Privacy policy

What we collect

Your e-mail address (you sign in with it), your name, your phone number if you give it, and your avatar if you upload one. Booking details: service, date, time, comment and status, and passes with their remaining sessions. If you book on the website without an account: your name, phone number and, optionally, e-mail.

For specialists, also their profile and booking page (name, description, address, phone number, photos), services, schedule and client list, with notes and the names the specialist gave clients for their own use.

Chat

The messages and photos you send in the chat, when they were sent and read receipts. Notes about bookings and passes appear in the conversation automatically. We also keep your reports (reason and comment) and blocks.

Only the people in a conversation can see it. A sent message cannot be edited or deleted. We strip embedded metadata, including where a photo was taken, from every photo. The server replaces crude swear words in message text with asterisks before saving it.

Notifications and devices

When you sign in, we remember the device: its name (for example, "iPhone"), when it was last used and, if you allow notifications, its push token, the address notifications are delivered to. Signing out removes the token.

We do not collect your location, contacts or advertising identifiers, and we do not track you across other apps or websites. The app has no ads and no third-party analytics. Server logs (IP address, time and address of a request) are needed to run and protect the service and are overwritten automatically.

Why we need it

So that you can book and the specialist can see their bookings, clients and passes. So that you can talk in the chat. So that we can send you a sign-in code, a confirmation, a reminder, a calendar invitation and push notifications. So that we can handle reports and protect people from abusive users. We use the data for nothing else.

Who can see it

Your name, phone number and bookings are visible to the specialist you booked with. The other person in a chat sees your messages, photos, name and avatar. A specialist's profile and booking page are open to anyone with the link.

3ka administrators see account details and bookings when needed for support and to protect the service. Administrators do not read conversations: they can see only a message someone reported, without the rest of the conversation. We do not sell data or use it for advertising.

Who helps us process it

E-mails (sign-in codes, booking confirmations and reminders) are sent through Yandex Cloud Postbox. Push notifications are delivered by Expo, the Apple Push Notification service (on iPhone) and Google Firebase Cloud Messaging (on Android): they receive the push token and the notification text, such as the sender's name and the beginning of a chat message. The app also receives updates through Expo. These services receive only what is needed to deliver a particular message.

The data is stored on servers we rent; connections to them are encrypted and access is restricted.

How long we keep it

Account data is kept while the account exists. Conversations are kept so that both people keep their history: individual messages cannot be deleted. A message a moderator removed after a report is hidden from both sides, and its text stays in the report log so the violation can be reviewed.

A sign-in code is valid for 10 minutes and a sign-in on a device for 90 days. Sign-in codes, device tokens and private booking links are stored only as hashes. Database backups are made every night and kept for 14 days, so deleted data disappears from them within 14 days.

How to delete it

You can delete your account in the app: Profile → Delete account. If you don’t have the app at hand, write to dt@3ka.ru from the address your account uses and we will delete it within 7 days. Your e-mail, name, phone number, avatar, devices and push tokens are deleted with it. If you are a specialist, so are your profile, photos, services, schedule, clients, passes and bookings with you. Bookings you made as a client stay with the specialists as their visit history, no longer linked to your account.

Your chat messages stay with the people you talked to, but they will see "Deleted user" instead of your name and avatar. If you reported someone or were reported, the participants' e-mail addresses stay in the report log, and records of blocks stay in the administrators' action log; this is needed to protect people from abusive users.

Changes

We may update this policy. The current version is always on this page, with its date at the top.

Contact

Send questions about your data and requests to see, correct or delete it to dt@3ka.ru.