Ugovor
Privacy Policy
Your privacy is central to how we built Ugovor. We believe in transparency and data minimization. Effective October 17, 2026.
Hashed Sign-In Identifiers
Your email address, Telegram username or Yandex ID is hashed with SHA-256 before it reaches our database, and we never store it in plain text. The hash is how we recognise you when you sign in again.
What We Store
The display name you choose; your role (client, worker or solo); your projects with their steps, materials, prices, dates and addresses; the photos you add; and your messages to the AI assistant. For security we also keep, per signed-in device, the IP address and device type, plus a record of which app features were used.
Collaborative Isolation
Your project data is only shared with people you explicitly invite. Each project exists in its own secure silo.
AI Assistant (GigaChat)
When you plan a project with the assistant, the messages you type there are sent to GigaChat, an AI service by Sber, to write the plan. Nothing else from your account is sent. The app asks for your permission before the first message, and you can report any reply from the chat. To keep this private, don't share personal details in the assistant chat.
Service Providers
We share data only with the services that run Ugovor: Yandex Cloud stores your photos and delivers sign-in codes to your email; Telegram and Yandex ID handle sign-in when you choose them; GigaChat writes assistant plans. We do not sell or trade your data, show ads, or track you across other apps.
Data Retention
We keep your data until you delete it or delete your account. Authentication tokens are stored securely on your device and expire on their own.
Children's Privacy
Ugovor is not intended for use by children under 16. We do not knowingly collect any data from minors.
Deleting Your Account
In the app: open the menu, tap Delete account and confirm. This takes effect immediately and signs you out on every device.
Without the app: message @UgovorSupport on Telegram from the account you sign in with, or tell us the email address you sign in with. We delete the account within 30 days and confirm when it is done.
What is deleted: projects only you are in, with their photos; your display name, role, assistant chats, sign-ins and usage records; and the identifier hash, so nothing links the account to you any more. You can sign up again later with the same email or Telegram account, starting from an empty account.
What stays: in projects you shared with others, what you added stays for the other participants, attributed to a deleted user. You can withdraw your consent to the processing described here at any time by deleting your account.
Get in Touch
If you have any questions about Ugovor's privacy practices, reach out to us on Telegram:
@UgovorSupport