so that you can fully enjoy our services. Your privacy and the security of your personal data are, and will always remain, extremely important to us. That is why we want to clearly explain how and why we collect, store, transfer, and use your personal data, as well as outline the control and choice options you have regarding when and how you decide to share your personal information. This is our goal, and this Privacy Policy (“Policy”) will explain in more detail what we mean.
This Privacy Policy applies to the mobile application “Ya-VPO” for Ukrainians seeking support, information, and new opportunities amid internal displacement (“Ya-VPO”, “we”, “our”, “us”). The terms used in this Privacy Policy have the same meanings as in our Terms of Use, unless otherwise specified.
This app is not an official app of the Government of Ukraine and does not represent any government entity.
We respect your privacy and are committed to protecting it in accordance with this Policy. Please read this Policy carefully to understand our practices regarding your information and how we will handle it.
If you do not agree with our policy and principles, do not register, access, or use “Ya-VPO”. By registering, accessing, or using “Ya-VPO”, you agree to this Privacy Policy. This Policy may be updated from time to time. Your continued use of or access to “Ya-VPO” after any changes are made will be considered your acceptance of those changes, so please check this Policy periodically.
ABOUT THIS POLICY
This Policy outlines the key details regarding your personal data in relation to the data controller and processor operating within “Ya-VPO”, registered at: Ukraine, 65045, Odesa, Sviatoslava Rikhtera Street, Building 33.
This Policy applies to the “Ya-VPO” application and any related services (hereinafter referred to as the “Ya-VPO Services”). The terms governing your use of the “Ya-VPO” application are defined in our Terms of Use (“Terms of Use“).
From time to time, we may develop new or offer additional services. If the implementation of these new or additional services results in significant changes to the way we collect or process your personal data, we will provide you with additional information or updated terms or policies. Unless stated otherwise at the time such new or additional services are introduced, they will be governed by this Policy.
The purpose of this Policy is to:
– Ensure that you understand what personal data we collect about you, why we collect and use it, and to whom we may disclose it;
– Explain how we use the personal data you share with us to provide you with the best possible experience when using “Ya-VPO”;
I- nform you of your rights and choices regarding the personal data we collect and process about you, as well as how we protect your privacy.
We hope this helps you understand our commitment to privacy. If you do not agree with the content of this Policy, please remember that it is your choice whether or not to use “Ya-VPO”.
YOUR RIGHTS
If you are a citizen or resident of Ukraine, you have the following rights under the Law of Ukraine “On Personal Data Protection”:
1. To know the sources of collection, the location of your personal data, the purpose of its processing, and the location or place of residence (stay) of the owner or processor of personal data, or to authorize designated persons to obtain this information, except in cases specified by law;
2. To receive information about the conditions for access to personal data, including information about third parties to whom your personal data is transferred;
3. To access your personal data;
4. To receive a response within thirty calendar days from the date of request (unless otherwise provided by law) as to whether your personal data is being processed, as well as to obtain the content of such personal data;
5. To submit a reasoned request to the owner of personal data with an objection to the processing of your personal data;
6. To make a justified request for the modification or deletion of your personal data by any data owner or processor if such data is processed unlawfully or is inaccurate;
7. To protect your personal data from unlawful processing and accidental loss, destruction, or damage due to intentional concealment, failure to provide, or untimely provision of data;
8. To file complaints about the processing of your personal data with the Authorized Representative or in court;
9. To make reservations regarding the limitation of the right to process your personal data when giving consent;
10. To withdraw your consent to the processing of personal data;
11. To know the mechanism of automatic processing of personal data;
12. To be protected from automated decision-making that has legal consequences for you;
13. Any other rights provided by Ukrainian legislation.
If you are a citizen or resident of the European Economic Area (EEA) or the European Union (EU), you have rights under the General Data Protection Regulation (GDPR).
The General Data Protection Regulation, or “GDPR,” grants individuals certain rights regarding their personal data. Accordingly, we are committed to providing transparency and control to help users exercise these rights. These rights are available to individuals, subject to the limitations provided under applicable law:
* Right of access – the right to be informed about the personal data we process about you and to request access to that data;
* Right to rectification – the right to request that we correct or update your personal data if it is inaccurate or incomplete;
* Right to erasure – the right to request that we delete your personal data;
* Right to restrict processing – the right to request that we temporarily or permanently stop processing all or some of your personal data;
* Right to object – the right to object at any time to the processing of your personal data based on your specific situation. You also have the right to object to the processing of your personal data for direct marketing purposes;
* Right to data portability – the right to request a copy of your personal data in an electronic format and the right to transmit that data for use in another service;
* Right not to be subject to automated decision-making – the right not to be subject to a decision based solely on automated processing, including profiling, if the decision would have legal effects on you or similarly significant consequences.
