Privacy policy

1. Who is responsible for your data

The personal data operator is IE BIR BOLASHAQ (Бағдат Гүлжан Ералықызы, IIN 950218450075), Republic of Kazakhstan, Astana, 19 Imanov Street. Questions about your data: liaizhan77@gmail.com.

We comply with Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”.

The policy is published in Russian and Kazakh, and this page is its English translation. If the texts differ, the Russian text prevails.

2. What data we collect

• Diagnostic answers. Your goal, past events, words, obstacles and fears that you enter into the ladder. Before you sign in, they are stored in your browser and in our database under a random number, without your name. After you sign in, they are linked to your account so that your ladder is not lost.
• Google account. If you sign in with Google: your name, e-mail, profile photo and account ID. We never see your Google password.
• Guest sign-in. If you pay or enter a promo code without Google: a random account ID, without a name or e-mail. It is stored in your browser and in our database, and your ladder, payments and access are linked to it.
• Payment. Your Kaspi phone number, and the amount, status and dates of payments. We do not receive your bank card details.
• Requests. Your name, contact details and message, if you leave a request for a PDF or for a review.
• Review in WhatsApp. If you leave your number on the result screen so that Aizhan can look at your ladder and message you: your WhatsApp number, your goal, the number of your “I” step, the first point of the guide’s review (“what holds you back the most”), the site language, where you came from (a social network or a link tag) and the time of your consent. Your answers on the steps are not included in the request in full.
• Psychosomatics chart. If you download the psychosomatics chart as a PDF: your WhatsApp number, the site language, where you came from (a social network or a link tag) and the time of your consent.
• Requests from companies. If you leave a request for a team pilot on the For companies page: your name, the company name, the team size (one of the options: up to 20, 20 to 100, 100 to 500, over 500), a phone number or e-mail for contact, the site language, where you came from (a social network or a link tag) and the time of your consent. We collect nothing else about you or the company’s employees in the request.
• Step of the day in Telegram. If after the guide’s analysis you tap “Get the step of the day” and then “Start” in our Telegram bot: an AI model writes 7 steps from the words of your ladder (your goal and your answers on the steps), and these steps are stored on our server under a random key together with the link to the bot, without your name or phone number. When you tap “Start”, the bot picks up the steps and sends you one a day. SendPulse stores your Telegram account (the name and username any bot can see), the texts of the steps and your replies to the bot.
• Partner form. If you fill in the form on the “Ladder: for partners” page to talk about the test in your blog: your name, your social media handle (a link to your profile), your WhatsApp phone number and the time of your consent.
• The Ladder plugin in ChatGPT. The plugin in ChatGPT is published by Aizhan Li, author of the Ladder method. If you take the short self-check in ChatGPT, the plugin receives from ChatGPT only the answers it needs for the reading: your goal, your “I” point, 3 to 5 obstacles, fears above the goal and the answer language. The plugin returns the reading to ChatGPT right away. We do not store these words, do not write them to logs, do not link them to an account on the site and do not use them for advertising. The plugin does not receive your name, contact details or cookies. The plugin does not work with illnesses, diagnoses or symptoms, so there is no need to write them.
• Activity in your account. Notes on the steps, goals, video progress (which videos you opened), an activated promo code. Well-being on the WHO-5 index: only the total score from 0 to 100 and the date of the check, without the answers to individual questions. These make up your “before / after” report, which only you can see.
• Visit statistics. Yandex.Metrica collects anonymized data: cookies, IP address, device and browser type, pages viewed, clicks and scrolling (the “Webvisor” feature). The text you type into fields is not recorded. PostHog records anonymized steps on the site: opening pages, starting and finishing the diagnostic, watching videos, going to payment. It also sees where on the page people tap, measures loading speed and reports technical errors on the page. Page text, diagnostic answers, names and contact details are not sent to it, and screen recording is turned off. When an invoice is issued or a payment goes through, the site tells PostHog only the plan, the amount and the payment method, without your name, phone number or e-mail. Metricool counts visits and where a visitor came from (cookies, device type, referral source). Google Ads records that a person came from our ad on Google and reached the diagnostic, the invoice or the payment: a cookie with the ad click ID, IP address, device and browser type, page address, and for a payment also the amount. Diagnostic answers, the ladder, your name, phone number and e-mail are not sent to Google; the tag does not collect data for personalized advertising or remarketing.

3. Why

To show you the diagnostic result and save your ladder; to show the reading of the short self-check in the Ladder plugin in ChatGPT; to open access to the program after payment and issue renewal invoices; to answer your request; to send you materials, such as the psychosomatics chart, and to contact you in WhatsApp about your ladder review or these materials, if you left your number; to contact you about a company request (by phone, in WhatsApp or by e-mail, depending on what you provided) and discuss a pilot and corporate access to the program; to contact you in WhatsApp about a partnership, if you filled in the partner form; to send you the step of the day in Telegram, if you tapped “Start” in the bot; to understand which pages work and improve the site; to measure how many people came from our ads on Google and reached the diagnostic or payment.

We do not sell data and do not share it for third-party advertising. The Google Ads records are used only to measure our own ads, not for personalized advertising.

