Privacy Policy

We collect information you provide when creating an account (name, email, password), setting up your profile (business name, niche, bio, location, availability, social links), receiving bookings (client names, emails, phone numbers, appointment details, reference photos), and uploading portfolio photos. We also automatically collect usage data such as login times, features used, device type, and browser type through our service providers.

We use your information to provide, operate, and improve the Daybooked service; send email confirmations, reminders, and notifications related to your bookings; process payments through Stripe; send push notifications to your device; communicate with you about your account or our service; and comply with legal obligations. We do not sell your personal information to third parties. We do not use your information for advertising purposes.

When clients submit booking requests through your public profile, their information (name, email, phone, booking details, and photos) is stored and associated with your account. As a trainer using Daybooked, you are an independent data controller with respect to your clients' data. You are solely responsible for handling client data in compliance with all applicable privacy laws.

Photos you and your clients upload are stored securely using Supabase Storage with access controls. Portfolio photos on your public booking page are accessible to anyone with your booking link. Booking reference photos and client chat photos are only accessible to you as the trainer. We do not use uploaded photos for any purpose other than providing the service.

Daybooked and our third-party service providers use cookies and similar tracking technologies to maintain your login session and provide the service. Stripe may set cookies for fraud prevention and payment processing purposes. Supabase uses cookies for authentication. You can control cookies through your browser settings, though disabling cookies may affect the functionality of the service.

Daybooked uses the following third-party services, each with their own privacy policy: Supabase (supabase.com/privacy) for database and authentication; Stripe (stripe.com/privacy) for payment processing; Resend (resend.com/privacy) for email delivery; and Twilio (twilio.com/legal/privacy) for SMS communications.

We retain your account data for as long as your account is active. Upon account deletion, we will delete your personal data within 30 days, except where retention is required for legal, tax, or financial compliance purposes. Client booking records may be retained for up to 7 years for financial compliance.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure password hashing via Supabase Auth, and restricted database access controls. However, no method of transmission over the internet is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Depending on your location, you may have the right to access, correct, or delete your personal data; request a copy of your data in a portable format; object to or restrict certain processing of your data; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at daybooked@gmail.com. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, use, and share; the right to delete your personal information; the right to opt out of the sale of your personal information (note: we do not sell personal information); and the right to non-discrimination for exercising your rights. To submit a California privacy request, contact us at daybooked@gmail.com.

Daybooked is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at daybooked@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at daybooked@gmail.com