Privacy Policy and Terms of Use

Last updated: October 1, 2026

This document describes what data the «KONTUR» platform — the kontur.systems website, the Telegram Mini App and the «KONTUR» mobile app for Android and iOS — processes, why, and for how long, as well as its limitation of liability. By using the service, you agree to the terms below.

1. In short

• KONTUR has no user accounts: we do not collect names, phone numbers, email addresses or payment data.
• Our server only receives data the service cannot work without: notification settings (if you turned notifications on), crash reports, and technical request data.
• We do not sell data or share it for advertising. The service contains no ads.

2. What data we process

2.1. Nearby threat notifications

If you turn on notifications (in a browser or in the mobile app), the following is sent to and stored on our server:

• the watch point — the coordinates of the place you want to be notified about, and its name. You pick it on the map manually or from your device location; it may be a precise place (for example, your home);
• the radius, selected threat types, minimum interval between notifications, sound and vibration settings, and notification language;
• the technical delivery address: for a browser — the push subscription address and its encryption keys; for the app — the Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS) device token and the platform type;
• the time of the last settings update and of the last notification sent.

This data is used solely to send notifications about threats near your point. It is kept until you turn notifications off — the subscription is then deleted from the server immediately. A subscription is also deleted automatically if there have been no changes and no notifications for 90 days, or if the delivery service reports that the token is no longer valid.

2.2. Device location

The “My location” button shows where you are on the map and calculates distances to threats on your device only — these coordinates are not sent anywhere. Only the notification watch point (section 2.1) reaches the server, if you saved one. Location access is requested only after your action, and you can revoke it in your browser or phone settings.

2.3. Telegram Mini App

If you open the service as an embedded app inside Telegram, your Telegram account identifier (ID) is recorded to count unique users and monitor system load. This identifier is not processed on the website or in the mobile app.

2.4. Crash reports (our own monitoring system)

To detect and fix errors we use our own crash-tracking system. Reports are stored on our servers for 14 days and then deleted automatically.

• A random device identifier (UUID) is generated on first launch and stored locally. It is not linked to your identity and is only used to group errors from the same device.
• What is recorded on a crash: the error text and stack trace, page address, browser type (User-Agent), approximate connection speed, app version, and a short technical history of recent actions in the app — solely to reproduce the problem.
• Each report gets a code shown to you on screen, which support can use to find your specific case.

2.5. Usage statistics (Google Tag Manager)

We use Google Tag Manager and the Google analytics tools connected through it to understand overall traffic and which features are used (for example, page views and button clicks). Google may use cookies or similar identifiers, device type and IP address (including to determine an approximate region). We only use aggregated statistics and do not try to identify you. See the Google Privacy Policy for details.

2.6. Technical request data

Like any online service, our server and Cloudflare receive the IP address and browser type of each request. We use them only for bot and DDoS protection and rate limiting, and do not link them to your settings.

3. Third-party services

We rely on the following companies to run the service. They process data on our behalf and only for these purposes:

• Cloudflare — content delivery, DDoS protection, secure server access (Zero Trust) and Cloudflare Turnstile — an invisible check that you are not a bot, which analyses technical browser parameters and the IP address (Turnstile Privacy Addendum). Cloudflare may set technical cookies required for protection.
• Google — notification delivery (Firebase Cloud Messaging on Android and in the Chrome browser) and usage statistics (section 2.5).
• Apple — notification delivery to iPhone (Apple Push Notification service).
• OpenFreeMap and Esri (ArcGIS) — map tiles and satellite imagery, which your device loads directly from their servers.
• Telegram — the Telegram Mini App script and source-channel avatars, loaded from Telegram servers.
• Our server fetches air-alert status from api.ukrainealarm.com and alerts.in.ua; none of your data is sent there.

4. Data on your device

Settings (theme, language, map appearance, notification and radio-mode options), the notification token and the random identifier for crash reports are stored in the browser's or app's local storage (localStorage). We do not use advertising cookies ourselves. Local data is deleted when you clear the site data in your browser or the app data in your phone settings.

5. Mobile app

The «KONTUR» app shows the same map as the website and processes the same data described above. In addition, it may request the following permissions — each only for its own feature:

• Location — “My location” and choosing the notification point (sections 2.1, 2.2).
• Notifications — nearby threat notifications.
• Do Not Disturb access (Android) — only if you turn on bypassing this mode for threat notifications yourself.
• Background radio mode — to announce threats with the screen off. Speech is produced by the device's system text-to-speech engine; the text is not sent anywhere.

Attack GIFs and map screenshots are created on the device and saved to the gallery or passed through the system “Share” menu only at your request — they are not sent to our server. The app contains no ads or purchases.

6. Your control over your data

• Turn off notifications in the “Nearby threat notifications” menu — the subscription, including the point coordinates and token, is deleted from the server immediately.
• Clear the data of the site in your browser or of the app in your phone settings — all local data will be deleted.
• Revoke permissions (location, notifications) in your browser or phone settings.
• Crash reports are deleted automatically after 14 days. To delete a report sooner or ask about your data, email [email protected] (include the report code if possible).

7. Security and children

All data between your device and our servers is transmitted over an encrypted connection (HTTPS) only. The service is not intended for children under 13, and we do not knowingly collect their data.

8. Disclaimer and data sources (MUST READ)

9. Changes to this Policy

We may update this page from time to time; the date of the latest revision is shown at the top. Changes take effect upon publication. Continued use of the service after changes means you accept the new terms.

10. Contact

Questions about this policy and your data: [email protected].