4. Consent

You give consent to data processing when you enter answers in the diagnostic, sign in with Google or as a guest, leave a request or pay for a subscription. For the WhatsApp review and the psychosomatics chart, consent is separate: a checkbox next to the number field. For a company request it is separate too: a checkbox under the form, and the request is not sent without it. The same goes for the partner form: a checkbox under the form, and the form is not sent without it. For the step of the day in Telegram, consent is tapping “Start” in the bot; what is sent and where is written under the “Get the step of the day” button. You can withdraw your consent at any time, see section 7.

5. Where data is stored and who it is shared with

To run the site, we use services that process data on our behalf:

• Supabase: the site database. Amazon Web Services servers in Mumbai (India).
• Cloudflare: hosting and protection of the site.
• Google: account sign-in.
• Aitole and Kaspi.kz: issuing and paying invoices.
• SendPulse and Telegram: notifying Aizhan of a WhatsApp review request (number, goal, step and the first point of the review), of a downloaded psychosomatics chart (number, site language and where you came from), or of a company request (name, company, team size, phone number or e-mail, site language and where you came from).
• SendPulse: the “Ladder: for partners” page and storing partner forms (name, social media handle, WhatsApp number).
• SendPulse and Telegram: the “Step of the day” bot. It stores and sends the 7 steps written from your ladder and keeps your replies to the bot.
• WhatsApp: messaging with Aizhan, if you left your number or wrote to her yourself.
• Yandex: visit statistics (Yandex.Metrica).
• PostHog: statistics of steps on the site. Servers in the European Union.
• Anthropic (Claude), Google (Gemini) and Alem Plus: AI models the guide uses to write the analysis of your ladder and the steps of the day. They receive your goal, your answers on the steps and your questions to the guide, without your name, phone or email. Servers in the USA.
• Metricool: anonymized visit statistics together with the author’s social media statistics.
• Google Ads: ad measurement. It records that a person came from a Google ad and reached the diagnostic or payment (a cookie, without name, phone number or e-mail).

The Ladder plugin works inside ChatGPT, a service of OpenAI. OpenAI stores and processes your conversations with ChatGPT, including your self-check answers, under its own privacy policy. From the plugin, OpenAI receives only the reading of your ladder. The plugin request passes through Cloudflare, like any request to the site.

Some of these servers are located outside Kazakhstan, so data is transferred abroad (Article 16 of Law No. 94-V). By using the site, you agree to this transfer.

Data is disclosed to government authorities only in cases expressly provided for by law.

6. How long we keep data

Account data, ladders and notes: for as long as the account exists. Requests: up to three years or until you withdraw consent. WhatsApp review requests, psychosomatics chart requests and company requests: 12 months, after which they are deleted automatically, or earlier if you withdraw consent. Partner forms: 12 months after our last contact, or earlier if you withdraw consent; if we sign an agreement, the partner’s data is kept under the terms of that agreement. Payment data: for as long as the tax legislation of the Republic of Kazakhstan requires. Diagnostic answers given without signing in: up to three years if no one has returned to them. We do not store self-check answers from the Ladder plugin in ChatGPT: the reading is put together and sent straight back to ChatGPT. Steps of the day on our server: one day, or until the bot picks them up, after which they are deleted automatically. In SendPulse, the steps and your chat with the bot are kept until you send “stop” or ask us to delete them, and no longer than 12 months.

7. Your rights

You can find out what data about you is stored, correct it, delete it or withdraw your consent.

You can delete your account with all ladders and answers yourself: in your profile settings, choose “Delete account and all data”. To withdraw consent to the WhatsApp review or to messages about the psychosomatics chart and delete your number, reply to Aizhan in WhatsApp “delete my number” or write to the e-mail below. We will delete a company request on the same kind of request: reply to Aizhan in WhatsApp or by e-mail “delete my request”, or write to the e-mail below with the phone number or e-mail from the request. We will delete a partner form the same way: write to Aizhan in WhatsApp “delete my form” or write to the e-mail below. The steps of the day stop coming if you send the bot “stop”; to delete your chat with the bot, write to the e-mail below. Send any other requests to liaizhan77@gmail.com, and we will reply within the time limits set by law. After an account is deleted, payment data is kept only for tax accounting.

You can turn off Yandex.Metrica, PostHog, Metricool and Google Ads cookies in your browser settings or with a blocker, and the site will keep working. If Do Not Track is turned on in your browser, PostHog collects nothing in the browser, and invoices and payments are counted without being linked to your visit.

You can turn off the Ladder plugin in ChatGPT settings at any time. There is nothing to delete on our side: we do not store self-check answers.

8. How we protect data

The site works only over a secure HTTPS connection. Database access is restricted: each person sees only their own ladders and payments. The payment service keys are stored on the server and cannot be accessed from the browser.

9. Age

The site is intended for people over 18. If you are under 18, use it together with an adult.

The Ladder plugin in ChatGPT is suitable from age 13: it stores nothing, collects no contact details and sells nothing.

10. Changes

We may update this policy. A new version takes effect when it is published on this page; the version date is shown at the top.

Company details

• IE BIR BOLASHAQ (individual entrepreneur Бағдат Гүлжан Ералықызы)
• IIN/BIN: 950218450075
• Address: Republic of Kazakhstan, Astana, 19 Imanov Street
• E-mail: liaizhan77@gmail.com
• Not a VAT payer