Consent: connecting calendars and task apps

Effective date: 19 October 2026.

By connecting a calendar or task app in NEXT LVL, I allow Alexey Grosman, individual entrepreneur (OGRNIP 320253600063628, INN 250808746453, Moscow, Russian Federation, gros049494@yandex.ru), to process data from that service. I give this consent separately for each service, with the checkbox on the connection screen.

Purpose. To take my schedule and tasks into account when planning my day in the game: making a busy day lighter and suggesting tasks from my task app as things to do today.

Data:

• from a calendar — event times for today and the next 7 days and whether an event is all-day; event titles only if I turn them on;
• from a task app — task title, due date and whether it's done;
• access data: an access token, API key or secret calendar link.

Not taken: descriptions, attendees, locations, links or attachments.

Services and recipients:

• Yandex Calendar — Yandex LLC, Russia. Yandex will ask for permission to read and change the calendar — this is a Yandex limitation; NEXT LVL only reads and never changes anything;
• calendar by link (iCal, ICS) — NEXT LVL uses the link to download the calendar from the server where it is stored (for example, Google LLC or Microsoft Corporation, USA, or Yandex LLC, Russia);
• Todoist — Todoist Inc., 251 Little Falls Drive, Wilmington, DE 19808, USA. If I turn on "Close the task in Todoist", NEXT LVL tells Todoist that a task is done; this is off by default;
• Kaiten — Kaiten Software LLC (OOO «Кайтен Софтвер», INN 7714426252), Russia; NEXT LVL reads cards I'm responsible for. Kaiten is often a work tool: by connecting it, I confirm that my company allows this.

Google Calendar (Google LLC, USA) and TickTick (Appest Inc.) will come later, with their own consent.

Transfers abroad. For services in the USA, NEXT LVL sends them the access token and requests and gets my data back. The USA has no adequacy status under Russian law. The controller notifies Roskomnadzor of these transfers (Art. 12 of Federal Law 152-FZ).

What we don't do. Event and task titles, times and durations are never sent to the AI assistant. The assistant may only see the recommended load for my day, and only if I've separately allowed it to receive my data. The data is not sold or used for advertising or to train AI models.

How. Collection, recording, storage, use and deletion, by automated means. Data is stored on a server in Russia; access keys and links are encrypted.

Duration and withdrawal. While the service is connected. Events older than 14 days are deleted automatically. I can disconnect any time: Settings → "Connections" → "Disconnect". NEXT LVL revokes its access at the service (where the service allows it) and deletes the connection and everything it loaded right away. After disconnecting Kaiten, I should also delete the API key in Kaiten.