If you have any questions about your privacy, your rights, or how to exercise them, please contact us using the “Contact Us” form. If you have concerns about how we process your personal data, we hope you will work with us to resolve them. However, you also have the right to contact and file a complaint with your local data protection authority.
Additional privacy rights under the California Consumer Privacy Act (CCPA) can be found in our supplemental policy “For California Residents,” which provides further information regarding the processing of your personal data.
If you are located outside the European Economic Area, the European Union, California, or Ukraine, your country may have other privacy laws that grant you different rights. However, the GDPR is one of the most comprehensive privacy laws in the world, so you are largely covered by the provisions outlined in this document.
INFORMATION WE COLLECT AND HOW WE COLLECT IT
Here is the full translated version of your last message in English, preserving the original structure:
We collect information from and about users of “Ya-VPO”:
* Directly from you when you provide it to us;
* Automatically when you use “Ya-VPO” (e.g., IP address and/or browser and device characteristics); and
* Data we receive from our partners.
A description of the information we collect and how we collect it is provided below:
Account creation and user profile registration:
* Type of data used: User contact information (phone number)
* Source: Provided directly by the user
* Purpose: For registration and identification
* Storage location: “Ya-VPO” server
* Type of data used: Image or photo
* Source: Provided directly by the user
* Purpose: For personalization
* Storage location: “Ya-VPO” server
* Type of data used: Email address
* Source: Provided directly by the user
* Purpose: For contacting support, sending user messages
* Storage location: “Ya-VPO” server
* Type of data used: Phone number
* Source: Provided directly by the user
* Purpose: For identification, contacting support, service order notifications (if enabled by the user)
* Storage location: “Ya-VPO” server
* Type of data used: City / location
* Source: Provided directly by the user
* Purpose: For managing addresses in the user profile
* Storage location: “Ya-VPO” server
* Type of data used: Address (city, street, building, apartment)
* Source: Provided directly by the user
* Purpose: For managing location-based features
* Storage location: “Ya-VPO” server
From the government services portal:
* Type of data used: First name, middle name, last name
* Source: Government services portal
* Purpose: To verify and update accurate user information on the platform
* Storage location: Government services portal database
* Type of data used: Email address
* Source: Government services portal
* Purpose: To verify and update accurate user information on the platform
* Storage location: Government services portal database
* Type of data used: Address
* Source: Government services portal
* Purpose: To verify and update accurate user information on the platform
* Storage location: Government services portal database
* Type of data used: Phone number
* Source: Government services portal
* Purpose: To verify and update accurate user information on the platform
* Storage location: Government services portal database
* Type of data used: Identification code (Tax ID / DRFO code)
* Source: Government services portal
* Purpose: To verify and update accurate user information on the platform
* Storage location: Government services portal database
Appointments with the Administrative Services Center (CNAP):
* Type of data used: First name, middle name, last name
* Source: Provided directly by the user
* Purpose: For booking and managing CNAP appointments
* Storage location: “Ya-VPO” server
* Type of data used: Phone number
* Source: Provided directly by the user
* Purpose: For identity verification and appointment notifications
* Storage location: “Ya-VPO” server
* Type of data used: City / location
* Source: Provided directly by the user
* Purpose: To display the nearest CNAP centers
* Storage location: “Ya-VPO” server
Petitions:
* Type of data used: First name, middle name, last name
* Source: Provided directly by the user
* Purpose: For verification, signing, and submission of petitions
* Storage location: “Ya-VPO” server
* Type of data used: Phone number
* Source: Provided directly by the user
* Purpose: For verification, signing, and submission of petitions
* Storage location: “Ya-VPO” server
* Type of data used: Email address
* Source: Provided directly by the user
* Purpose: For identification and petition signing, receiving notifications
* Storage location: “Ya-VPO” server
* Type of data used: City / location
* Source: Provided directly by the user
* Purpose: To display the nearest CNAP centers
* Storage location: “Ya-VPO” server
* Type of data used: Voting result data (for petitions)
* Source: Provided directly by the user
* Purpose: For signing and submitting petitions
* Storage location: “Ya-VPO” server
Let me know if you’d like this turned into a table or formatted as a formal privacy policy section.
