MUNAI
PRIVACY POLICY
MUNAI Service
Effective Date: June 27, 2026
1. GENERAL PROVISIONS
1.1. This Privacy Policy (hereinafter referred to as the "Policy") describes the collection, use, storage, and
protection of personal data of MUNAI service users.
1.2. The personal data operator is Individual Entrepreneur Babchenko Anastasia Anatolievna, TIN (HVHH)
20316045, state registration number 286.1588595, address: Khorenatsi St. 105/6 S, Yerevan 0010,
Republic of Armenia, email: info@munaye.com (hereinafter referred to as the "Operator", "we").
1.3. By using the Service, you give your informed and voluntary consent to the processing of personal data
in accordance with this Policy and the Law of the Republic of Armenia "On Protection of Personal Data".
2. WHAT DATA WE COLLECT
2.1. Authentication data (depending on the sign-in method):
• When signing in via Telegram: user ID, first name (if specified in profile), username, language settings
• When registering in the web version: email address, password (stored in encrypted form), language
settings
2.2. Data you provide during registration and use:
• Birth date and gender — profile data; age calculated from the birth date is used for personal
recommendations (details in section 4)
• Country of residence
• Dream descriptions and messages to the unified AI assistant — processed by the AI provider to
answer questions and discuss feelings, beliefs, and life situations
• Journal entries, notes, and mood, energy, and sleep ratings — stored on Service servers and may be
sent to the AI provider when using AI features (details in section 4)
• Created tasks and reminders
• Settings and preferences in the Service
2.2.1. Health data (voluntary opt-in):
• Menstruation start date and cycle length
• Menstruation day markings
• This data is a special category of personal data (health data). Collection is performed only with your
explicit consent upon feature activation. Cycle data is used to display the cycle calendar. When you request a day review or personal
recommendation, the calculated cycle day and phase for the selected date are sent to the AI provider
if cycle tracking is enabled and data is available (details in section 4).
2.2.2. Geolocation data (voluntarily provided):
• Coordinates (latitude and longitude) — requested through the standard operating system permission
mechanism
• Used exclusively for calculating precise lunar phases for your location
• NOT transmitted to the AI provider or any other third parties
• Stored on Service servers until account deletion or consent withdrawal
• Providing geolocation is voluntary. If declined, the lunar calendar is calculated with reduced accuracy
munaye.com 1
MUNAI
• On Android devices, coordinates are updated no more than once every 3 days to minimize system
permission requests
2.3. Technical data:
• Date and time of Service use
• Platform type (iOS, Android) and device information
• Time zone
• Interface interaction data (for analytics)
2.4. Payment data:
• Payments are processed through Lava (lava.top) and Prodamus depending on the selected payment
method. Tribute services subscriptions previously purchased through it. These services process
payment data independently under their own terms
• To create a Lava payment, we transmit your email, selected plan, and payment parameters. Lava
privacy policy: https://lava.top/en/docs/policy
• We DO NOT store bank card data, CVV codes, or other payment details
• We receive payment status, amount, currency, plan, payment and subscription identifiers, and the
email provided at checkout from the payment services
3. DATA PROCESSING PURPOSES
3.1. We process your data for:
• Providing Service features: lunar calendar calculation based on geolocation, unified AI assistant
responses, discussion of dreams and journal entries, day reviews, personal recommendations, and
conversation summaries
• User identification by Telegram ID (for the mini-app) or by email and password (for the web version) and
account access
• Saving dream history, journal, chats, and personal settings
• Menstrual cycle tracking (with voluntary feature activation)
• Processing payments via Lava, Prodamus, and Tribute (previously purchased subscriptions) and providing paid features
• Sending Service notifications (with your consent): task reminders, lunar events, cycle notifications
• Improving Service quality and user experience based on anonymized analytics
• Compliance with legal requirements of the Republic of Armenia
4. DATA PROCESSING USING ARTIFICIAL INTELLIGENCE
4.1. The Service provides a unified AI assistant through the third-party provider Fireworks AI, Inc.
(USA). The assistant discusses dreams, feelings, beliefs, and life situations, uses journal context,
generates day reviews and recommendations for a selected date, and prepares conversation summaries
for saving to the journal. Processing takes place via the Fireworks AI API under its standard terms
of service.
4.2. Data transmitted to the AI provider when using AI features:
• Conversations: your request and available conversation history, including earlier responses and
attached context
• Journal context: when journal context is enabled, recent saved entries, dreams, notes, and mood,
energy, and sleep ratings are automatically added to the request. You do not need to attach each
entry separately. Discussing a selected entry transmits its contents
munaye.com 2
MUNAI
• Day reviews and personal recommendations: the selected date, that day's entries and state, lunar
data, and the calculated cycle day and phase if cycle tracking is enabled. Personal recommendations
also include your profile name, age on the selected date, current date, and any additional request
