Privacy Policy

1. What data we process

• Phone number — the main identifier. Sign-in is by a one-time code from an SMS; the service cannot be used without a confirmed number.
• Name and, optionally, email.
• Gender — only if you specify it yourself (woman or man). You can leave it unspecified; an empty value is not stored.
• Visit bookings: Venue, service, specialist, date, time, booking status, cancellations and no-shows.
• Address — only for mobile services, when the specialist comes to you; it is stored in the booking and disappears with it.
• The Venue’s notes about you in its client card — written by the Venue itself.
• Consultations with the EVE assistant: your description of the problem (for example, the condition of your skin or hair), photos if you add them, the recommended service and the summary of the consultation. This data is more sensitive than average, so it is visible ONLY to you — no Venue, including the recommended one, has access to it.
• Reviews and their photos — published by you and visible publicly.
• Payment data: the amount, status and time of the payment, and if you saved a card — the payment service token and the masked number. We do not receive or store the full card number or CVV.
• Technical data: device model, system version, language, IP address, error logs.
• Geolocation — only with your permission, to search for Venues nearby; you can withdraw the permission in your device settings.
• City in the list of active sessions: if you have already allowed geolocation for the map, the app determines the city on the device and sends to the server only the city name and the country code, without coordinates. If there is no permission, the city is taken from the IP address and shown with the label “approximately”.
• If the Venue has connected the voice receptionist — a text transcript of your conversation with the automatic assistant, which goes into the Venue’s work inbox.

2. Why and on what basis

• Performance of the contract: sign-in by phone number, creating and confirming bookings, visit reminders, accepting and refunding payments, passing the booking to the Venue.
• Your consent: photos in consultations and reviews, geolocation, marketing messages. Consent can be withdrawn at any time, and this does not affect the rest of the processing.
• The consent you have already given to geolocation for the map also allows us to show the city in your active sessions. We do not ask for a new permission for this. Coordinates are not sent to the server and are not stored.
• Your consent, voluntarily: you specify gender in your profile yourself and can remove it at any time (“Not specified”). We use it only to show it to you in your profile and in the copy of your data. It does not affect booking, price, search or recommendations.
• Legitimate interest: protection against abuse (limiting how often a code can be sent, detecting suspicious payments), improving the quality of the service, and automatic reply drafts for the Venue.
• Compliance with legal obligations: accounting and storage of payment documents for the periods set by law.

The one-time sign-in code is a service message necessary to provide the service, not advertising; no separate consent is required for it. Advertising mailings are sent only with separate prior consent, which you can withdraw free of charge.

3. Who we pass data to

We do not sell personal data. We do not pass contact details — phone number, email, name — to advertising platforms. Data is received only by those without whom the service does not work, and (separately below) by Meta — only technical identifiers of a visit:

• The Venue you booked with — name, phone number, the content and time of the booking, and for a mobile service also the address.
• Supabase (Supabase Inc.) — database, authentication and server functions; the data is hosted in the EU region (Frankfurt).
• LiqPay / JSC CB “PrivatBank” (Ukraine) — accepting payments, refunds, storing the card token.
• SMS operator — delivery of one-time codes and service messages about the visit. For Ukrainian numbers this is a Ukrainian aggregator, for others — Twilio (USA).
• Google (the Gemini service) — processing requests to the EVE assistant: text, photos and saved memory facts. On the paid plan this data is not used to train models, and logs are kept for a limited period to monitor abuse.
• OpenAI — only if the Venue has connected the voice receptionist: real-time speech processing and the conversation transcript.
• Telegram — only if you yourself have connected notifications in Telegram.
• Hosting of the public website — Cloudflare.
• Map tiles on a computer and in the browser are also served by Cloudflare (our storage). The IP address and the visible area of the map go with that request; there is no separate GPS in it.
• Meta Platforms, Inc. — technical identifiers of a visit (the Meta click cookie, IP address, User-Agent string, an anonymised visitor key). Contact details are not passed there. The recipient is Meta; this is measuring Bookera’s advertising, not selling your profile. Visitors from the EU, the EEA, the United Kingdom and Switzerland see a consent request before this code loads; for visitors from Ukraine no separate banner is shown.
• Public authorities — only on the basis of an official request in the manner established by law.

Only you see your gender. It is not passed to Venues, other clients, people search on Bookera or public pages.

