This policy explains what Slotty does with personal data, in plain terms. Slotty is operated by [OPERATOR — registered name and form, to be supplied]. You can reach us at [CONTACT EMAIL — to be supplied].

Slotty is a booking app for one person running their own practice — a trainer, a therapist, a tutor. That means two different relationships to personal data, and they are governed differently.

If you run a business in Slotty, we hold your account data and you are our customer. We decide, with you, how that data is handled.

If you are that business's client, the details about you — your name, your phone number, the notes taken about your sessions — were entered by the business, not by us. The business decides what to record and why; we store and process it on their instructions. Requests about that data are answered by the business first. We will help, and we will pass a request on if you send it to us, but we cannot delete or change a business's records on your behalf without them.

Account data: the email address you sign in with, and a display name if you give one. If you sign in with Google or Apple, we receive the email address and name that service releases to us, and nothing else — no access to your other data there.

Business data: your services, prices, working hours, time off, and the bookings, passes and payments you record.

Client data, entered by a business: a client's display name, and optionally a phone number, an email address, and free-text notes on the person or on a session. What goes in those notes is chosen entirely by the business — see section 1, and see the Terms.

Voice: when you use voice booking, the audio you record is sent for transcription, and the resulting text is sent to a language model to be turned into a booking. Section 4 says where.

Payment data: card details are entered on the payment processor's own page, not in Slotty — Apple or Google if you subscribed in the app, our own payment processor if you subscribed on the web. We never see or store a card number. For a web subscription we keep a record of each payment — the fact of it, its amount, its date and its status; for one bought in the App Store or on Google Play, we keep the subscription's current state and the store's latest event about it, not a history of every charge.

Technical data: the minimum needed to run the service — authentication tokens, error diagnostics, and counts of how many voice commands an account has used against its plan limit.

To run the product you signed up for: keeping your schedule, showing your clients their bookings, sending the reminders you configure, counting a pass down, and taking your subscription payment. To keep the service working and secure. To answer you when you write to us.

We do not sell personal data. We do not use it for advertising. We do not build profiles for anyone else.

Supabase hosts the database, the authentication and the server functions. All of your data lives there.

Soniox transcribes voice recordings. Audio you record for a voice command is sent to them and comes back as text.

Anthropic, or OpenAI depending on configuration, turns that text into a structured booking. What is sent is the transcript of what you said, plus the list of your own service names and client names needed to resolve it — not your whole database.

Whichever processor took a subscription payment — Apple or Google in the app, our own payment processor on the web — handles the card details directly.

Google and Apple, if you choose to sign in with them.

Each of these companies handles the data it receives under its own privacy terms, and we link to them from this page rather than restating them, because restating them is how a policy goes out of date.

Voice booking is optional. If you never use it, no audio ever leaves your device, because none is recorded.

If you do use it, be aware that what you say is transcribed by one third party and interpreted by another. Say what the booking needs and no more: a voice command is not the place for a client's medical history or anything else you would not want processed outside Slotty.

A language model can misread a name or a time. Slotty shows you what it understood before anything is saved, and the result is yours to correct. We keep a count of commands used for plan limits.

Our database is hosted by Supabase, and the processors named in section 4 operate internationally, so your data may be processed outside the country you are in. Where that transfer needs a legal basis, it rests on the contracts we hold with those processors.

Your account data and your business data are kept while your account exists. Payment records are kept for as long as accounting and tax rules require, which is longer than the account itself.

You can delete your account from inside the app. It removes your profile, your business, your services and hours, and the bookings and client records your business held.

Two things deliberately survive, and you should know about them before you delete.

First: if another business has you on their books as a client, their card about you stays with them. The link to your account is severed and their access to your profile ends, but the name, phone, email and notes they themselves wrote are their record of their own business, not a copy of your profile. Ask that business if you want it removed.

Second: if you were a business, the clients you served lose their history with you, and any unused part of a paid subscription is not refunded. The app says both in words on the confirmation screen.

You can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to [CONTACT EMAIL — to be supplied] and we will answer.

If your request concerns data a business entered about you as their client, section 1 applies: we will forward it, but the business decides.

If you are not satisfied with our answer, you can complain to the data protection authority in [JURISDICTION — to be supplied], or in the country where you live.

Slotty sets no advertising cookies and runs no third-party analytics or trackers. That is why this site has no cookie banner: there is nothing to ask you to consent to.

The app stores your sign-in session on your own device — in the browser's local storage on the web, in the system keychain on a phone — along with your language and theme choices. That is what keeps you signed in. It is not sent anywhere and we cannot read it.

Access to data is enforced in the database itself, row by row, rather than only in the app: a request that is not entitled to a row does not receive it even if the app asks wrongly. Traffic is encrypted in transit. Card details never reach our servers.

No service can promise it will never be breached. If a breach affects your data, we will tell you and the relevant authority as the law requires.

Slotty is for adults running or attending a professional practice. We do not knowingly create accounts for children. If a business records a client who is a minor, that is the business's responsibility and the Terms address it.

If we change how we handle data, we will change this page and update the date at the top. If a change is significant, we will tell you in the app rather than relying on you to re-read this.

[OPERATOR — registered name and form, to be supplied]. Questions and privacy requests: [CONTACT EMAIL — to be supplied].