OUR PRINCIPLES REGARDING USER PRIVACY AND DATA PROTECTION
* Lawfulness, transparency, and fairness
* Purpose limitation
* Data minimization
* Accuracy
* Storage limitation
* Confidentiality and integrity
Your privacy and security are extremely important to us. We will always adhere to these principles.
Data We Collect for Our Analytics
* Device information, including model and IP address;
* User interface activity events (e.g., clicks on interactive buttons/elements within “Ya-VPO”): information about your interaction with “Ya-VPO”, such as your search queries (including the date and time of any queries), browsing history, action and interaction history with “Ya-VPO”, and viewed content. This may also include information about your use of third-party applications in connection with “Ya-VPO”;
* Inferences about your interests and preferences, based on your usage of “Ya-VPO”;
* Certain technical data, which may include:
* URL information;
* Online identifiers, including IP addresses;
* Information about the types of devices you use, such as unique device identifiers, network connection type (e.g., Wi-Fi, 3G, LTE), service provider, network and device performance, browser type, language, digital rights management data, and operating system;
* Attributes of devices on your Wi-Fi network that are accessible for connection to “Ya-VPO”;
* Your location, which may be obtained or inferred from certain technical data (e.g., your IP address, your device’s language settings), to meet geographic requirements in our licensing agreements and to provide you with personalized content.
DATA WE RECEIVE FROM OUR PARTNERS
We may collect a limited amount of data about you from various third parties, such as publicly available databases, marketing partners, social media platforms, and other external sources. These third-party sources may vary over time and can include:
* Device information, including model and IP address
* User interface activity events (e.g., clicks on interactive buttons/elements within “Ya-VPO”): data on how you interact with “Ya-VPO”, such as your search queries (including the date and time of any queries), browsing history, your actions and interactions with “Ya-VPO”, and content viewed. This may also include data on your use of third-party applications in connection with “Ya-VPO”
* Inferences about your interests and preferences, drawn from your use of “Ya-VPO”
* Certain technical data, which may include:
* URL information
* Online identifiers, including IP addresses
* Device types you use, such as unique device identifiers, network connection type (e.g., Wi-Fi, 3G, LTE), service provider, network and device performance, browser type, language, digital rights management identifiers, and operating system
* Attributes of devices connected to your Wi-Fi network that are accessible to “Ya-VPO”
* Your location, which may be obtained or inferred from certain technical data (e.g., your IP address, language settings on your device), to comply with geographic requirements under our licensing agreements and to provide you with personalized content.
Clarification of Information Source
All information presented in the application is sourced from publicly available data and independent expert input.
INFORMATION YOU PROVIDE TO US
When you register with, access, or use “Ya-VPO”, we may ask you to provide information that (a) can be used to identify you—such as your name, mobile phone number, email address, or any other personal or identifying information as defined under applicable law (“personal information”); and/or (b) relates to you but does not directly identify you personally.
This information includes:
* Information you provide by filling out forms on “Ya-VPO”. This includes data submitted during registration to use or access “Ya-VPO”. We may also ask you to provide information when you interact with us (e.g., in response to our messages or announcements), report a problem with “Ya-VPO”, or otherwise communicate with us. If you use a third-party service to create an account, we will receive personal data from that service—but only if you have given consent for your personal data to be shared with us by that third party.
* Records and copies of your correspondence, including email addresses, if you contact us;
* Your responses to surveys.
INFORMATION COLLECTION AND TRACKING TECHNOLOGIES
The technologies we use for automatic information collection may include:
Web Beacons:
* Parts of “Ya-VPO” and our emails may contain small electronic files known as web beacons (also referred to as clear GIFs, pixel tags, and single-pixel GIFs), which allow us, for example, to count users who have visited certain pages of “Ya-VPO” or opened an email, as well as to gather other related statistics (such as tracking the popularity of specific content, features, or services of “Ya-VPO”, and verifying system and server integrity).
* Automatically Collected Information:
Certain information—such as your IP address and/or browser and device characteristics—is collected automatically when you use “Ya-VPO”.
We automatically collect certain information when you visit or use “Ya-VPO”. This information does not reveal your identity (such as your name or contact details), but it may include device and usage information—such as your IP address, browser and device characteristics, operating system, language preferences, URLs, device name, country, location, usage patterns, and other technical data. This information is primarily used to maintain the security and functionality of “Ya-VPO”, as well as for internal analytics and reporting purposes.
