Privacy Policy
This Privacy Policy explains how Klioso ("App", "Service") collects, uses, shares, and protects personal data when you use our mobile app, PWA, websites, booking pages, and notification features.
1. Controller
Klioso — operated by Individual Entrepreneur Hosporian Alina in Ukraine.
Location: Mykolaiv, Ukraine
Contact: support@klioso.app
This Policy is governed by the laws of Ukraine, with mandatory application of the GDPR for users in the EEA and UK where applicable.
2. Scope
This Policy applies to: the Klioso iOS app, Klioso PWA / web app and websites, booking pages accessible via shared links, optional notification features (e.g., Telegram reminders), and optional calendar features (ICS).
3. Types of users
We process data related to Professionals (account holders) and Clients/visitors accessing booking pages via a professional's link.
4. Data you provide
Depending on use, you may provide: name (optional), email address, phone number, profile photo (optional), business name and service descriptions (optional), work address/location (optional), working hours, service prices, client notes and service history, in-app messages/content.
5. Data collected automatically
Depending on how you access Klioso, we may automatically collect limited technical and usage information, including:
- IP address;
- device type, browser type and operating system version;
- app version;
- time zone and system language;
- page, screen and feature interaction events;
- crash reports, error diagnostics and performance information.
We use Google Analytics on our websites to understand website traffic and usage. We use Microsoft Clarity in the Klioso application, where it may provide session replays and heatmaps that help us find usability problems.
We use PostHog in the Klioso application for product analytics, to understand how features are used and to improve the Service. PostHog session recording and automatic interaction capture are disabled. Authenticated users may be associated with an internal Klioso user ID for product analytics purposes.
We use Sentry in the Klioso application for error monitoring, crash diagnostics and performance monitoring. Sentry is configured not to automatically send default personally identifiable information. An internal Klioso user ID may be associated with diagnostic events where necessary to identify and resolve technical problems.
Identifiers: We may use device or application identifiers where necessary for app functionality, security, analytics and diagnostics. We do not use Apple IDFA for advertising tracking.
6. Booking pages
Professionals may share booking links. Clients may provide booking-related data (name, phone, email, appointment details) to schedule an appointment.
7. Authentication SMS (Firebase)
We may send SMS verification codes for sign-in via Google Firebase Authentication and its SMS delivery partners. By using verification features, you agree to the processing of your phone number by these providers.
8. Notifications & reminders
A) Telegram reminders (optional)
If a client opts in via @klioso_notify_bot, the bot sends appointment reminders (24h and 2h before). We process: Telegram user/chat ID, appointment date/time, time zone. Messages are delivered via Telegram under Telegram's policies.
B) Other messaging
Additional reminder channels (e.g., WhatsApp) may be offered. If enabled, necessary data (phone number, message content) will be shared with the selected provider solely for delivery.
9. Calendar features (ICS)
You can add appointments to your calendar via an ICS file. We do not access your calendar and do not sync events automatically after import.
10. Payments & subscriptions
A) Web/PWA (Creem)
Payments on our website/PWA are processed by Creem (Merchant of Record). By purchasing, you agree to Creem's Terms and Privacy Policy.
B) iOS (Apple In-App Purchase)
iOS subscriptions are processed by Apple Inc. under Apple's Media Services Terms. Managed via your Apple ID settings.
C) Android (Google Play Billing)
Android subscriptions are processed by Google via Google Play Billing under Google's terms. Managed via your Google account.
D) Payment security
We do not store full payment card details. All sensitive financial data is handled exclusively by Creem, Apple or Google.
11. Storage & processing (Firebase)
We use Google Firebase (Authentication and Firestore). Data may be stored/processed in the United States and/or Europe.
12. Data retention
We retain account and service data while your Klioso account is active.
When you delete your Klioso account, your account and operational personal data are deleted, including profile information, clients, appointments, services, settings and other data associated with your use of the Service. Deletion performed in the app takes effect immediately. If you request deletion by email, we process your request within 30 days.
We may retain limited payment and transaction records where required for accounting, tax, fraud prevention, dispute resolution or other legal obligations. Such records are retained only for as long as required by applicable law and are not used for marketing purposes.
Some technical logs and aggregated or anonymized analytics data may be retained for a limited period where they can no longer reasonably be associated with an identifiable user.
13. Sharing with service providers
We share personal data only with service providers where necessary to operate, secure, analyze and improve Klioso.
These providers may include:
- Google — Firebase services, authentication, cloud infrastructure, analytics and related platform services;
- Microsoft — Microsoft Clarity for usage analytics, session replays and heatmaps;
- PostHog — product and usage analytics;
- Sentry — error monitoring, crash diagnostics and performance monitoring;
- Apple — Sign in with Apple, iOS platform services and App Store subscriptions;
- Google — Google Sign-In, Android platform services and Google Play Billing;
- Creem — Web/PWA payment processing;
- Telegram — optional notification and reminder features;
- SMS delivery providers — verification and notification delivery;
- email and push notification providers — transactional communications and notifications.
These providers process data according to their respective privacy policies and our arrangements with them, where applicable.
We do not sell personal data.
14. Communications
We may send push notifications, transactional emails, optional marketing emails, verification SMS, and Telegram bot messages (if opted in).
15. Cookies, analytics & web tracking
Our websites and web services may use cookies, local storage and similar technologies required for authentication, security, preferences, analytics and service functionality.
We use Google Analytics on our websites to understand traffic and usage.
We use Microsoft Clarity in the Klioso application to understand how it is used. Clarity may provide analytics such as session replays, interaction data and heatmaps to help us identify usability issues and improve the Service.
We use PostHog in the Klioso application for product analytics. Session recording and automatic interaction capture are disabled.
We use Sentry in the Klioso application for technical diagnostics, application stability, error monitoring and performance analysis.
We do not use these services to sell personal data. We do not use Apple IDFA for advertising tracking.
Where required by applicable law, analytics and other non-essential tracking technologies are used subject to applicable consent requirements. You can also manage cookies and similar technologies through your browser or device settings.
16. Your rights (GDPR)
Where applicable, you may access, correct, delete, export your data, object to or restrict processing, and withdraw marketing consent. Contact support@klioso.app.
17. Children
Klioso is not intended for individuals under 18. We do not knowingly collect data from minors.
18. Security
We use SSL/TLS encryption in transit, encryption at rest, and access controls.
19. Changes
We may update this Policy. Material changes may be communicated via in-app notice or email.