1. Introduction
This Privacy Policy explains how Fairytale Applications (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use the BookThing mobile application and related services (collectively, the “Service”).
BookThing is a multi-sector appointment booking platform that lets service businesses manage their profiles, services, schedules, and appointments, and lets users discover businesses and request appointments.
By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.
Email: bookthing@fairytaleapplications.com
2. Information We Collect
2.1 Information you provide
Account information
- Email address
- Display name
- Password (stored and processed by Firebase Authentication; we do not store your plain-text password)
- Optional phone number
- Profile photo URL (for example, when you sign in with Google)
Business profile information (if you create or manage a business)
- Business name, description, contact details (phone, email)
- Address, city, district, country
- Business location coordinates (latitude/longitude)
- Profile and cover images
- Services, prices (display text), duration, and availability settings
- Working hours and blocked time periods
- Schedule and currency display preferences
Appointment information
- Selected services, date and time
- Optional appointment note
- Phone number provided at booking (if entered)
- Appointment status and related metadata (for example, cancellation or rejection reasons when applicable)
Support and communications
- Information you send us by email or other support channels
2.2 Information collected automatically
Device and usage information
- Basic technical data needed to operate the Service, such as device type, operating system, app version, and general diagnostic/error information generated by our backend providers
Authentication identifiers
- Firebase user ID and authentication tokens required to keep you signed in and secure your account
We do not currently use third-party advertising SDKs or in-app analytics SDKs in the BookThing app.
2.3 Information from device permissions
We request certain permissions only when needed for specific features:
| Permission | Purpose |
|---|---|
| Location (while using the app) | To show nearby businesses and sort discovery results by distance; business owners may also use location to set a business address on a map |
| Camera | To take photos for business profile or cover images |
| Photo library | To choose existing photos for business profile or cover images |
| Internet | Required for account access, syncing data, and booking |
Location access is optional for customers. If you deny location permission, you can still browse businesses, but distance-based sorting may be unavailable.
We do not collect location in the background.
2.4 Information from third-party sign-in
If you sign in with Google, we receive information made available by Google and Firebase Authentication, such as your name, email address, profile photo URL, and a verified-email status. Google’s handling of your data is governed by Google’s Privacy Policy.
3. How We Use Information
We use information to:
- Create and manage your account
- Authenticate you and maintain session security
- Let business owners create and manage company profiles, services, and schedules
- Let customers discover businesses and request appointments
- Validate appointment requests through secure server-side logic
- Display business information to signed-in users (for published businesses)
- Open external map apps for directions (via standard map links)
- Reverse-geocode coordinates into address fields when setting a business location (best-effort)
- Send account-related emails such as email verification and password reset (via Firebase Authentication)
- Enforce our Terms, prevent abuse, and comply with legal obligations
- Improve reliability, security, and functionality of the Service
We do not sell your personal information.
We do not use your data for third-party advertising.
4. How We Share Information
We share information only as described below:
4.1 With other users of the Service
If you are a business owner and you publish your business profile, certain business information (such as name, description, contact details, address/location, services, hours, and images) becomes visible to signed-in BookThing users.
If you are a customer and you request an appointment, the relevant business owner can see appointment details needed to manage the booking (such as your name, phone number if provided, selected services, time, and notes).
4.2 With service providers
We use Google Firebase and related Google Cloud infrastructure to operate the Service, including:
- Firebase Authentication — account sign-in and identity management
- Cloud Firestore — database storage
- Firebase Storage — image storage for business profile/cover photos
- Cloud Functions — secure server-side appointment validation and creation
These providers process data on our behalf under their terms and privacy policies:
Our Cloud Functions are deployed in the Europe (europe-west1) region. Firebase/Google Cloud may process and store data in data centers operated by Google according to your project configuration.
4.3 With external apps you choose to open
If you tap directions or map links, your device may open an external maps application (such as Google Maps or Apple Maps). That app’s privacy practices apply separately.
4.4 Legal and safety reasons
We may disclose information if we believe it is reasonably necessary to:
- comply with law, regulation, legal process, or governmental request
- enforce our Terms
- protect the rights, property, or safety of us, our users, or others
- detect, prevent, or address fraud, security, or technical issues
4.5 Business transfers
If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to this Privacy Policy.
5. Data Retention
We retain information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and comply with legal obligations.
Examples:
- Account profile data is kept while your account exists
- Business and appointment records may be retained to support booking history, dispute handling, and operational integrity
- Images uploaded to Firebase Storage remain until deleted by the business owner or account deletion process
When you request account deletion, we will delete or anonymize personal information within a reasonable period, except where retention is required by law or for legitimate business purposes (for example, fraud prevention or unresolved disputes).
6. Your Rights and Choices
Depending on your location, you may have rights to:
- Access personal information we hold about you
- Correct inaccurate information
- Delete your account and associated personal information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent (for example, location permission via device settings)
- Data portability, where applicable
- Lodge a complaint with a supervisory authority
How to exercise your rights
Account settings: You can update certain profile information in the app.
Location, camera, and photos: You can change permissions anytime in your device settings.
Account deletion: You may request deletion of your account and associated personal data by emailing bookthing@fairytaleapplications.com. We may ask you to verify your identity before processing the request.
Marketing: We do not currently send promotional push notifications. If we introduce them in the future, we will provide appropriate controls and update this policy.
7. International Data Transfers
BookThing is operated from [Country] and may be used globally. Your information may be processed in countries other than your own, including countries where our service providers maintain facilities. Where required, we rely on appropriate safeguards for cross-border transfers.
8. Security
We use administrative, technical, and organizational measures designed to protect information, including Firebase Authentication, Firestore security rules, server-side validation for appointment creation, and access controls for stored files.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
9. Children’s Privacy
The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at bookthing@fairytaleapplications.com and we will take appropriate steps to delete it.
10. Third-Party Links and Services
The Service may link to third-party websites or apps (such as map applications). We are not responsible for their privacy practices. Please review their policies separately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date. Material changes may also be communicated in the app or by other reasonable means. Continued use after changes become effective means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights:
Email: bookthing@fairytaleapplications.com
Cayli mh Ortaca / Mugla