Privacy Policy

Last updated October 28, 2026

This explains what Rebookly ("we") keeps about you and your clients, why, who helps us run it, and how to delete it. The short version: your client list is yours, we use it only to run Rebookly for you, we never sell it, and we never contact your clients.

What we keep

Your account: your email, your studio name, and whether you're on a trial or subscribed.
Your studio details: what you enter under Your business (name, tagline, city, phone, Instagram, booking link, logo, colors, services and prices). These are public: they appear on your client page.
Your client records: clients' names, phone numbers, notes, allergies, visits, photos, and your income and expenses. They're kept on your phone and backed up to your account so you can restore them on a new phone.
Reminders: for each client, an internal ID, when they're due back and their last service, so we can send you a morning notification.
Sign-in: scrambled (hashed) one-time codes and one scrambled token per signed-in phone.
Notifications: the address your phone gives us for sending you notifications.
Support emails: emails you send to support@getrebookly.com and our replies.

We don't see or keep your card number; Stripe handles it.

How we use it

Only to run Rebookly for you: to show and back up your records, send your reminders, show your client page, sign you in, bill you, answer your support emails, and keep the service secure. We don't sell your information or your clients' information, we don't use it for advertising, and we never message your clients. Texts to clients are sent by you, from your own phone.

Who helps us run Rebookly

Cloudflare hosts the app and our server, stores your backups and photos, and receives support email.
Stripe (and its affiliate Link) processes payments, invoices and sales tax.
Resend sends our emails, such as sign-in codes and support replies.
Anthropic provides the AI assistant (Claude) that reads and answers support emails. It sees your email, the conversation, and basic facts about your account, such as your plan.
Apple and Google deliver notifications to your phone.

Each only gets what it needs to do its part.

Your clients' information

You decide what you keep about your clients, and you're responsible for having their permission. We store it on your behalf and use it only to provide Rebookly to you. If a client asks you to remove their details, delete them in the app. They leave your current backup with the next backup, and the daily backup copies we keep roll off after 30 days (or right away, if you delete your account).

How long we keep it

As long as you have an account. We keep your latest backup plus one copy a day for the last 30 days, so a bad day can be undone.
When you delete your account (Settings, Your account, Delete my account), we erase your account, backups, photos, reminders, sign-ins and support emails right away, and your phone is cleared. Stripe keeps payment and tax records for as long as the law requires.
Short notes about account activity (such as "a salon signed up") are kept for up to 90 days.

Security

Everything travels over encrypted connections. Sign-in codes and phone tokens are stored scrambled, and each salon's backup can only be reached by its own signed-in phones.

Children

Rebookly is for businesses and isn't meant for anyone under 18.

Changes and contact

If we change this policy in a way that matters, we'll post it here and email you. Questions or requests: support@getrebookly.com.