Consent to the processing of personal data

Effective date: 18 October 2026.

By ticking the consent box in NEXT LVL (the Telegram bot and mini app @nextlvlsystembot, the web app app.nextlvlsystem.ru and the website nextlvlsystem.ru — the "Service"), I freely give my consent to Alexey Grosman, individual entrepreneur (OGRNIP 320253600063628, INN 250808746453, Moscow, Russian Federation, gros049494@yandex.ru — the "Controller"), to process my personal data on the terms below.

1. Purpose. To provide the Service to me: my profile and game progress, my plan, quests and reminders, the journal, the assistant's replies, shared features with an ally and a squad (if I turn them on), answers to my requests, and improving the Service using statistics that don't identify me.

2. Data:

  • for sign-in: my email address, or my Google account ID and name if I sign in with Google; if I use Telegram — user and chat ID, name and username; my profile photo, if I upload one;
  • what I enter myself: display name, gender, time zone, goals, habits, life areas, answers about myself, quests and whether I completed them;
  • journal entries: text, mood, energy, water, screen time, habit check-ins;
  • my chats with the assistant and transcripts of my voice messages;
  • what I share with my alliance and squad: Check-in answers, gestures, shared quests;
  • technical data: sign-up and last sign-in dates, actions in the app (without the text of my entries).

Steps and workouts are not covered by this consent — they have their own consent when I connect them. The Service does not collect sleep, heart rate, weight or other health measurements.

3. Actions. Collection, recording, organisation, accumulation, storage, updating, retrieval, use, transfer (provision, access), anonymisation, blocking, deletion and destruction, by automated means and over the Internet. Data is stored on a server in Russia.

4. Recipients:

  • TIMEWEB.CLOUD LLC (Russia) — hosting and storage on the Controller's behalf;
  • Tilda Publishing JSC (Russia) — runs the website nextlvlsystem.ru;
  • Yandex LLC (Russia) — website analytics (only if I click "Accept" on the cookie banner);
  • Google LLC (USA) — confirms my identity if I choose to sign in with Google;
  • my ally and squad members — name, class, rank, whether I closed my day and what I choose to share, if I turn these features on;
  • the AI assistant and voice transcription (Anthropic, PBC and Cloudflare, Inc., USA) — only if I turn the assistant on, under a separate consent given before my first message;
  • outside Russia, delivery only, no storage: Cloudflare, Inc. (USA) — web app requests when the site opens through the backup address, and bot messages to Telegram; Telegram (Telegram Messenger Inc. and its group companies, UAE and British Virgin Islands) — bot messages; my browser's notification service (Google LLC, Apple Inc., Mozilla Corporation or Microsoft Corporation, USA) — encrypted notifications, if I turn them on.

My data is not sold or shared with advertisers.

5. Duration. Until I delete my account or withdraw this consent. Chats with the assistant are kept for 90 days. Payment records (once payments exist) are kept for 5 years, as the law requires.

6. Withdrawal. Settings → "Delete account", a message to the bot, or an email to gros049494@yandex.ru. The Controller stops processing and destroys the data within 30 days of receiving my withdrawal. The Service cannot work without this consent.

7. Confirmation. I confirm that I am at least 16 years old and that I have read the Privacy Policy. I give this consent by ticking the box in the Service. The Controller records the date, time, version of this text and my identifier as proof.