• Saving important points: the selected conversation history is used to prepare a summary that you
can edit and save to the journal
• Telegram ID, email, passwords, payment details, coordinates, tasks, and reminders are not
automatically added to assistant requests. Information you include in messages or journal entries
may form part of the transmitted text
4.3. Data is transmitted to Fireworks AI, Inc. servers located in the USA. This constitutes cross-border data
transfer carried out in accordance with the Law of the Republic of Armenia "On Protection of Personal
Data". By using AI features, you give explicit consent to the transfer of data described in section 4.2.
This may include personal information, such as your name and journal content, and is therefore not
fully anonymized.
4.4. We do not control and are not responsible for data processing by Fireworks AI, Inc. Processing is
carried out under their standard terms of service. We recommend not including personal data of third
parties, passwords, financial information, or other confidential information in assistant messages, dream descriptions, or journal entries.
5. DATA TRANSFER TO THIRD PARTIES
5.1. We may transfer data to the following categories of recipients:
• Fireworks AI, Inc. (USA) — messages, journal context, selected-day and profile data described in
section 4.2, for AI assistant features
• Lava (lava.top), Prodamus, and Tribute (previously purchased subscriptions) — subscription payment
services. They receive data necessary to process the payment
• Timeweb — hosting provider on whose servers the Service database and backups are stored
• Government agencies of the Republic of Armenia — exclusively when legally required (court order,
authorized agency request)
5.2. We DO NOT sell or transfer your personal data to third parties for advertising or marketing purposes.
5.3. For AI assistant features, the data described in section 4.2 is transferred to Fireworks AI,
Inc. (USA) in accordance with the Law of the Republic of Armenia "On Protection of Personal
Data". By using AI features, you give explicit consent to this transfer. The transmitted
context may contain personal data.
6. DATA STORAGE AND PROTECTION
6.1. Personal data is stored on servers of the hosting provider Timeweb with the following security
measures:
• Data encryption in transit between client and server (SSL/TLS)
• Restricted server access (SSH keys, no password access)
• Regular automatic database backups to Timeweb S3 object storage
• Passwords and API keys stored in protected environment variables
6.2. Data retention periods:
• Account data (name, birth date, gender, country, Telegram ID) — during Service use and 3 years after
account deletion
• Dream history, interpretations, journal entries — until deleted by user or account deletion
• AI assistant conversation history — until deleted by user or account deletion
• Geolocation data — until consent withdrawal by user or account deletion
• Menstrual cycle data — until feature is disabled by user or account deletion
munaye.com 3
MUNAI
• Technical logs — 12 months
• Payment data — 5 years (tax law requirement of the Republic of Armenia)
6.3. Database backups are created automatically and stored in Timeweb S3 object storage. Backups
contain all user data and are protected by the hosting provider's security measures.
6.4. Despite security measures taken, we cannot guarantee absolute data protection from unauthorized
access. The User is informed of risks associated with data transmission over the Internet.
7. YOUR RIGHTS
7.1. In accordance with the Law of the Republic of Armenia "On Protection of Personal Data", you have the
right to:
• Obtain information about processed personal data
• Request correction of inaccurate data
• Withdraw consent to personal data processing
• Request deletion of personal data
• Request cessation of personal data processing
• File a complaint with the Personal Data Protection Agency of the Ministry of Justice of the Republic of
Armenia
7.2. To exercise your rights, send a request to email: info@munaye.com. We will respond within 30
calendar days.
7.3. Withdrawal of consent to personal data processing makes further Service use impossible. Data will be
deleted as specified in section 6.2.
8. COOKIES AND LOCAL STORAGE
8.1. The Service uses browser local storage (localStorage) for:
• Saving user language settings
• Storing geolocation consent status
• Caching temporary interface settings
8.2. LocalStorage data is stored only on the user's device and is not transmitted to Service servers or third
parties. You can clear localStorage through browser or Telegram app settings.
9. PERSONAL DATA OF MINORS
9.1. The Service is not intended for persons under 18 years old without consent of legal representatives.
9.2. We do not knowingly collect data from minors. If we become aware of such collection, the data will be
promptly deleted.
10. POLICY CHANGES
10.1. We reserve the right to change this Policy at any time. The current version is published in the Service.
10.2. We will notify users of significant changes through the Service.
10.3. Continued use of the Service after Policy changes means acceptance of the new version.
11. CONTACTS
For personal data processing inquiries, contact:
Email: info@munaye.com
Telegram: @anastasican_b
Address: Khorenatsi St. 105/6 S, Yerevan 0010, Republic of Armenia
By using the MUNAI service, you confirm that you have read this Privacy Policy and consent to the
processing of personal data under the specified conditions, including cross-border transfer of data described in section 4.2 to Fireworks AI, Inc. (USA) for AI processing purposes.
munaye.com 4

