Privacy policy

Appointment Cat is a booking service for small appointment-based businesses. Booking information is personal information, and we treat it that way. This page says what we collect, why, and what we will never do with it — in plain words, because that is how we would want it explained to us.

The short version

• We collect only what the service needs to work.
• We never sell personal information, to anyone.
• We never use your data or your clients’ data to train AI.
• No advertising trackers — the only cookies keep you signed in.
• Ask us what we hold about you, or ask us to delete it, any time.

What we collect

If you run a business on Appointment Cat: your email address and password (stored in protected, industry-standard form — we never see the password itself), and the details you set up — your business name, services, prices, working hours, timezone, and optionally a WhatsApp number.

If you book an appointment with a business: the name and contact details you type into their booking page (email and/or phone), your appointment time, and any note you leave. If you join a walk-in queue, your name and optionally your phone number.

That is the list. We do not collect anything in the background.

What we use it for

• Showing businesses their calendar, clients, queue, and payments.
• Sending the emails the service is for: booking confirmations, appointment reminders, and account notices like password changes.
• Keeping the service safe — rate limits and abuse protection.

Nothing else. No advertising, no profiling, no selling, no AI training on customer data.

Whose data is it?

When a business keeps its client list on Appointment Cat, that list belongs to the business — we store and process it on their behalf, and each business can only ever see its own data. If you are a client of a business and want your details corrected or removed, the quickest route is the business itself; if that fails, contact us and we will help.

Where it lives, and who helps us run the service

Your data is stored with a small number of service providers we rely on to operate — never handed to anyone else:

• Supabase — our database and sign-in system, where all booking data lives, encrypted in transit.
• Vercel — hosts the website itself.
• Resend — delivers our emails (confirmations, reminders, account notices).

How long we keep it, and deletion

Data is kept while the account that owns it is active. When things are cancelled or removed in the app they are hidden rather than instantly destroyed, so honest mistakes can be undone. If you want your account and everything in it genuinely deleted, email us and we will do it and confirm.

Security

Every table in our database enforces row-level security — an account can only reach its own rows, and the public booking pages go through narrow, locked-down functions rather than open database access. We keep customer data out of logs and error reports.

Children

Appointment Cat is a tool for businesses and their clients, not a service aimed at children. Where a booking concerns a child — a tutoring session, say — it should be made by a parent or guardian.

Changes

If this policy changes in a way that matters, we will update this page and its date, and tell account holders by email for anything significant.

Contact

Questions, access requests, deletion requests: hello@appointmentcat.com. Appointment Cat is operated from Sri Lanka.