Privacy policy

Pencily is a booking notebook for a service provider (hairdresser, beautician, workshop, food stand) with a page where clients book by themselves. The service is run by Wojciech Gałuszewski, Poland. Contact: support@pencily.app.

The provider's data — Pencily is the controller

E-mail address and password hash (when the account has an e-mail), business name, name, phone, address, description, logo and page pictures, settings, plan, and the phone's notification ID (a Google Firebase Cloud Messaging token). An account without an e-mail is created on "Start" and is recognised by a random key stored on the phone. We use this data only to run the service: sign-in, the page, notifications and e-mails with codes.

The provider's clients' data — the provider is the controller

The client's name and phone number, the time, service, amount, notes, a photo attached to an entry, and messages from the chat window on the page. The provider enters them, or the client does when booking. Pencily processes them on the provider's behalf under the data processing agreement (GDPR art. 28) in the terms. Clients contact the provider about their data. A client can also cancel a visit with the link from the text message.

The phone

The camera is used only when the provider takes a photo for an entry or for their page (news, logo, background). Contacts: the app opens the system picker for one person and takes only that person's number and name. It does not read the address book.

Payments

Online bookings are paid for in the panel at pencily.app through Stripe (card, BLIK, Przelewy24), charged in Polish złoty (PLN). Stripe receives the e-mail address and payment details; Pencily never sees the card or account number — we store only the payment ID, the amount and the paid period.

Contact in the app

Messages sent through “Contact” in the app (a question, feedback, a bug report) go to the operator together with the account ID and are kept with the account so that the reply is visible in the app. If the app has not been opened for a longer time, we may send one notification asking for feedback.

Who receives data

OVHcloud: servers and backups in the EU. Google Firebase Cloud Messaging: notifications to the provider's phone, e.g. the client's name or number, the time, the start of a message. Google's servers may be outside the EU. Resend: e-mails with codes and about the account to the provider, without their clients' data. Stripe: payments for online bookings (the provider's e-mail and payment details). We do not sell data, show ads or use tracking or analytics tools.

Security and retention

Connections are encrypted (HTTPS). The database is stored in the EU on an encrypted disk, photos on a server in the EU. We keep data while the account exists. An account without an e-mail that is not used for 12 months is deleted with its data. Backups are made daily and the last 3 are kept, so deleted data disappears from them within a few days. Server logs (IP address, time and the request address, which can contain a client's phone number) are used for security and fixing errors and are deleted after 14 days.

Deleting the account and your rights

You delete the account with all its data in the app: Settings → "Delete account". The data is gone at once. Details: pencily.app/delete-account. You can download a copy of your clients, entries, days and conversations in the app (Settings → Your plan → "Export everything"). You have the right to access, correct, delete and move your data and to object. You can also complain to your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).