Version of 18 October 2026. The legally binding text is in Russian; the sections on cookies, the app and other countries are translated below.
Privacy policy for the personal data of users of the website of Axioma School, which uses distance learning technologies in delivering its core tutoring programmes and (or) additional tutoring programmes
This is a translation provided for information. Only the Russian text is legally binding; in case of any discrepancy, the Russian version prevails.
1.1. This privacy policy has been drawn up in accordance with the Constitution of the Russian Federation, Federal Law No. 149-FZ of 27 July 2006 “On Information, Information Technologies and Information Protection”, Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (hereinafter the Federal Law or the Personal Data Law) and other regulations on the protection and processing of personal data in force in the Russian Federation.
1.2. The following terms are used in this privacy policy:
1.3. This privacy policy sets out how site users’ personal data is obtained, protected, stored, processed and transferred, and applies to all information that the site administration may obtain about users while they use the site.
This privacy policy does not apply to other websites or to third-party websites. The site administration is not responsible for third-party websites that users may reach through links available on the site.
1.4. The site administration may obtain users’ personal data only from the users themselves, and the personal data of minor students also from their parents (legal guardians).
Site users’ personal data is confidential information and may not be used by the site administration or any other person for personal purposes.
1.5. The site administration provides users with free and unrestricted access to their personal data, including the right to receive copies of any record containing their personal data, except as provided by law.
1.6. The site administration develops measures to protect site users’ personal data.
2.1. Site users’ personal data is processed in order to deliver educational programmes or parts of them using distance learning technologies, and for the purposes set out in the Consent to the processing of personal data and the public offer. Advertising materials are sent only with a separate consent to receive advertising.
2.2. Site users’ personal data is processed both with and without automation.
2.3. The categories of personal data subjects are:
Purpose — enabling students to receive education through educational programmes or parts of them delivered with distance technologies. Category — general personal data only:
Processing methods — collection, recording, systematisation, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), anonymisation, blocking, deletion and destruction of personal data.
Processing and storage period — for the duration of the services and 1 year after they end.
Purpose — enabling students to receive education through educational programmes or parts of them delivered with distance technologies; concluding and performing the contract (offer). Category — general personal data only:
Processing methods — the same as in clause 2.3.1.
Processing and storage period — for the duration of the services and 1 year after they end; requests that did not lead to a contract — 1 year after the last contact; payment details — for the period required by tax law.
Purpose — delivering tutoring programmes or parts of them with distance technologies; reviewing job applications. Category — general personal data only:
Processing methods — the same as in clause 2.3.1.
Processing and storage period — for the duration of the cooperation and 1 year after it ends; data of candidates with whom cooperation did not begin — 1 year from the application.
2.4. Site users’ personal data is stored electronically in the site’s personal data information system on servers located in the Russian Federation, and in archive copies of the site’s databases.
When site users’ personal data is stored, organisational and technical measures are taken to keep it safe and to prevent unauthorised access to it.
Only the operator, and the teachers and managers of Axioma School whom the operator has authorised to work with site users’ personal data and who have signed a non-disclosure agreement, may have access to the processing of site users’ personal data. Each of them has access only to the data needed for their work.
The list of persons with access to site users’ personal data is approved by the operator.
2.5. The site administration may transfer site users’ personal data to third parties only when this is necessary to prevent a threat to their life and health, in cases established by law, and to persons whom the operator instructs to process personal data in order to provide the services (hosting, payment processing, sending notifications). These persons are listed in the section “Where data is stored and who receives it”.
2.6. The site administration shall provide users’ personal data only to authorised persons and only to the extent necessary for them to perform their tutoring duties, in accordance with this privacy policy and the laws of the Russian Federation.
2.7. When transferring site users’ personal data, the site administration warns the recipients that the data may be used only for the purposes for which it was provided and requires them to confirm that they comply with this condition.
2.8. Consent to the processing of personal data that the site user has authorised for dissemination is given separately from the user’s other consents to the processing of their personal data. The site administration enables the site user to specify the list of personal data for each category of personal data named in the consent to the processing of personal data authorised for dissemination.
2.9. In the consent to the processing of personal data authorised for dissemination, the site user may prohibit the site administration from transferring (other than providing access to) this personal data to an unlimited number of persons, and may prohibit or set conditions for the processing (other than obtaining access) of this personal data by an unlimited number of persons.
2.10. The transfer (dissemination, provision, access) of personal data authorised by the site user for dissemination must be stopped at any time at the user’s request. The personal data named in such a request may then be processed only by the site administration.
