Last updated: September 2026
We collect your name, email address, and password when you create an account. Your password is never stored in a form we could read or recover: it is salted and hashed with bcrypt, and we only ever verify a sign-in attempt against that hash. We also store the event types, availability, intake questions, and bookings you create.
When clients book through your links, we store their name, email, and the answers they provide to your intake questions. This data belongs to you, and it is only used to power your booking dashboard.
Your data is used to operate the service: to authenticate you, to show you bookings and responses, to send you messages about your account and your bookings, and to confirm payments on your account.
Our lawful basis is performance of our contract with you for the service itself, and our legitimate interests in operating and securing the service for the messages we send to practitioners. Where a client of yours gives us sensitive information, the lawful basis for that processing is set by you, as the controller of that information, and is not ours to determine.
We use a small number of third-party providers, each acting as a processor on our instructions:
Your data may therefore be processed outside Nigeria. If you require your data to remain in a particular jurisdiction, contact us before you rely on the service.
You can delete your account at any time from Settings, which removes your event types, bookings, and responses.
Payment records are retained separately after deletion for the period required to meet our accounting and statutory record-keeping obligations. These records are not linked back to your account and are not used for any marketing purpose. Beyond that statutory period they are deleted.
Passwords are hashed and never stored in plain text. Sessions use secure, http-only cookies. Data is transmitted over TLS in transit. Database access is restricted to the services that need it.
No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as required by applicable law.
Under the Nigeria Data Protection Act you have rights of access, correction, and deletion of your personal data. You can exercise these for most data through Settings, or contact us and we will respond within a reasonable period.
For privacy questions, contact cuwawah@gmail.com.