Privacy policy

What we do not keep

We do not keep your phone number, your email address or a password: an account has none. We do not ask for your location, your contacts, your date of birth or your gender. We never ask for official personal documents and do not accept them.

Your account

The name you give, the language of your app, the area you choose from our list, and your settings. When you sign in with Google we take only Google's number for your account and keep a scrambled form of it, which lets us recognise you and tells us nothing else; we do not read your email address or your Google name. For a passkey we keep its public half, which cannot sign anyone in by itself.

For each place you are signed in we keep when it was last used, whether it is an Android phone, an iPhone or a browser, and a scrambled mark of the app's installation. A sign-in ends by itself after 90 days without use. If you allow notifications, we keep your phone's notification address so that we can reach it.

What you do in the app

Your booking requests: the business, the service, the day and time, the note you write, how many people, and for a home visit the area only (you give the address yourself, in a message). Your reviews, the businesses you save or block, the reports you make, and the notices we have sent you.

Your messages with a business and the pictures in them. A thread closes a week after the visit and is deleted, with its pictures, 90 days after it. Our team cannot read your conversations. When one of you reports a thread, the team sees its last 20 messages as they stood, and that copy is kept with the report.

If you run a business

Your page: name, trade, description, area, opening hours, services, prices and photos. This is public, on the website and in search engines. The names of your team, your plan, and the records you keep in the app (walk-ins, tailors' orders and measurements, your day book), which only your business sees. A contact number, if you give one, is for our use only and is never shown to anyone.

Photos sent to become Verified are kept privately, seen only by our team, and deleted as soon as the decision is made. When you pay for a plan, the number that pays is passed to the payment partner and we keep only a masked form of it, with the amount and the date. We never see or keep a card.

Who sees what

A business you send a request to sees your name, your request and your note, how many visits you have had with it, and how many times you did not come to a booking anywhere. It is never given a phone number. Your review is public with your first name and the first letter of your last name. Our team sees your name, how you sign in, the state of your bookings, and reports about you; it does not see your notes or your conversations.

Counting without names

We count, by day, how often an area is searched, how often a business's page is opened, and how many requests are made and how they end. These are totals with no record of who. The website counts which kind of page was opened and whether the visitor came from a search or a shared link, using a random number that lasts for one browser tab. The website sets no cookies. To limit abuse we keep scrambled marks of an installation or an internet address for two or three days.

Who else handles your data

Teofil runs on Google Cloud, and its database is kept in Belgium. Google delivers our notifications to your phone, which means it handles the words of each notice; a notice about a message says only who it is from. If you sign in with Google, Google knows that you did. A payment partner handles plan payments. Like any web service, our host's logs record the internet address of each request. Nobody else receives your data, unless the law obliges us to give it.

How long we keep it

Notices are kept for 12 months. Conversations are deleted 90 days after the visit. Bookings, reviews, reports and plan payments are kept for as long as the account or the business they belong to, and as described below after that. Our backups are deleted after 90 days.

Deleting your account

You can delete your account in the app, under Account, or on this website. Your account, your sign-ins, your saved businesses, your notices and your conversations are removed at once, and your open bookings are cancelled. Your past bookings stay with the business without your name or your note, and your reviews stay without your name. Reports that were made stay, with the messages attached to them. A business's own records of you, such as a tailor's measurements, stay with that business until it removes them. Copies in our backups go within 90 days.

When a business is closed, its page, photos, reviews, tailors' orders, day book and conversations are removed, and so are the walk-ins it wrote down, with their names and numbers. Past bookings made in the app are kept, so its customers still have theirs, and so are records of plan payments.

Your choices and rights

You can change your name and settings, turn notifications off, see and end the places you are signed in, and delete your account, all in the app. You may ask us for a copy of what we keep about you, to correct it, or to stop using it, by writing to hello@teofil.app. You may also complain to the data protection authority of your country.

Children

Teofil is for adults. We do not knowingly keep an account for anyone under 18. An adult may book for a child in their care; the business sees only the booking.

Changes

If we change this policy we say so in the app before the change applies.