Last updated: June 26, 2026
The data controller is Individual Entrepreneur Kistanov Maxim Alexandrovich (TIN 194002418, registered 27.05.2026 by the Minsk City Executive Committee, Republic of Belarus), operating under the trade name Queny ("Queny", "we", "controller"). This Privacy Policy describes how we collect, process, store, and protect the personal data of users of queny.app, in accordance with the Law of the Republic of Belarus No. 99-Z of 07.05.2021 "On Personal Data Protection".
When you sign in using Google OAuth, we receive only the following data from Google: your display name, email address, and profile photo URL. When you sign in using Apple Sign In, we receive from Apple: your display name (on first sign-in only), email address (real or anonymised via Apple Private Email Relay), and a unique Apple user identifier. We do not request access to any data beyond your basic profile. This data is used solely to create and identify your account within the service.
When using the service as a master, we process: name, email address, and profile photo (from Google OAuth or uploaded manually); phone number, location address, specialty, and description (provided voluntarily for your public profile); portfolio photos (uploaded voluntarily); schedule and service data; Telegram username (if notification integration is voluntarily enabled); payment subscription data (stored by bePaid — we retain only card type and last four digits).
When booking an appointment, clients provide: name, phone number, and email address. Registration on the platform is not required to make a booking. Client data is processed on behalf of masters solely for appointment management and notification purposes. Clients may request data clarification or deletion by contacting support@queny.app.
Your data is processed for the following purposes: account authentication and management (legal basis: performance of contract); provision of service features — schedule, bookings, profile (performance of contract); sending transactional notifications about bookings via email and Telegram (legitimate interest / consent); processing subscription payments (performance of contract); ensuring security and preventing abuse (legitimate interest); analysing service usage for improvement (legitimate interest).
To operate the service, we engage the following data processors: hoster.by (LLC "Hoster.by", Republic of Belarus) — server hosting and file storage; Google LLC (USA) — user authentication via OAuth 2.0; Apple Inc. (USA) — user authentication via Sign in with Apple; Resend Inc. (USA) — transactional email notifications; Telegram Messenger — notifications via Telegram Bot (only when voluntarily enabled by a master); bePaid (Republic of Belarus) — payment transaction processing. Processors may not use your data for their own commercial purposes. We do not sell or share your data with third parties for marketing purposes.
Personal data is stored on hoster.by servers in the Republic of Belarus. Profile and portfolio photos are stored in hoster.by's S3-compatible object storage in the Republic of Belarus. Security measures include: TLS/HTTPS encryption for all data in transit; OAuth 2.0 secure authentication; least-privilege access controls for the database. Master account data is retained until the account is deleted. Client data is retained within the master's account and deleted along with it.
Some data is transferred outside the Republic of Belarus in connection with the following services: Google LLC (USA) — name and email during Google authentication; Apple Inc. (USA) — email during Sign in with Apple authentication; Resend Inc. (USA) — name and email when sending notifications; Telegram Messenger — name and contact details when sending notifications (only when enabled by a master). All transfers are governed by data processing agreements ensuring an adequate level of data protection.
Under the Law of the Republic of Belarus No. 99-Z of 07.05.2021 "On Personal Data Protection", you have the right to: obtain information about how your personal data is processed; request correction of incomplete, inaccurate, or outdated data; request cessation of processing and deletion of your data; withdraw any consent previously given. To exercise your rights, use the Settings section within the service or submit a request to support@queny.app — requests are handled within 15 business days. Step-by-step account deletion instructions are available on the account deletion page. Complaints may be submitted to the National Personal Data Protection Centre of the Republic of Belarus (cpd.by).
The service uses only technical (session) cookies strictly necessary for maintaining user authentication sessions. Marketing, advertising, and analytics cookies are not used. Session cookies are automatically deleted upon logout or session expiry.
We may update this Privacy Policy from time to time. The current version is published at queny.app/privacy with the date of the latest revision. Users will be notified of material changes by email at least 7 days before the changes take effect. Continued use of the service after changes take effect constitutes acceptance of the revised Policy.
Individual Entrepreneur Kistanov Maxim Alexandrovich. Email: support@queny.app. Company details: queny.app/requisites. For data protection inquiries, you may contact us directly or submit a complaint to the National Personal Data Protection Centre of the Republic of Belarus: cpd.by.