Privacy Policy

This Privacy Policy was last modified on October 12, 2026.

This Privacy Policy applies to Asterium Ltd. ("Asterium", "we", or "us"), the owned and operated websites (including helpdesk), their subdomains and mobile applications, and the related server-side services ("Services"). Asterium understands that you care how your personal data is used and shared. This Policy explains what data is collected when you use the Services, how it is used, and how you can control its collection, correction and/or deletion. We will not use or share your personal data with anyone except as described in this Policy. Capitalized terms not defined here have the meaning given to them in our Terms of Use. By continuing to use the Services, you confirm that you have reviewed this Policy.

1. Data controller

The party that determines the purposes and means of processing personal data within the Services is Asterium Ltd. (details are provided at the end of this document). For any questions about the processing of personal data, you may contact us at support@asterium.ru.

2. Data we collect

(a) Account and support data: full name, phone number, email address and similar data that you provide when registering, authorizing or contacting support.

(b) Data received from devices connected to your account as part of the parental-control features: location (geolocation) data, information about the usage of installed applications, real-time ambient sound (when the ambient-listening feature is used; the sound is streamed and not recorded), family-chat messages including voice messages, information about device status and connectivity, and related events and alerts.

The Honkling app, which the parent installs on the child's phone, transmits to the parent: (1) location, including in the background when the app is closed, while location services are on and the permissions are granted on the child's phone; (2) information about installed apps and how long they are used (the "Screen time" feature); (3) ambient sound only at the parent's request from the parent app: the sound is streamed in real time and not recorded, and the child's phone shows a microphone indicator and a notification while it is on; (4) family-chat messages, including voice messages, which are stored on our servers, battery level and permission status, SOS signals, and parent-PIN entry events.

(c) Technical and payment metadata: information about the device and app version, identifiers used to deliver notifications, and metadata about purchases and subscriptions made. We do not store full payment-card data — it is processed by the payment service.

2.1. Accessibility service (Honkling app)

The Honkling app uses the Android accessibility service (AccessibilityService API) only after the user agrees in a separate dialog before it is turned on. The service notices when a system screen opens on the phone where the app's protection could be turned off or the app removed (accessibility settings, device admin, App info, the uninstall prompt); at that moment it shows a parent-PIN prompt, closes that system screen or taps "Cancel" in it, and after the correct PIN confirms the removal. The service also shows hints on top of the permission setup screens and helps keep the app running in the background so that parents keep receiving location, messages and SOS signals. The service receives only the name of the system screen and app, does not read what is typed, passwords or messages, and does not record or send the content of other apps.

3. Roles, legal bases and consent

The legal basis for processing is your consent and the necessity of performing the contract (the Terms of Use), and, for users in the Russian Federation, Federal Law No. 152-FZ of 27 July 2006 "On Personal Data". The Services are intended for adult parents and legal guardians. By connecting a minor's device, you as the parent or legal guardian provide the necessary consent to the processing of that minor's data and confirm that you are entitled to do so. Data from the ambient-listening feature and data of children are particularly sensitive: we process them solely for the purpose of providing the relevant parental-control features and do not use them for other, incompatible purposes.

4. How we use data

We use the data we collect to provide and maintain the operation of the Services and their features, to ensure security, to process payments and subscriptions, to respond to your requests, and to comply with legal requirements. We may also use de-identified and aggregated data to improve the quality of the Services. We do not send promotional mailings; we may send you service-related messages relating to your account.

We collect mobile app usage statistics (usage events, device information, errors and crashes) — in the parent app and in the Honkling app on the child's phone — only with a separate consent to usage statistics, which the parent gives in the parent app for themselves and their children, and only to find and fix errors. It can be withdrawn in the parent app (Profile → About) or by email to support@asterium.ru.

5. Sharing and processors

We do not sell your personal data. To operate the Services we engage service providers (processors) acting on our behalf, including: hosting and file-storage infrastructure; push-notification delivery services (Firebase Cloud Messaging, Huawei Mobile Services, RuStore); the Yookassa payment service; the Adapty subscription-management service; and the AppMetrica statistics service (Yandex LLC) — where consent to usage statistics has been given. Such providers receive access to data only to the extent necessary to provide services to us and are obliged to keep it confidential. We may disclose data where required by law, to comply with court acts and the lawful requests of authorized bodies, to protect our rights, the security and integrity of the Services, and the rights and safety of users and others. In the event of a reorganization, merger, acquisition or other transfer of the business (in whole or in part), data may be transferred to the successor; we will notify you of material changes.

6. Storage and cross-border transfer

The processing of personal data of citizens of the Russian Federation, including its recording, systematization, accumulation and storage, is carried out using databases located in the territory of the Russian Federation, in accordance with data-localization requirements. Where the provision of certain services requires a cross-border transfer of data, it is carried out in compliance with the requirements of applicable law and while ensuring an adequate level of protection.

7. Retention periods

We retain personal data for as long as necessary to provide the Services and achieve the purposes of processing, and for the periods established by law, in order to fulfil our obligations, resolve disputes and enforce our agreements. Data received from devices (including chat messages and voice messages) is retained for the period necessary to provide the relevant feature, after which it is deleted or de-identified, unless otherwise required by law.

8. How we protect your data

Asterium takes organizational and technical measures to protect your data, including encryption in transit (SSL/TLS). At the same time, no method of transmission or storage of information is completely secure, and therefore we cannot guarantee its absolute security. In the event that personal data is compromised as a result of a security breach, we will notify accordingly in compliance with applicable law.

