govno.world Legal Pack (drafts)
๐ ะ ัััะบะฐั ะฒะตััะธั:
../README.md(the Russian source/canonical pack).
๐ v0.2 โ operator details filled in, texts published. Not legal advice. Before store submission the following remain: counsel review (Republic of Kazakhstan + GDPR/EU), appointment of an EU representative (GDPR Art. 27 / DSA Art. 13), a telephone number for trader status, and DMCA agent registration.
๐ The public pages are generated from these files:
make legal-htmlbuildsweb/legal/andweb/en/legal/;make legal-checkfails when the HTML has drifted from the markdown.
These are the public-facing documents referenced by the App Store, Google Play, and GDPR/DSA (see ../../store-publication-docs.md โ what is required and where).
Pack contents and hosting map
All documents are published publicly on the govno.world domain and linked from the app and the store consoles.
| Document | File | Canonical URL |
|---|---|---|
| Terms of Service (ToS/EULA) | terms-of-service.md | govno.world/en/legal/terms |
| Privacy Policy | privacy-policy.md | govno.world/en/legal/privacy-policy |
| Community Guidelines | community-guidelines.md | govno.world/en/legal/community-guidelines |
| CSAE Standard (child safety) | csae-standard.md | govno.world/en/legal/csae-standard |
| Account and Data Deletion | account-deletion.md | govno.world/en/legal/account-deletion |
| Support / Contact | support.md | govno.world/en/legal/support |
| Copyright / DMCA | copyright-dmca.md | govno.world/en/legal/copyright |
| Legal Notice / Imprint / DSA | imprint.md | govno.world/en/legal/imprint |
Mailboxes โ register
All mailboxes on the govno.world domain. The "Where published" column is the reason a mailbox must receive mail: users, store reviewers and public authorities write to these addresses.
| Address | Purpose | Where published / who writes | Required |
|---|---|---|---|
| support@ | general user support | /support, /legal/support, ToS, Community Guidelines, developer contact in both stores, App Review | yes |
| privacy@ | data-subject requests (GDPR access, erasure, objection) and policy questions | Privacy Policy, /legal/account-deletion, /privacy | yes |
| legal@ | DSA Art. 12 point of contact for EU users and authorities; legal correspondence | /legal/imprint, ToS | yes (if EU) |
| abuse@ | abuse and violation reports, escalation from outside the app | CSAE standard, /legal/support | yes |
| dmca@ | copyright notices and counter-notices (ยง512) | /legal/copyright, the Designated Agent record at the US Copyright Office | yes, if the US is in scope |
| childsafety@ | child safety point of contact for Google Play and child-safety organisations | CSAE standard, Play Console Child Safety Standards form | yes (Play, Social category) |
| security@ | vulnerability reports | /.well-known/security.txt | recommended |
| play@ | technical mailbox for the IARC age-rating questionnaire in Play Console | not published; entered in the console | yes, when submitting to Play |
| no-reply@ | outbound only transactional mail (address verification, password reset) | the From header of those emails | already live (Mailgun) |
โ ๏ธ Only outbound mail is configured today (Mailgun,
no-reply@). Every mailbox above except the last must receive mail: an Apple reviewer writes to the contact address and expects an answer, and the DSA point of contact is legally required to work. Test each one with an external message.abuse@,dmca@,childsafety@,security@,play@andlegal@may be forwarders into one shared inbox โ what matters is that mail arrives and a human answers it, not that each is a separate account.
โ ๏ธ What to complete before publication (contact and registration details)
- [ ] Operator: name (LLP/JSC), BIN, registered address (Kazakhstan), director/authorized representative.
- [ ] Version date in each document.
- [ ] EU representative (GDPR Art. 27 + DSA Art. 13): name and address in the EU.
- [ ] Personal data controller / DPO: full name/contact.
- [ ] Child safety POC: full name (the childsafety@ mailbox is in place).
- [ ] DMCA Designated Agent: full name/title + registration with the US Copyright Office.
- [ ] Trader's phone number (for App Store/Play verification).
- [ ] Kazakhstan supervisory authority for personal data protection (exact name) โ in Privacy Policy ยง8.
- [x] ~~CSAM service (PhotoDNA/Thorn/Google)~~ โ not required: no images are accepted, the Service is text-only. Needed only if photos are ever introduced.
โ ๏ธ Legal flags to review
- Data localization (Kazakhstan). The Personal Data Protection Law of the Republic of Kazakhstan โ requirements to store the personal data of Kazakhstan citizens within the territory of Kazakhstan. This may conflict with the database hosting/use of OpenAI (USA) โ to be reviewed with Kazakhstan counsel; it affects the infrastructure (
../../vps-requirements.md). - DSA (EU): where EU users are present โ hosting/online platform obligations (Art. 14/16/18/22); point of contact and EU representative.
- EU consumer jurisdiction: mandatory rules may override the choice of Kazakhstan law โ to be finalized by counsel.