Privacy Policy

1. Data controller

The data controller for personal data processing is:

• Legal entity: SIA Callido
• Registration number: 40203600833
• Country: Latvia
• Email: support@pieraksts.app
• Phone (support and marketing): +371 28338094
• Phone (technical support): +371 27303530

2. What data we process

Based on the current implementation, the following data categories are processed.

2.1 Account and profile data

• authentication data in Supabase Auth (for example, email and account identifier);
• profile fields: first name, last name, phone number, display name, roles, and onboarding status.

2.2 Booking data

• salon, service, and staff identifiers;
• client name, client phone (if provided), booking notes;
• booking date, time, status, and source;
• booking event history (created, updated, cancelled, no-show, completed).

2.3 Salon profile data

• salon name and location data (address, city, street, coordinates);
• public profile fields: description, contact phone, website, category tags;
• salon, staff, and gallery photos.

2.4 Technical and notification data

• push notification device tokens (Expo push token), platform, active status;
• notification delivery technical records (attempts and error statuses);
• system logs for security and service reliability.

2.5 Payment data

Client online payments are currently not enabled. In a future phase, invoice-based charging may be introduced for business fees.

2.6 Website waitlist and marketing contacts

When you join the waitlist on our website, we process:

• your email address;
• your role interest (client, salon owner, or both);
• your preferred language;
• whether you opted in to receive marketing emails;
• a record of the consent text version you agreed to and the time of signup;
• an unsubscribe token used to manage your email preferences.

3. Data sources

We obtain personal data:

• directly from you (for example, registration, profile input, bookings, and joining the waitlist on our website);
• from app usage events (technical events and logs);
• from salon owners when they create or edit client bookings.

4. Processing purposes and legal basis

We process data to:

• provide core app functionality and booking execution (contract performance);
• provide communication, support, and notifications (contract performance, legitimate interests);
• notify you about the launch of Pieraksts in Riga and the updates you asked for when joining the waitlist (consent);
• where you have opted in, send occasional product news and offers (consent), which you can withdraw at any time;
• maintain security, prevent abuse, and handle dispute scenarios (legitimate interests);
• comply with legal obligations, where applicable (legal obligation).

5. Data retention

5.1 Current practice (factual state)

The current implementation does not define a single automatic retention period across all data categories. Data is kept while the account and related records remain in the system, or until deleted on a valid legal basis or request.

5.2 Technical deletion by relationships

Some records are deleted automatically via relational constraints (for example, deleting a user or salon may cascade to related records).

5.3 Planned approach

We may introduce explicit retention windows by data category in a future update and inform users accordingly.

5.4 Waitlist contacts

Waitlist contact data is kept until the launch communication is completed and you have had a reasonable opportunity to use the service, or until you unsubscribe or withdraw your consent — whichever is earlier.

6. Data sharing

We may share data with processors that provide technical infrastructure:

• Supabase (database, authentication, storage, and backend functions);
• push notification infrastructure (Expo push processing);
• email delivery services (transactional, waitlist, and support communication).

We do not sell personal data to third parties for marketing purposes.

7. International transfers

If processors use infrastructure outside Latvia or the EU/EEA, we apply an appropriate legal basis for such transfers as required by applicable law.

8. Your rights

You have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• withdraw consent at any time (for example, via the unsubscribe link in our emails or by contacting us), without affecting the lawfulness of processing before withdrawal;
• request data portability, where applicable;
• lodge a complaint with the supervisory authority (in Latvia, the Data State Inspectorate / Datu valsts inspekcija).

9. Data security

We use reasonable technical and organizational safeguards, including access control, authorization, and row-level security policies in the database, to protect personal data against unauthorized access, loss, or unlawful alteration.

10. Minors

The service is intended for users aged 13 and above. If a user is under 18, parental or guardian supervision and consent is recommended.

11. Privacy contact

For privacy questions or data subject requests:

• Email: support@pieraksts.app
• Phone: +371 28338094
• Technical support: +371 27303530

12. Policy updates

We may update this Privacy Policy from time to time to reflect legal, technical, or service changes. The latest version is made available through official pieraksts.app channels.