12. GOOGLE ACCOUNT AND TASK SYNCHRONIZATION

Section added: October 9, 2026

12.1. Optional connection and data accessed

MUNAI (МУНА in Russian) connects to Google only when you choose to connect an account and grant access on Google's consent screen. Google synchronization is optional. We do not receive or store your Google password.

We access your Google account identifier and email; OAuth access and refresh tokens; calendar and task-list identifiers and names; calendar time zones and access roles; event and task identifiers, titles, descriptions or notes, dates, times, recurrence information when available, completion and deletion status, and subtask relationships. We also keep synchronization versions, timestamps, and copies of synchronized records to detect changes and prevent duplicates.

12.2. Permissions and their purposes

12.3. Use of Google data

We use this data to show your tasks in MUNAI and keep supported changes synchronized in both directions between MUNAI, Google Calendar, and Google Tasks, automatically while enabled or when you request synchronization. Deleting a synchronized item can delete its linked copies. Read-only permissions cannot support these changes.

We synchronize the connected calendar and the dedicated task list, not the contents of every calendar and task list in your account. Gmail messages, contacts, and Drive files are not requested by this integration.

12.4. Storage, protection, and sharing

Google data is stored with your MUNAI account on the Timeweb infrastructure described in section 6. OAuth access and refresh tokens are encrypted in the database and its backups. Connections to Google use HTTPS. Google receives task and event changes needed for synchronization; our hosting provider stores the data needed to operate the Service.

We do not sell Google user data, use it for advertising or credit decisions, or use it to train general-purpose AI models. When you use chat action features, a limited selection of your tasks, including tasks synchronized from Google, may be sent to the AI provider to identify the task and prepare the requested action. This can include titles, descriptions, dates, times, completion status and subtasks. OAuth tokens are not included. Text you copy into a chat or journal may also be processed as described in section 4. Google-derived data is subject to the Limited Use restrictions in section 12.6 in all these cases.

Human access to Google data is limited to your specific consent, necessary security investigations, or legal obligations. Other disclosures must be permitted by the Google policy referenced in section 12.6; the general provisions in section 5 do not authorize additional uses of Google data.

12.5. Retention, disconnection, and deletion

You can pause synchronization or disconnect Google in MUNAI settings. Pausing stops synchronization but retains the connection. Disconnecting stops synchronization, removes access and refresh tokens from the active database, and sends a revocation request to Google. You can also revoke access in your Google Account connections.

Disconnecting does not delete your tasks in MUNAI or Google. The connected-account identifier and email, calendar/list metadata, record mappings, and cached synchronization copies remain until account deletion or a deletion request, so reconnecting the same account does not create duplicates. Synchronized tasks remain until you delete them or your MUNAI account. Deleting the MUNAI account removes the connection, cached copies, and mappings from the active database; it is not a request to erase your Google account or all of its contents.

To request deletion of retained Google integration data without deleting your MUNAI account, contact info@munaye.com. Requests are handled under section 7. Earlier copies may remain in protected backups until those backups are rotated. The backup rotation keeps the three most recent local copies and thirty most recent cloud copies; these are copy counts, not a guaranteed number of days.

12.6. Google API Services User Data Policy

Our handling of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements. This section also covers data derived from Google data.