Device-specific information may include your mobile device ID, model, manufacturer, and location data.
In addition, we may use third-party software to display advertisements within “Ya-VPO”, conduct email marketing campaigns, and manage other interactive marketing initiatives. This third-party software may use tracking technologies to help manage and optimize your experience with “Ya-VPO”.
THIRD PARTIES
When you use or access “Ya-VPO” or its content, certain third parties may use automated information collection technologies to gather data about you or your device, or you may otherwise access and use third-party platforms, software, and applications.
We do not control these third parties’ tracking technologies or how they may be used. If you have questions about how a third party processes your information, you should contact the relevant provider directly. You acknowledge and agree that your access to and use of such third-party tools may be governed by their respective terms of use and privacy policies.
We may also partner with specific third-party providers (recipients) to enable tracking technologies and remarketing services within “Ya-VPO” to, among other purposes, analyze and monitor usage of “Ya-VPO”, determine the popularity of certain content or features, and better understand online activity. By accessing “Ya-VPO”, you consent to the collection and use of your information by these third-party providers. We recommend reviewing their privacy policies and contacting them directly with any questions. We do not share personal information with these third-party providers.
WHY WE COLLECT YOUR DATA
When you use or interact with “Ya-VPO”, we use various technologies to process the personal data we collect about you for a range of purposes. Below, we outline the reasons why we process your personal data, the corresponding legal bases that allow us to do so, and the categories of personal data used for each purpose:
We process your personal data for the following purposes:
To provide and personalize “Ya-VPO”:
* Legal bases: Performance of a contract, legitimate interest, or your consent
* Data used: User data, usage data, payment data, verification data
To understand, diagnose, detect, and resolve issues with “Ya-VPO”:
* Legal bases: Performance of a contract, legitimate interest, or your consent
* Data used: User data, usage data
For marketing, promotion, and advertising:
* Legal bases: Legitimate interest or your consent
* Data used: User data
To comply with legal obligations and respond to law enforcement requests:
* Legal bases: Compliance with legal obligations, legitimate interest
* Data used: User data, usage data, payment data, verification data
To fulfill contractual obligations with third parties (e.g., licensing agreements), and respond appropriately to intellectual property rights or content violation reports:
* Legal bases: Legitimate interest
* Data used: User data, usage data, payment data, verification data
For business planning, reporting, and forecasting:
* Legal bases: Legitimate interest
* Data used: User data, usage data, payment data
To process your payment:
* Legal bases: Performance of a contract, compliance with legal obligations
* Data used: User data, payment data
To detect fraud, including fraudulent payments or misuse of “Ya-VPO”:
* Legal bases: Performance of a contract, compliance with legal obligations, legitimate interest
* Data used: User data, usage data, payment data, verification data
To conduct research, contests, and surveys:
* Legal bases: Performance of a contract, legitimate interest, or consent
* Data used: User data, usage data
This framework helps ensure that we handle your data transparently, securely, and lawfully. Let me know if you want this section as a formatted table or included in a final translated document.
DISCLOSURE OF YOUR PERSONAL DATA
We share information only with your consent, in order to comply with legal obligations, protect your rights, or fulfill business responsibilities. We may disclose aggregated information about our users, as well as information that does not identify any individual or device.
The personal data listed below will be shared with the categories of recipients indicated in the table below only if:
* You choose to use a specific “Ya-VPO” feature that requires the sharing of certain personal data for proper functionality;
* You grant us permission to share your personal data, for example, by selecting the appropriate setting within “Ya-VPO” or authorizing “Ya-VPO” through a provided consent mechanism.
Additionally, we may disclose personal information to the following categories of recipients for the reasons outlined below.
Service Providers:
We work with service providers who perform tasks on our behalf and may require access to certain personal data in order to provide their services to us. These include companies we engage to:
* Provide customer support;
* Operate the technical infrastructure necessary to run “Ya-VPO”;
* Assist in safeguarding and securing our systems and services;
* Promote our own products and services, as well as those of our partners in joint marketing campaigns or events.
This information may be used, among other purposes, to analyze and monitor data, determine the popularity of specific content, and gain better insight into online activity.
Affiliated Companies:
We may share your information with our affiliated companies, in which case we will require them to comply with this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Law Enforcement and Data Protection Authorities:
We may disclose your personal data when we believe in good faith that it is necessary to comply with legal obligations under applicable law or in response to valid legal processes, such as a court order or subpoena.