Some of these processors are located outside Ukraine, so the data leaves its territory. The transfer takes place on the basis of contracts with the processors that contain standard contractual data protection clauses. If you are in the EU, these same clauses are the basis for the transfer under Chapter V of the GDPR.

4. Artificial intelligence

The EVE assistant is an artificial intelligence system, and we say so plainly on the screen, not in small print. Messages generated by AI (including the Venue’s automatic replies) are marked with a corresponding label.

• EVE’s advice, including about the condition of skin or hair, is for reference only and is not a medical consultation or diagnosis.
• You can view and delete EVE’s memory about you — entirely or entry by entry.
• Preferences in EVE’s memory — hair type and colour, nail coating and other style notes — are stored on the server together with your account, so that they are there on a new device too. This is not health data, there is no separate consent for it, and the venue does not see it. You can switch off saving preferences in your account in EVE’s memory — then they stay only on this device, and the copy on the server is erased. Health data in EVE’s memory (allergies, pregnancy, skin sensitivity) is stored separately and only if you yourself have consented to it; on the server it is kept in encrypted form, the key is stored separately from this data, and we can restore it for you on a new device. Withdrawing this consent or deleting the account erases the encrypted health data immediately. You can view and erase style preferences in EVE’s memory separately from health data.
• The Venue can switch off AI processing of its correspondence or lower the assistant’s autonomy level at any time.

We do not make decisions about you based solely on automated assessment of your person — including profiling — that have legal or similarly significant effects on you. Artificial intelligence in the service prepares texts and hints; it does not decide whether to accept you at a Venue and does not set a price for you individually.

What the Venue’s assistant is forbidden to do on its own is forbidden in the code itself, not just in the model’s instructions. Correspondence about discounts, compensation and refunds, individual terms, complaints and conflicts, and about health always waits for a human: the assistant will prepare a draft, but only a Venue employee can send it. The assistant can never cancel your booking.

By default the assistant only suggests a draft to the Venue, and every reply is sent by a human. The Venue can raise the autonomy level — then confident answers to simple questions are sent on their own after a short countdown that can be cancelled, and at the highest level the assistant can add to the calendar a booking you yourself agreed in the chat.

Separately from artificial intelligence, the service performs a few actions automatically — by a rule known in advance, without any assessment of your person: when the payment period ends, an unpaid booking is cancelled, and a payment that arrived after cancellation triggers a refund. This is not a decision about you but a safeguard against time in the schedule and money getting stuck; details are in the cancellation and refund rules.

5. How long we keep data

• Account data — while the account is active, and up to 30 days after it is deleted to complete technical operations.
• The Venue’s notes about a client — up to 180 days, examples of reply style — up to 365 days, EVE memory episodes — up to 180 days; you control your profile facts yourself.
• Service data about payments — for the periods set by law for accounting documents; technical logs of payment notifications — up to 90 days.
• Unresolved financial discrepancies are kept until they are resolved: without this it is impossible to prove what happened to the money.

6. Your rights

• to find out what data about you we process and to get a copy of it;
• to correct inaccurate data;
• to delete your account together with the related data — with the button in the app or on the page /en/account/delete if you no longer have the app; after that, personal links are erased, and the mandatory payment accounting records remain without your name and phone number;
• to withdraw consent where processing is based on it;
• to object to processing based on legitimate interest;
• to lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, and if you are in the EU — with the supervisory authority of your country.

Send data requests to [email protected] or through the account deletion page (/en/account/delete). We reply within 30 days. For us to fulfil a request, it must come from the number or email linked to your account.

7. Security

Data is transmitted over a secure connection. Access to rows in the database is restricted at the level of the database itself: everyone sees only their own data, and a Venue — only the data of bookings with it. Payment tokens are stored separately and are not accessible to either the app or the Venue. The full card number does not exist in our systems.

No system is absolutely secure. If an incident occurs that poses a threat to your data, we will notify you and the competent authority within the periods set by law.

8. Children

The service is not intended for independent use by persons under 14. A booking for a child is created by their father, mother or other legal representative from their own account.

9. Changes and contacts

We give notice of material changes to this Policy no later than 14 calendar days before they take effect by publishing the new version on the website.

Name

ФОП Бранець Олег Русланович

РНОКПП

3794604294

Address

80300, м. Жовква, вул. Зелена, буд. 9в

Phone

+380932221103

Support email: [email protected]. Personal data requests: [email protected].