Privacy Policy

1. Application & Service Identity

This Privacy Policy applies to both the Universum.earth website (https://universum.earth) and the md_pereligyn application registered with TikTok for Developers (App ID 7550223656766375942), Meta for Developers (App ID 3690163147944396), and Instagram Business (@md_pereligyn). The md_pereligyn application is the official content automation backend of Universum.earth — the website title, app name, and primary domain all refer to the same service operated by Dr. Vladimir Pereligyn.

• Application name: md_pereligyn
• Website title: Universum.earth — Холистичная медицина | Dr. Pereligyn
• Primary URL: https://universum.earth
• Operator: Dr. Vladimir Pereligyn

2. Data Controller

The data controller for this website and the md_pereligyn application is Dr. Vladimir Pereligyn, operating as Universum.earth. Contact: vpereligyn@gmail.com.

For medical consultations regarding metabolic health, diabetes remission, or integrative medicine, visit universum.earth/consultation.

3. Data We Collect

We collect the following categories of data:

• Contact form submissions: name, email address, phone number (optional), topic, and message text when you submit our contact form.
• Consultation bookings: name, email, phone number, and health-related information you voluntarily provide when booking a consultation.
• Newsletter subscriptions: email address when you subscribe to our newsletter.
• Analytics data: anonymized usage data collected by Firebase Analytics, including pages visited, session duration, device type, and approximate location (country level). No personally identifiable information is included.
• Patient cabinet data: if you create an account in the patient cabinet, we store your authentication credentials (email, encrypted password) and health records you voluntarily enter (medications, lab results, appointments).

4. How We Use Your Data

• To respond to your consultation inquiries and provide medical services
• To send appointment reminders and follow-up communications
• To send newsletter updates (only if you opted in)
• To improve our website and services through anonymized analytics
• To comply with legal obligations related to medical record-keeping

5. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: for newsletter subscriptions, analytics cookies, and contact form submissions
• Contract performance: for consultation bookings and patient cabinet services
• Legitimate interest: for website security and improvement
• Legal obligation: for medical record-keeping requirements

6. Data Storage and Security

Your data is stored securely in Firebase (Google Cloud Platform) infrastructure. Patient health data is encrypted at rest and in transit. We use industry-standard security measures including HTTPS encryption, Firebase Authentication, and Firestore security rules to protect your information.

Contact form submissions and consultation bookings are stored in Firestore with restricted access limited to authorized medical staff.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Firebase/Google Cloud: data hosting and authentication infrastructure
• Legal requirements: if required by law or legal proceedings

We do not use advertising networks, do not share data with social media platforms, and do not participate in data broker programs.

8. Third-Party Platform Integrations (TikTok, Meta, Instagram)

The md_pereligyn application integrates with the following third-party platforms to publish medical education content from Dr. Vladimir Pereligyn's practice:

• TikTok for Developers — md_pereligyn application uses TikTok Login Kit (scope user.info.basic) and Content Posting API (scopes video.upload, video.publish) to publish educational health videos to Dr. Pereligyn's own TikTok account. No end-user data from website visitors is shared with TikTok. The app does not collect TikTok user data beyond the operator's own profile.
• Meta for Developers (Facebook/Instagram) — md_pereligyn application uses Facebook Login API and Instagram Graph API permissions (instagram_basic, instagram_business_basic, instagram_content_publish, instagram_business_manage_messages) on a server-to-server basis to publish medical content to @md_pereligyn.
• Content scope: all content published through md_pereligyn is created by Dr. Pereligyn and contains evidence-based medical education material (thyroid health, endocrinology, metabolic medicine). No user-generated content from third parties is routed through the application.

When you interact with content published by md_pereligyn on TikTok, Instagram, or Facebook, your interaction is governed by the privacy policies of those respective platforms, not by this Privacy Policy.

9. Cookies and Analytics

This website uses Firebase Analytics to collect anonymized usage statistics. Firebase Analytics uses first-party cookies to distinguish users and sessions. No advertising cookies or third-party tracking cookies are used.

You can disable cookies in your browser settings. The website will continue to function normally without cookies.

10. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate personal data
• Erasure: request deletion of your personal data ("right to be forgotten")
• Data portability: receive your data in a machine-readable format
• Object: object to processing based on legitimate interest
• Withdraw consent: withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at vpereligyn@gmail.com. We will respond within 30 days.

11. Data Retention

• Contact form data: retained for 2 years, then deleted
• Patient health records: retained for the legally required period (typically 10 years after last consultation)
• Newsletter subscriptions: retained until you unsubscribe
• Analytics data: automatically expires after 14 months (Firebase default)

12. International Data Transfers

Your data may be processed by Google Cloud Platform servers located in the EU and the United States. Google complies with the EU-US Data Privacy Framework for international transfers.

13. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated effective date. For significant changes, we will notify registered users by email.

15. Contact

For privacy-related questions or to exercise your data rights, contact us:

• Email: vpereligyn@gmail.com
• Website: universum.earth/contact