We may also share your personal data if we believe in good faith that such disclosure is necessary to serve our legitimate interests or those of a third party, including for purposes of national security, law enforcement, legal proceedings, criminal investigations, protection of an individual’s safety, or the prevention of death or imminent bodily harm—provided we determine that such interests do not override your interests or fundamental rights and freedoms that require the protection of your personal data.
Government Disclaimer
This application is not affiliated with or endorsed by any government entity. It is an independent initiative designed to provide informational support to users.
DATA SECURITY
We are committed to protecting our users’ personal data. We implement appropriate technical and organizational measures to safeguard your personal information; however, please note that no system is entirely secure. We have established various policies—including pseudonymization, encryption, and data access and retention policies—to protect against unauthorized access and unnecessary retention of personal data within our systems.
Your password protects your account, so we encourage you to use a strong, unique password for your “Ya-VPO” account, never share your password with anyone, and limit access to your device.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process, including:
* Multi-factor authentication;
* Access control (both physical and technical);
* Encrypted communication.
However, please remember that we cannot guarantee that the internet itself is 100% secure. While we will do our best to protect your personal information, the transmission of personal data to and from “Ya-VPO” is at your own risk. You should only access the services in a secure environment.
Unfortunately, the transmission of information over the internet and mobile platforms is not completely secure. Although we strive to protect your personal information, we cannot guarantee the security of your data transmitted through “Ya-VPO.” Any transmission of personal information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures we provide.
We are not responsible for the security of any information you share with third-party providers not affiliated with “Ya-VPO.”
Personal information will be pseudonymized and encrypted to ensure user confidentiality. The collected information will be processed for the standard use cases described in this Privacy Policy.
INTERNATIONAL DATA TRANSFERS
For data storage and processing, “Ya-VPO” uses servers provided by our partners located in the Republic of Ireland. Additionally, for certain features and purposes of “Ya-VPO”—such as analytics—servers operated by our partners located around the world may be used. In such cases, the data stored and processed on these servers will be anonymized or de-identified.
Personal data collected within Ukraine, the European Union, the European Economic Area, or Switzerland may, for example, be transferred to and processed by third parties located outside of Ukraine, the European Union, the European Economic Area, or Switzerland. In such cases, “Ya-VPO” ensures that the transfer of your personal data is carried out in compliance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organizational safeguards are in place—such as the Standard Contractual Clauses approved by the European Commission.
For more detailed information about the security measures we use to protect your personal data, please refer to the “Data Security” section of this Policy.
DATA RETENTION
We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal obligations).
We retain your data for as long as your account is active or until you request us to delete your data. Please note that if you request the deletion of your personal data, we may still retain certain information if required to comply with our legal obligations.
At your request, we will delete or anonymize your personal data so that it can no longer be used to identify you, except where we have a legal right or obligation to retain certain personal data, including in situations such as:
* If we need to retain personal data to comply with our legal, tax, audit, and accounting obligations, we will retain the necessary personal data for the period required by applicable law; and/or
* If it is necessary for our legitimate business interests, such as fraud prevention or ensuring the security of our users.
CHANGES TO OUR PRIVACY POLICY
We may update our Privacy Policy from time to time. If we make significant changes to how we handle your personal information, we will publish the new Privacy Policy on this page, and we may also send you an email at the address we have on file for you or display a prominent notice within “Ya-VPO.” The date of the last revision of the Privacy Policy is indicated at the top of this page. You are responsible for periodically reviewing this Privacy Policy to check for any updates.
AGE RESTRICTIONS
We do not knowingly collect or solicit personal data from anyone under the age of 18, send them interest-based advertisements, or allow such individuals to use or access “Ya-VPO.” If you are under 18, please do not provide us with any personal information, including your name, address, or email address. Individuals under the age of 18 are not permitted to submit any personal data. If we learn that we have collected personal data from a child under the age of 18, we will delete that information as quickly as possible. If you believe we may have any data from or about a child under the age of 18, please contact us.
LINKS
We may display third-party advertisements and other content containing links to external websites. We do not control and are not responsible for the privacy policies or content of third parties. If you click on a third-party advertisement or link, please understand that you are leaving “Ya-VPO,” and any personal data you provide will no longer be subject to this Policy. Please review their privacy policies to learn how they collect and process your personal data.
CONTACT US
If you have any questions or suggestions regarding our Privacy Policy, please contact us at info@yavpo.org.ua.
