Privacy Policy

2. The data we process

Account data: your name, e-mail address, profile photo and language. If you sign in with Google or Apple we receive your name and e-mail from them; otherwise you sign in with a one-time code sent to your e-mail. We never store passwords.

Contact details: a phone number, which is optional for customers and lets the salon reach you about a booking.

Booking data: the services you book, the salon and the person you book with, the time, the price, notes you add, cancellations, and your booking history. Salons can also enter bookings for customers who book by phone or at the counter; such a booking may carry a name, an e-mail address or a phone number that the salon typed in.

Payment data: card payments are processed by Stripe, which receives your card details directly. We never see or store your full card number. For card payments Stripe creates a customer record in the salon's Stripe account with the name, e-mail address and phone number you gave when booking, and can save your card for future payments at that salon. You can remove a saved card in the payment window the next time you pay, or by writing to support@calendioo.com. We store the payment's status, the amount, and Stripe's references for the payment and, for salons, for their Stripe account.

Salon and staff data: for salons, the business name, organisation number, address, opening hours, services, prices, photos and the names, e-mail addresses and phone numbers of the people the salon adds as staff. Public parts of this appear on the salon's page.

Reviews: the rating and text you leave after a visit, shown on the salon's page together with your initials, and any reply the salon writes.

Notifications: the booking confirmations, reminders, cancellations and similar messages we have sent you, and, if you allow notifications in the app, a push token for your device.

Location: when you search for salons near you, the app, with your permission, reads your device's position and sends it to our database, which finds salons near it. The position is not stored on our servers. In the app, Google only receives the city or address text you type. On the website, if you choose to search near you, your browser asks for your permission and the position is used the same way; it is kept only in that browser tab until you close it. When the search page shows its map, the map is drawn by Google Maps, so Google receives the map area around that position. We also read the country and city of your connection from our hosting provider to pick sensible defaults.

Usage and technical data: which screens and pages are used, device type, operating system and app version, the language you use, the campaign tag of the link that opened the app or website, and error reports when something breaks. This is pseudonymised (see section 3): after you sign in it is linked to your account identifier, never to your name or e-mail, so it is tied to your account. It never includes the text you type.

Device records: the app and the website generate a device identifier (on the website it is kept in the browser's local storage), and we store a device record (the identifier, the device or browser type, and when it was first and last used) to recognise new devices and send the "new sign-in" e-mail.

Support: what you write to us when you contact support@calendioo.com or use the support form.

3. Why we process it, and on what legal basis

• To provide the service — searching, booking, cancelling, paying, running a salon's calendar, sending the confirmations, reminders and cancellations a booking needs. Legal basis: the agreement with you (GDPR article 6(1)(b)).
• Accounts and sign-in — keeping you signed in securely on your devices and e-mailing you when a new device signs in to your account. Legal basis: the agreement with you.
• Payments and payouts — reserving, charging and refunding card payments through Stripe and paying salons out. Legal basis: the agreement with you and our legal obligations (article 6(1)(c)), for instance bookkeeping.
• Push notifications — only if you turn them on in the app; you can turn them off in your device's settings at any time. Legal basis: your consent (article 6(1)(a)).
• Preventing misuse — limiting how often an address can be used, recording missed bookings so that salons can protect their time, and temporarily restricting an account with repeated no-shows. Legal basis: our legitimate interest in a service that works for both sides (article 6(1)(f)).
• Understanding use and fixing errors — pseudonymised usage statistics and error reports, with as little data as the purpose needs and with no profiling or advertising. Legal basis: our legitimate interest in improving the service (article 6(1)(f)). You can object at any time (section 7).
• Legal obligations — keeping the records the law requires, for instance under the Swedish Bookkeeping Act.

We do not sell personal data, and we do not use it for advertising.

4. Who sees your data

The salon you book with sees your name, your e-mail address, your phone number if you gave one, what you booked, the time and your notes. Its staff see the bookings assigned to them. A salon does not see your bookings at other salons. Salons are responsible for using this information only for your booking.

Customers of a salon see the salon's public page: name, address, opening hours, services, prices, photos, staff first names and reviews.

Other customers see your reviews with your initials, never your full name or e-mail.

Service providers that process data for us (processors):

• Supabase (EU) — database, sign-in and photo storage.
• Stripe — card payments, refunds and payouts to salons. Salons also have their own agreement with Stripe.
• Resend — delivery of our e-mails, including sign-in codes.
• Expo, Apple and Google — delivery of push notifications to iPhones and Android phones.
• Google — address and city lookup and the map on the search page (Maps and Places), and sign-in with Google.
• Apple — sign-in with Apple.
• PostHog (EU) — usage statistics and error reports.
• Cloudflare — hosting and protection of the website.
• Vercel — hosting of the admin portal.

We may also disclose data when the law requires it, for instance to authorities with a legal right to it.

5. Transfers outside the EU/EEA

Our database, sign-in, photo storage and analytics run in the EU. Some providers (Stripe, Google, Apple, Expo, Resend, Cloudflare, Vercel) may process data in the United States or elsewhere. Where data leaves the EU/EEA, the transfer rests on the EU–US Data Privacy Framework where the provider is certified, or otherwise on the European Commission's standard contractual clauses.

6. How long we keep it

• Account, contact and booking data: for as long as you have an account. When you ask us to delete your account it is scheduled for deletion; you have 7 days to change your mind, after which it is removed from our systems.
• Records of payments: 7 years, as the Swedish Bookkeeping Act requires. Stripe keeps its own records under its policy.
• Reviews: until you remove them or your account is deleted.
• Notification history: 90 days. Push tokens: until you sign out, uninstall the app or the device stops accepting notifications.
• Device records: deleted together with your account.
• A salon's data after closure: a salon that closes keeps its data for 90 days after its last open day so that the owner can reopen; then it is deleted.
• Usage statistics and error reports: at most 12 months.
• Technical logs (rate limiting, payment events from Stripe): 1 and 30 days respectively.

7. Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict or object to processing, to withdraw consent, and to receive the data you gave us in a machine-readable form.

Two of these are built into the service: Download my data gives you a file with your account and booking data, and Delete my account schedules the deletion described above. Both are in your profile on the website and in the app. A salon owner has to close or hand over the salon first.

For anything else, write to support@calendioo.com. We answer within a month. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, IMY, or to the supervisory authority in the country where you live.

8. Security

Data is encrypted in transit and at rest. Every row in our database carries access rules so that a user only reaches what they are entitled to, and actions with money or other people's bookings run on our servers, not in the app. Sign-in tokens on your phone are kept in the device's protected storage (iOS Keychain, Android encrypted storage). Card details never pass through our systems.

9. Children

Calendioo is for people aged 16 and over. If we learn that an account belongs to someone younger, we delete it.

10. Cookies and storage on your device

Website: we use only what the site needs to work — a cookie and local storage for keeping you signed in, recognising your device for the new-sign-in e-mail, your language and your light or dark theme. Our usage statistics are collected without cookies and without storing anything on your device. There are no advertising or third-party tracking cookies, which is why the site shows no cookie banner.

App: the app keeps your sign-in token, your settings and, if you allow notifications, a push token on the device. For usage statistics it keeps a random identifier in the app's own storage; it is not shared with other apps and is removed with the app.

11. Changes to this policy

When we change this policy in a way that matters to you, we tell you in the app and by e-mail at least 30 days before the change applies. The date at the top shows the current version.

12. Contact

Calendioo is run by Ronny Malki, Emil Hedelius gata 96, 603 76 Norrköping, Sweden, who is the controller. E-mail: support@calendioo.com.