9. Your rights

You have the right to request access to your personal data, its correction, updating or deletion, to restrict or object to its processing, to withdraw previously given consent, and to exercise other rights granted by applicable law. To do so, log in to your account or contact us at support@asterium.ru; we will acknowledge receipt of the request within 72 hours and handle it within the established period. Please note that withdrawing consent or deleting data necessary for the operation of the Services may make it impossible to provide the Services. You also have the right to lodge a complaint with the competent authority for the protection of the rights of personal-data subjects. To fully delete your account and the related data, follow the instructions on the "Delete your account and data" page.

10. Children's privacy

The account is created by a parent or legal guardian. The Honkling app is installed by the parent on the child's phone and does not create its own account: it is linked to the parent's account with a code. We do not show ads to the child, do not use the advertising ID, and do not sell or share the child's data with third parties for advertising purposes. The child's data is available only to the parents (legal guardians) whose accounts the child's device is connected to, and is processed solely for parental-control features on the basis of the consent of the parent or legal guardian. If you believe that a child's data has been provided to us without proper authority, contact us at support@asterium.ru and we will take the necessary measures.

11. Notifications, third-party links and changes

We may send you notifications by email, via PUSH notifications or by posting them within the Services. We are not responsible for the practices of third-party websites and services that may be linked from the Services — they are subject to their own rules and policies. All changes to this Policy are effective when posted on this page; for material changes we will notify you via email and/or a prominent notice within the Services and update the "last modified" date at the top of the page. For any questions about this Policy, please contact support@asterium.ru.

Appendix A. Company websites: cookies and analytics

This appendix supplements the Policy with respect to the websites operated by Asterium. These websites contain no personal data collection forms; apart from what is listed below, they collect nothing about the visitor. The set of counters and the way to withdraw consent are stated separately for each website.

On all websites the IP address and User-Agent are recorded in standard web server logs to keep the site secure and stable. No counter is loaded until a choice is made in the cookie banner.

A.1. asterium.ru

Yandex Metrica — a statistics counter hosted on Yandex servers in the Russian Federation, with no transfer of data abroad. It is loaded after a choice is made in the banner, on the basis of the Operator's legitimate interest in improving the quality of the website, and in this mode collects anonymised traffic statistics only.

Yandex Metrica Session Replay and click map — a recording of on-page actions: pointer movement, scrolling and clicks. Loaded only after explicit consent given through the "Accept all" banner.

Google Analytics 4 — a statistics counter operated by Google LLC (USA). Loaded only after explicit consent given through the "Accept all" banner. This entails a cross-border transfer of data (cookie identifier, IP address, User-Agent) to the territory of the United States.

You may withhold consent to analytics cookies, or withdraw it at any time, using the "Withdraw cookie consent" button in the footer of asterium.ru or by writing to support@asterium.ru. Withdrawal does not affect how the website works.

A.2. gusyara.rf (xn--80af3bdj7e.xn--p1ai)

This section covers the website гусяра.рф and its mirrors gusyara.ru and gusyara.asterium.ru, which redirect to the primary address.

Yandex Metrica — a statistics counter hosted on Yandex servers in the Russian Federation, with no transfer of data abroad. It is loaded after a choice is made in the banner, on the basis of the Operator's legitimate interest in improving the quality of the website, and in this mode collects anonymised traffic statistics only.

Yandex Metrica Session Replay and click map — a recording of on-page actions: pointer movement, scrolling and clicks. Loaded only after explicit consent given through the "Accept all" banner.

Google Analytics 4 — a statistics counter operated by Google LLC (USA). Loaded only after explicit consent given through the "Accept all" banner. This entails a cross-border transfer of data (cookie identifier, IP address, User-Agent) to the territory of the United States.

You may withhold consent to analytics cookies, or withdraw it at any time, using the "Withdraw cookie consent" button in the footer of гусяра.рф or by writing to support@asterium.ru. Withdrawal does not affect how the website works.

A.3. Invitation page g.asterium.ru

This section covers the page g.asterium.ru, which a parent sends to a child to install the Honkling app. The pairing code contained in the page address is not passed to the statistics counters: instead of the page address they receive an anonymised template (for example, /c/:code), and the address the visitor came from is shortened to the site name.

Yandex Metrica — a statistics counter hosted on Yandex servers in the Russian Federation, with no transfer of data abroad. It is loaded after a choice is made in the banner, on the basis of the Operator's legitimate interest in improving the quality of the page, and collects anonymised traffic statistics and taps on the install buttons only. Session Replay and the click map are not used on this page.

Google Analytics 4 — a statistics counter operated by Google LLC (USA). Loaded only after explicit consent given through the "Accept all" banner. This entails a cross-border transfer of data (cookie identifier, IP address, User-Agent) to the territory of the United States. Google Analytics advertising features are disabled.

The page is intended, among others, for minors invited by a parent or legal guardian. Consent to analytics cookies is not required: the page and the app installation work the same without it. Consent may be withdrawn at any time using the "Withdraw cookie consent" button at the bottom of the page or by writing to support@asterium.ru.

Asterium Ltd.
Russian Federation,
195426, Saint-Petersburg,
ul. Peredovikov 9,
OGRN 1147847162473
support@asterium.ru