2.11. All information about transfers of site users’ personal data is recorded in order to monitor the lawful use of that information by its recipients.
2.12. In order to improve the quality of the service and to enable legal protection, the site administration may keep log files of actions performed by users while using the site.
3.1. The placement of personal data information system equipment and special equipment, the protection of the premises where personal data is handled, and the security regime in these premises must ensure the safety of personal data media and information security tools and prevent uncontrolled entry or presence of unauthorised persons in these premises.
3.2. Premises housing the technical means of personal data information systems or storing personal data media must meet the fire safety requirements established by the current laws of the Russian Federation.
3.3. The level of special equipment of the premises is determined by a specially established commission. Reports are drawn up based on the determination of the class and the inspection of the premises for compliance with that class.
3.4. In addition to these measures for the special equipment and protection of premises, where cryptographic information protection tools are installed or stored, additional requirements set by the methodological documents of the Federal Security Service of Russia apply.
4.1. The site administration may set requirements for the personal data that users must provide in order to use the site, guided by this privacy policy, the Constitution of the Russian Federation and other federal laws.
4.2. The site administration does not verify the accuracy of the personal data provided by site users, assuming that they act in good faith and keep their personal data up to date.
4.3. The site administration is not responsible for site users voluntarily passing their contact details, password or login to third parties.
4.4. The site administration may not obtain or process site users’ personal data about their political, religious or other beliefs and their private life.
4.5. The site administration, at its own expense, protects site users’ personal data against unlawful use or loss in the manner established by the laws of the Russian Federation.
4.6. The site administration takes the measures necessary and sufficient to fulfil the obligations set out in the Personal Data Law and the regulations adopted under it. The site administration independently determines the composition and list of such measures. These measures include, in particular:
5.1. To protect their personal data stored on the site, site users have the right to:
If the site administration refuses to remove or correct site users’ personal data, users may declare their disagreement to the site administration in writing, with reasons.
Requests and withdrawals of consent are sent by email to school.axioma.info@gmail.com. You can also download your data and delete your account in the personal dashboard: “Settings → Profile”.
5.2. Site users may independently limit the collection of information by third parties using the standard privacy settings of the web browser they use with the site, and may change, delete or add to the personal data they have provided at any time.
5.3. If site users believe that their personal data is processed in violation of the Personal Data Law or otherwise violates their rights and freedoms, they may appeal against the actions or inaction of the site administration to the authorised body for the protection of the rights of personal data subjects (Roskomnadzor) or in court.
5.4. Site users may at any time edit, in their personal dashboard, the personal data they provided during registration or sign-in.
5.5. Site users should not waive their rights to the preservation and protection of confidentiality.
6.1. Upon receiving a request for personal data obtained through anonymisation, the site administration anonymises the personal data it processes in accordance with the anonymisation requirements, methods and procedure approved by Decree of the Government of the Russian Federation No. 1154 of 1 August 2025.
6.2. When anonymising personal data, the site administration ensures:
6.3. Compliance by the site administration with the anonymisation requirements must ensure that personal data obtained through anonymisation contains no information to which access is restricted by federal laws.
6.4. In accordance with a request for personal data obtained through anonymisation, the site administration provides such data to the state information system of the authorised body for information technology regulation, in the manner established by the Government of the Russian Federation in agreement with the federal executive body authorised in the field of security.
7.1. If unlawful processing of personal data is identified upon a site user’s request, the site administration blocks the unlawfully processed personal data relating to that user from the moment of the request for the period of verification.
7.2. If inaccurate personal data is identified upon a site user’s request, the site administration blocks the personal data relating to that user from the moment of the request for the period of verification, provided that blocking does not violate the rights and legitimate interests of the site user or third parties.
7.3. If the inaccuracy of the personal data is confirmed, the site administration corrects the personal data within seven working days of receiving the information provided by the site user or other necessary documents, and lifts the blocking.
7.4. If unlawful processing of personal data by the site administration is identified, the site administration stops the unlawful processing within no more than three working days of identifying it.
7.5. If it is impossible to ensure the lawfulness of the processing, the site administration destroys such personal data within no more than ten working days of identifying the unlawful processing.
7.6. The site administration notifies the site user that the violations have been eliminated or that the personal data has been destroyed.
