Privacy Policy
Last updated: 2026-10-09
Wapee is an appointment booking service for salons, clinics, barbers and similar businesses. This page explains what personal data we handle and why. "We" means Wapee. A "business" is a customer of Wapee that uses it to take bookings. A "client" is a person who books with a business.
1. Who is responsible
For the data of a business's clients (names, phones, emails, appointments, notes, files), the business decides what is collected and why, and Wapee processes it on the business's behalf. For account data of people who sign up to use Wapee, and for our own service operation, Wapee is responsible.
2. What we collect
- Account data: name, email address, password (stored only as a salted hash), language, sign-in activity.
- Client data entered by a business or by the client when booking: name, phone number, email address, notes, preferences.
- Appointment data: services, staff, times, status, cancellations, reviews and ratings.
- Photos and files: files a business uploads for a client, and images used for its website.
- Signatures and forms: answers to consent and intake forms and the drawn signature, with the time of signing.
- Billing records: invoices and payments the business records, including amounts and tax numbers.
- Technical data: push notification tokens, basic logs, and the minimum needed to keep the service secure and prevent abuse.
3. Why we use it
- To provide the service: bookings, reminders, confirmations, invoices, the client portal.
- To send messages about a booking (confirmation, change, reminder, review request). Optional messages can be unsubscribed from with one click.
- To secure the service, prevent abuse and fix problems.
- To meet legal obligations.
We do not sell personal data and we do not use it for advertising.
4. Who processes it for us
| Processor | What for |
|---|---|
| Supabase | Database, sign-in, file storage and server functions. |
| Resend | Sending email (confirmations, reminders, sign-in and reset emails). |
| Expo | Delivering push notifications to the mobile app. |
| Cloudflare | Hosting and delivering the website and app. |
Data may be processed in countries other than yours. We will list the exact hosting region here once it is final.
5. How long we keep it
- Account and business data is kept while the account is active.
- When a business or an account is deleted, the data is removed as described below. Financial records that a business must keep by law are the business's responsibility to export first.
- Booking links and sign-in links expire automatically.
- Backups are overwritten on a regular cycle. (Final period to be confirmed.)
6. Your rights
Depending on where you live you can ask to see, correct, export or erase your data, to object to or limit its use, and to complain to your data protection authority.
- Export and erase a client's data: the business that holds it can do this from Settings. A client can ask the business, or write to us and we will pass the request on.
- Delete your account: in the app go to Settings, Account, Delete my account, or read how to delete your account.
- Stop optional emails: use the unsubscribe link in any such email.
7. Security
Data is encrypted in transit. Access is limited by role and by business, so one business cannot see another's data. Private files are shared only through short-lived links.
8. Children
Wapee is for businesses and is not directed at children.
9. Changes
We will post changes on this page and update the date above.
10. Contact
Questions or requests: support@wapee.online.