Privacy Policy

This Privacy Policy explains how Aptri collects, uses, shares and protects your personal data when you use our booking platform, website and mobile apps. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Polish data-protection law.

Data controller

The data controller is MAD Solutions Daniel Mądrala, a sole proprietorship registered in the Polish Central Register and Information on Economic Activity (CEIDG), with its registered address at ul. Zaciszna 17, 32-540 Trzebinia, Poland (NIP 6282288824, REGON 523339937). For any privacy matter you can contact us at privacy@aptri.io.

Data we collect

Account data you provide: name, email address, phone number, password (stored hashed), profile photo, and language and timezone preferences. Booking data: the services you book, appointment times, prices, notes and questionnaire answers. Communications: messages you send us and your newsletter preferences. Technical data: device and browser information and the cookies described in our Cookie Policy. We do not intentionally collect special-category data; please do not enter health details into free-text fields.

Legal bases for processing

We rely on: performance of a contract (to create your account and manage your bookings); your consent (analytics cookies and marketing emails, which you can withdraw at any time); our legitimate interests (to keep the platform secure and to improve it); and compliance with legal obligations (such as tax and accounting record-keeping).

How we use your data

To create and manage your account, process and confirm bookings, send transactional notifications and reminders, provide customer support, keep the service secure, comply with legal obligations, and — only where you have consented — measure usage with analytics and send you marketing emails.

Who we share data with

We share data with the beauty and wellness providers you book with, so they can deliver the service, and with service providers acting on our behalf: Stripe (payment processing), Microsoft Azure (secure cloud hosting and file storage), our email and notification providers, and — only with your consent — Google (Google Analytics). We do not sell your personal data.

International data transfers

Your data is primarily stored within the European Union. Where a provider such as Google processes data in the United States, the transfer is covered by the EU–US Data Privacy Framework (to which Google LLC is certified) and, where applicable, by the European Commission's Standard Contractual Clauses.

How long we keep your data

We keep your account data for as long as your account is active. When you delete your account we anonymise your personal data, but booking and payment records are retained in de-identified form for as long as required by tax and accounting law. Analytics data is retained for a maximum of 2 months.

Your rights

You have the right to access your data, correct it, erase it, restrict or object to its processing, and to receive it in a portable format. You can update your details, download a copy of your data, and delete your account directly from your profile settings. To exercise any other right, contact us at privacy@aptri.io; we respond within one month.

Cookies

We use strictly necessary cookies to run the service and, only with your consent, analytics cookies. You can review and change your choices at any time. See our:

Cookie Policy

Complaints

If you believe we have mishandled your personal data you have the right to lodge a complaint with the Polish supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Contact

For privacy-related questions or to exercise your rights, contact us at privacy@aptri.io or via our Contact page.

Contact