7.7. If an unlawful or accidental transfer (provision, dissemination, access) of personal data that has violated the site user’s rights is established, the site administration, from the moment the incident is identified by the site administration, the authorised body for the protection of the rights of personal data subjects or another interested person, notifies the authorised body for the protection of the rights of personal data subjects:
7.8. Once the purpose of processing has been achieved, the site administration stops processing the personal data and destroys it within no more than thirty days of achieving the purpose.
7.9. If the site user withdraws consent to the processing of their personal data, the site administration stops processing it and, if keeping the personal data is no longer required for the purposes of processing, destroys it within no more than thirty days of receiving the withdrawal.
7.10. If the site user asks the site administration to stop processing their personal data, the site administration stops the processing within no more than ten working days of receiving the request, except in cases provided for by the Personal Data Law.
This period may be extended by no more than five working days if the site administration sends the site user a reasoned notice stating the reasons for the extension.
7.11. If personal data cannot be destroyed within the periods specified in clauses 7.4–7.10 of this privacy policy, the site administration blocks such personal data and ensures its destruction within no more than six months, unless another period is established by federal laws.
7.12. Once the regulatory storage period for documents containing the site user’s personal data has expired, or other legal grounds arise, the documents are to be destroyed.
7.13. For these purposes, the site administration sets up an expert commission and assesses the value of the documents.
7.14. Based on the assessment, documents containing the site user’s personal data that are to be destroyed are:
7.15. If the personal data was processed by the site administration without automation, the document confirming the destruction of site users’ personal data is a personal data destruction report.
7.16. If the personal data was processed by the site administration with automation, the documents confirming the destruction of site users’ personal data are a personal data destruction report and an extract from the event log of the personal data information system.
8.1. Persons found guilty of violating the rules governing the collection, processing and protection of site users’ personal data bear disciplinary, financial, civil, administrative and criminal liability in the manner established by the current laws of the Russian Federation.
9.1. This privacy policy may be changed or terminated by the site administration unilaterally without prior notice to the site user. A new version of the privacy policy takes effect from the moment it is published on the site, unless the new version provides otherwise.
9.2. The current version of the privacy policy is available on the Internet at: https://axiomaschool.com/privacy.
Data is stored on servers in Russia (Amvera, Moscow). We share it only with services we can’t work without:
Public authorities — only when the law requires it.
The app shows the same account as the browser. On top of that it:
The app doesn’t read your files, doesn’t watch other programs and doesn’t share data with third parties. To remove everything: “Settings → Storage → Forget everything on this computer”, then uninstall the app in Windows Settings (you can tick “Remove my data too”).
The app shows the same account as the browser and works without the internet. On top of that it:
The app does not read your files or photos unless you pick them, does not determine your location and does not share data with third parties. The version from our website asks axiomaschool.com every 6 hours whether a new version is available; no data about you is sent. To delete everything, uninstall the app in your phone settings.
We process data under Federal Law No. 152-FZ “On Personal Data”. The legal bases are the contract (public offer) and your consent. Data of Russian citizens is recorded and stored on servers in Russia. You can complain to Roskomnadzor.
Legal bases: contract — lessons and the account; legitimate interest — security and replying to requests; consent — analytics and the email when your country opens; legal obligation — accounting records.
Transfer to Russia. Our servers are in Russia, which has no EU adequacy decision. We transfer data there because it is necessary to perform our contract with you (Art. 49(1)(b)) and with your explicit consent (Art. 49(1)(a)). The risk is that Russian law protects data differently from EU law.
Your rights: access, rectification, erasure, restriction, portability, objection, withdrawal of consent and a complaint to the supervisory authority in your country. The age at which a child can consent alone is 13 to 16 depending on the country; we use 16.
COPPA (children under 13). An account for a child under 13 is created only with a code given to a parent or with a parent’s consent. A parent can review the child’s data, delete it and refuse further collection — by emailing the school.
California (CCPA/CPRA) and other states. We don’t sell personal information or share it for advertising. You have the right to know what was collected, to correct and delete it; we won’t treat you differently for using these rights. We honor the Global Privacy Control signal as an opt-out.
We process data under the PRC Personal Information Protection Law. Our servers are in Russia, so we ask for separate consent to transfer data outside the PRC. Data of children under 14 is sensitive and needs a parent’s separate consent.
Your rights: to access, copy, correct and delete your data, withdraw consent and ask us to explain our processing rules.
We also process data under your country’s personal data law (in Kazakhstan, the Law “On Personal Data and Its Protection”). Your rights are the same as in the general part; data is stored in Russia and transferred there with your consent.