Privacy Policy for the Moy Gertsen app
1. The short version
Moy Gertsen is an app with class schedules, a campus map and Moodle access for students of Herzen State Pedagogical University of Russia. It is an independent student project: it is not the university's official app, the university did not build it and is not responsible for it.
You can use the app without creating an account and without telling us anything about yourself. To see your schedule, picking a group is enough.
We do not collect your location, contacts or photos — apart from a screenshot you attach to feedback yourself — and no advertising identifiers. We do not sell your data and do not pass it to anyone for advertising.
2. What data is processed, and why
2.1. Your group
What: the group and subgroup you selected. Why: to show your schedule and notify you when it changes. Where: on your device. It reaches our server only together with a notification token (see 2.2) — otherwise we could not send a notification to your group specifically.
2.2. Notifications
What: a technical device token (issued by Apple or Google), the platform, the app language, the group you selected and your notification settings. Why: to send you schedule changes and announcements. Where: on our server in St Petersburg, and with Apple (APNs) and Google (Firebase Cloud Messaging) — notifications are technically impossible without their services. Basis: your consent, given by turning notifications on. You can turn them off in the app's settings at any time; the device record is then deleted from the server.
2.3. Moodle
What: the Moodle username and password you enter in the app. Where they go: directly to the university's server moodle.herzen.spb.ru. Our server neither receives nor sees them. What is kept on the device: the access token issued by Moodle, your name and Moodle user id, and copies of courses, assignments and deadlines — so the app works without an internet connection. The password is not stored anywhere. How to erase it: signing out of Moodle deletes the token, your name, your id and the saved copies of courses, assignments and deadlines. Files you downloaded from courses stay on the device — you can delete them one by one inside the course (the button next to each file) or all at once by deleting the app.
How your data is handled inside Moodle is governed by the university's rules, not by this policy.
2.4. Feedback
If you write to us through the feedback form, our server receives:
- the text of your message;
- your email address — only if you provided one, and only so we can reply;
- a screenshot — only if you attached one;
- the app version, system version and device model — unless you cleared the
- the app language and a random installation identifier (see 2.5).
"Attach version and device" checkbox;
Basis: your consent, given by sending the message.
2.5. Anonymous usage statistics
What: a random installation identifier, the platform, the app version, the names of screens you opened, the names of buttons you tapped, the numbers of rooms you looked up, and the time of the event. Why: to understand which parts of the app are used and which are of no use to anyone. What is not in there: your name, email, group, or anything from your schedule or Moodle.
The installation identifier is a random string the app makes up for itself. It is not tied to your device, account or phone number, it changes when the app is reinstalled, and its only purpose is to count how many people use the app.
Basis: your consent. Collection is on by default and is turned off with a single switch: Settings → Privacy → Anonymous statistics. Next to it is a "Delete my data" button: it permanently deletes from the server all statistics from this installation and any feedback sent from it. A repeat deletion is allowed once every 10 days.
The order matters: delete the data *before* you turn the collection off. The installation identifier is kept only on your device, and turning the collection off erases it — after that the events sent earlier stay on the server with nothing to tie them to, and nobody can find them any more, ourselves included. For the same reason, feedback sent while the statistics were off is not tied to the device: to have it deleted, write to us.
2.6. Crash reports
What: the type and text of the error, the call stack, the app version, the OS version, the device model and the random installation identifier — the same one as the statistics use, and only if their collection is on. Why: to fix the errors that close the app. The report is written on the device at the moment of the crash and sent at the next launch: sending it as the app dies is too late. What is not in it: the contents of your schedule, Moodle data, your email or your name. The text of an error may contain a technical detail — a room number the app failed to parse, for example. Basis: your consent to this policy at the first launch of the app.
There is no separate switch for crash reports. While the collection of statistics is off, a report is sent without the installation identifier, so it cannot be tied to your device. The "Delete my data" button does not delete crash reports — to have them deleted, write to us.
2.7. Server logs
What: IP address, date and time of the request, the requested address, the app version. Why: to keep the server running and to fend off floods of automated requests. How long: 14 days, then deleted automatically. Basis: our legitimate interest in the security of the service.
3. Retention periods
| Data | How long it is kept |
|---|---|
| Selected group, cached schedules, Moodle data | on your device, until you erase it in the app or delete the app |
| Notification token with group and settings | while notifications are on; deleted when you turn them off |
| Feedback with an email address and screenshot | until you delete it with the button in the app or ask us to |
| Usage events | until you delete them with the button in the app |
| Crash reports | until you ask us to delete them |
| Anonymous totals (how many people per day) | indefinitely — no individual can be identified from them |
| Server logs | 14 days |
Apart from the server logs, we do not delete data on a schedule: until you ask, it stays. Promising a period and not keeping to it would be worse than saying so plainly.
4. Who data is shared with
- Apple and Google — the technical device token, to deliver notifications.
- A hosting provider (St Petersburg, Russia) — our server runs on its
- Herzen State Pedagogical University of Russia — the app sends schedule and
- Map data comes from the OpenStreetMap project, but the map imagery is served
Their servers are outside Russia, which means the data crosses the border. Notifications cannot work without it.
hardware.
Moodle requests to the university's services. A group's schedule goes through our server, while a teacher's card, a teacher's schedule and everything to do with Moodle go straight from your device to atlas.herzen.spb.ru and moodle.herzen.spb.ru. In those cases the university sees your device's IP address.
from our own server — your device does not contact any third-party map service.
Nobody else receives your data. The app contains no advertising and no third-party analytics.
5. Your rights
You may:
- find out what data of yours we hold;
- correct inaccurate data;
- delete data;
- withdraw consent to statistics or notifications.
The quickest way is inside the app: the statistics switch, the "Delete my data" button, signing out of Moodle, turning notifications off.
For anything else, write to privacy@m3tra.com. We reply within 30 days. There is no charge for handling your request.
Please note: the statistics are anonymous, so "your" records can only be found by the installation identifier — that is, from the same device, using the button in the app and before the collection of statistics is turned off (see 2.5). Feedback sent while the statistics were off is not linked to a device: to have it deleted, write to us and say what should be removed. Crash reports are only deleted on request by email.
6. How we protect data
- All of the app's requests go over HTTPS.
- Moodle passwords are stored neither on the device nor on the server.
- Access to the server and the admin panel belongs to the operator alone, by key
- Screenshots from feedback are visible only to the operator.
and password.
We do what we can, but there is no such thing as absolute protection, and promising it would be dishonest.
7. Children
The app is intended for university students and is not aimed at children under 16. We do not knowingly collect children's data. If you believe a child has given us their data, write to privacy@m3tra.com and we will delete it.
8. Changes to this policy
If the policy changes, the new version will appear at m3tra.com/privacy with a new effective date. We will announce significant changes in the app.
9. Operator details and contacts
The personal data operator is Artem Lysunets, a private individual, St Petersburg.
Email for any question about data: privacy@m3tra.com
For questions about your data in Moodle and in the university's systems, please contact Herzen State Pedagogical University of Russia: the university is a separate operator of that data.
This is a translation. The app is published in Russia and the Russian text at m3tra.com/privacy is the binding version; if the two differ, the Russian text prevails.