Version 4, effective from 4 November 2026
1. Who processes your data
The personal data controller is Shohin Airlines LLC, Dushanbe, Republic of Tajikistan. This policy covers the shohinair.com website, the Shohin Airlines mobile app for iPhone and Android, the support chat and the assistant. We process data under the Law of the Republic of Tajikistan “On Personal Data Protection” and other laws of the Republic of Tajikistan.
2. What data we receive
Without signing in, the app receives a random installation number from the server. The server uses it to link saved trips (booking code, surname and flight details), support conversations and notification subscriptions to your phone. Language and settings are stored on the phone.
When you sign in, we receive your phone number, to which a one-time SMS code is sent. In Personal details you may add your first name and surname in Latin and Cyrillic letters, date of birth, gender, citizenship and email.
Saved passengers (names, dates of birth and document details) are kept only on your phone, in the protected Keychain on iPhone or Keystore on Android, and are never sent to our server. They let you fill in the passenger form in one tap when you buy a ticket.
Tickets are sold in the TravelShop booking system, which the airline uses at booking.shohinair.com. The passenger and buyer details you enter at purchase are processed by that system on the airline's behalf. From the order, the app and website need the booking code, surname, passenger names, ticket numbers, flights and payment status to show your trip and remind you about it. Card details are entered on the bank's page and never reach us.
When you book a domestic flight in the app, we pass the passengers' names, dates of birth, document numbers and a contact phone to the airline. The cashier sees them at payment, and they are needed for the tickets and the flight's passenger list.
A domestic booking can be paid online. You enter card details on the payment system's page, and neither the app nor our server sees them. We keep the amount, time and number of the payment, the bank or payment method and the payer's phone number you entered: if the ticket is returned, the refund goes to that number.
For Shohin Club we keep your member number, Latin name, flights and miles history. The support chat keeps your messages and any photos you attach yourself. With “Send ticket by SMS” you enter the phone number of someone close to you, and the message contains no surname or passport details.
The server also receives technical details of each request (IP address, app version, platform, time). We use them to protect against abuse and to apply limits. Flight searches are counted for demand statistics without addresses or devices.
3. Location, camera and photos
The app asks for your location only on the hotels and taxi screens and only when you tap “Hotels near me” or “My location”. Coordinates are used for that one request and are not stored. The camera is used to read a passport or ID card and fill in passenger details, and to take a picture for the support chat. A document from the camera or the gallery is recognized on the phone itself: the image is neither stored nor sent anywhere. Only the photos you attach yourself go to the support chat. Without your permission the app does not access the camera or photos.
4. Assistant
The assistant runs on the DeepSeek language model. The model receives the text of your question and a short trip summary without the booking code, names or surnames. Document and phone numbers from your profile and trips are not sent to the model, and in the support chat they are automatically removed from the text, together with the booking code and surname, before it is sent. Please do not give the assistant passport or card details. To answer, the assistant may search the internet, and only the query text is sent to the search.
You can also ask the assistant by voice. The microphone turns on only when you tap its button. The recording is sent to our server, the speech is recognized by the speech recognition server of Bonur Group LLC, and only the recognized text appears in the chat. The audio is kept only in memory while it is being recognized and is not written to disk or logs.
If an answer from the assistant seems wrong or inappropriate, tap the flag under it: a support agent will receive your question and that answer and review it.
5. Why we process data
To sell and show tickets, handle check-in, send reminders about check-in, payment and departure, answer in support, credit miles, comply with the law and protect our services from fraud. We do not send advertising messages without separate consent.
6. Who receives data
Data goes only to those without whom a service cannot work. These are the booking system provider, the SMS gateway, the Apple and Google notification services and the Expo service used to send notifications, the payment system that handles online payments, the DeepSeek model service, Google map services, and Ostrovok, Booking.com, Yandex Go and Uber when you go to them. Bonur Group LLC develops and supports the website and the app on the airline's instructions, and its server recognizes voice questions to the assistant. Data is disclosed to public authorities only where the law requires it.
Some of these recipients are located outside the Republic of Tajikistan. We give them only what a specific feature needs, and only with your consent or on another legal basis.
7. Storage and protection
Data is transmitted over a secure connection. Access keys to external services are stored encrypted on the server, passenger data is available only to staff who need it for their work, and actions in the admin panel are logged. We keep data as long as it is needed for the purposes of processing or required by law, then delete or anonymise it.
8. Your rights
You can find out what data about you is processed, correct it, withdraw consent and request deletion. To delete your account in the app, open Profile, Personal details and tap Delete account. We will delete your name, phone, email, documents and saved passengers and sign you out on all devices. Tickets you have bought remain valid, and sales and miles records are kept in anonymised form for reporting. If you do not accept the documents, the app offers to delete your data from the phone.
For other requests, write to info@shohinair.com or the support chat, or call the call-center at +(992) 411 000 001. We will reply within the time set by law. You may also apply to the authorised personal data protection body or to a court.
9. Changes to this policy
A new version is published on the website and in the app with its number and effective date. If the changes affect your rights, the app will ask you to accept the new version.