Privacy Policy — Podu Randevu

1. Who we are

Podu Randevu (“Randevu”, “we”, “us”, or “our”) is a mobile and web application that connects clients with businesses (such as barbershops, beauty salons, and similar service providers) for booking appointments.

2. Scope

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you:

• download or use the Randevu iOS, Android, or web apps;
• create an account as a client or business user;
• book, manage, or provide services through the app; or
• contact us for support.

By using Randevu, you acknowledge this Policy. If you do not agree, please do not use the Service.

3. Personal data we collect

We collect only what is needed to operate Randevu. Depending on how you use the app, this may include:

3.1 Account and profile data

• Full name
• Email address
• Phone number
• Password or authentication credentials (handled securely via our auth provider; we do not store plaintext passwords)
• Profile photo / avatar
• Account role (client, business owner/staff, or similar)
• Preferred language and basic app settings

3.2 Authentication data (sign-in providers)

If you sign in with Apple, Google, email, or phone (SMS OTP), we receive identifiers and profile information that those providers share with us (for example name, email, and provider user ID), according to your settings with that provider.

3.3 Business and listing data (business users)

• Business name, category, description
• Address and approximate location (latitude/longitude)
• Phone number and contact details
• Logo, cover photo, and other images you upload
• Services (name, duration, price, description)
• Staff profiles and schedules
• Working hours and availability exceptions
• Public booking link / slug (where enabled)
• Subscription / plan information related to your business account

3.4 Booking and appointment data

• Booking date and time, status, and notes
• Selected service, staff member, and business
• Client and business identifiers linked to the appointment
• Reschedule and cancellation history

3.5 Device location (optional)

With your permission, we may access your device’s approximate or precise location to show nearby businesses and improve search relevance. You can deny or revoke location permission in device settings; some nearby features may not work without it.

3.6 Contacts (optional — business users)

With your permission, business users may grant access to device contacts to help add clients from the address book. Contact data accessed for this purpose is used only for the action you initiate (for example creating or inviting a client). We do not sell your contacts.

3.7 Photos and media (optional)

With your permission, you may upload photos (for example business logo or cover image, or profile photo) from your device gallery/camera.

3.8 Push notifications and device identifiers

With your permission, we store push notification tokens (for example Expo push tokens) and related device information so we can send booking alerts, reminders, reschedule/cancellation notices, and similar service messages. You can disable notifications in device settings.

3.9 Subscriptions and payments

Paid business plans are processed by Apple App Store, Google Play, and/or RevenueCat. We may receive subscription status, entitlement, and transaction identifiers needed to unlock features. We do not receive or store your full payment card number; card payments are handled by Apple, Google, or their payment processors.

3.10 Support communications

If you contact us (for example by email), we process the content of your message and any account details you provide so we can help you.

3.11 Technical and usage data

We may process limited technical data such as app version, device type/OS, crash or error diagnostics, IP address, and approximate region, as needed to operate, secure, and improve the Service. We do not sell this data for advertising.

4. How we use personal data

We use personal data to:

1. Provide the Service — create accounts, display businesses, book and manage appointments, run calendars, waitlists, and business tools.
2. Communicate with you — send transactional emails/SMS where configured, and push notifications related to bookings and account activity.
3. Authenticate and secure accounts — sign-in, session management, fraud and abuse prevention.
4. Process subscriptions — verify entitlements and manage paid features.
5. Personalize discovery — for example nearby businesses when location is enabled.
6. Improve and maintain the app — troubleshooting, performance, and product development.
7. Comply with law — respond to lawful requests and enforce our terms.
8. Customer support — answer questions and resolve issues.

We do not use your personal data to sell it to third parties, and we do not use contact or location data for third-party advertising networks.

5. Legal bases (where applicable)

Depending on your location (including Albania, the EU/EEA, UK, and similar regimes), we process data on one or more of these bases:

• Contract — to provide the booking and account features you request.
• Consent — for optional permissions (location, contacts, photos, push notifications) and where otherwise required. You may withdraw consent in device settings or by contacting us.
• Legitimate interests — to secure, maintain, and improve the Service, in a way that does not override your rights.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

6. How we share data

We share personal data only as needed to run Randevu:

We require service providers to process data only on our instructions and with appropriate safeguards, where applicable.

We do not sell personal data.

7. International transfers

Our infrastructure and service providers may process data in countries other than where you live (including outside Albania or the EU/EEA). Where required by law, we use appropriate safeguards (such as standard contractual clauses or equivalent mechanisms used by our providers) for such transfers.

8. Data retention

We keep personal data only as long as needed for the purposes above:

• Account data — while your account is active, and for a reasonable period afterward if needed for disputes, backups, or legal obligations.
• Bookings — for the life of the related accounts and as needed for business records and conflict handling.
• Push tokens — until you uninstall the app, disable notifications, or tokens expire/are replaced.
• Support emails — as long as needed to resolve your request and for ordinary business records.

You may request deletion of your account (see Section 10). Some information may remain in encrypted or anonymized backups for a limited time.

9. Security

We use industry-standard measures appropriate to the nature of the data, including encrypted transit (HTTPS), access controls, and database security policies (including row-level security where applicable). No method of transmission or storage is 100% secure; we work to protect your information but cannot guarantee absolute security.

10. Your rights

Subject to applicable law (including Albanian personal data protection rules and, where they apply, GDPR-style rights), you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”), subject to legal exceptions
• Restrict or object to certain processing
• Data portability, where applicable
• Withdraw consent at any time for processing based on consent (without affecting prior lawful processing)
• Lodge a complaint with a competent supervisory authority

To exercise these rights, email support@randevu.podu.al. We may need to verify your identity before fulfilling a request.

Account deletion

You can delete your account in the app (Profile or Settings → Help & Support → Delete account), or by contacting support@randevu.podu.al. We will delete or anonymize personal data associated with your account within a reasonable period, except where we must retain certain records (for example completed bookings needed for legal or abuse-prevention reasons).

11. Children’s privacy

Randevu is not directed at children under 16 (or a higher age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Permissions summary (mobile stores)

You can change most permissions in your device settings.

13. Third-party links and services

The app may link to third-party websites or services (maps, store subscription pages, etc.). Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. If changes are material, we may provide additional notice in the app or by email where appropriate. Continued use of Randevu after an update means you accept the revised Policy.

15. Contact us

For privacy questions, requests, or complaints:

Email: support@randevu.podu.al
Website: https://randevu.uk

If you are in the EU/EEA and we appoint an EU representative, we will update this section with their contact details.

16. Governing law

This Policy is governed by the laws of Albania, without prejudice to mandatory consumer or data-protection rights that may apply in your country of residence.