Privacy policy

Store data. When a merchant installs DatePick, Shopify grants the app access to the store data it needs to run bookings: the store domain, name, email, currency, timezone and plan; products, variants and images used as bookable services; orders and line items tied to a booking; and store locations. We request the narrowest set of Shopify scopes the features need.

Booking data the merchant creates. Services, availability rules, staff and team members, equipment, and the settings for notifications and booking pages.

Customer data for a booking. When a customer books, we store the details needed to fulfil and manage that booking: name, email address, phone number where provided, the chosen date, time and timezone, the quantity and party size, answers to the custom questions the merchant configured, and any note or cancellation or reschedule history.

Technical data. Server and application logs containing request metadata (IP address, user agent, timestamps, error traces) used to keep the service running and secure.

The app does not collect or store payment card details. Payments are handled by Shopify Checkout and Shopify Billing.

DatePick Scheduler is the iPhone app for store owners and the staff a store invites. It is also available on the web as the DatePick Team portal. For people who use it, we collect:

• Your account. Your email address, your name if you add one, and your language and time zone.
• Sign-in. We email you a one-time code to sign in. We keep the email address and IP address of each sign-in attempt to stop abuse; codes are stored only in hashed form.
• Devices and sessions. The device name, platform, app version, an installation ID and when each device was last used, so you can see where you are signed in and sign devices out.
• Notifications. If you allow alerts, your device’s push token and your alert preferences. Alerts are delivered through Apple Push Notification service and Google Firebase Cloud Messaging.
• Your work in a store. The stores you belong to and your role, notes you write about customers, and a record of changes you make (for example, who rescheduled a booking).
• Crash reports. If the app crashes, it sends a report to Google Firebase Crashlytics with the device model, iOS version, app version, an anonymous installation ID and what the app was doing. No name, email address or store is attached.

App lock with Face ID or Touch ID happens on your device; we never receive biometric data. The bookings and customers you see in the app belong to the store, which controls that data (see Roles). The app shows no ads, does not track you across other apps or websites, and we do not sell this data.

Deleting your account. In the app, open More › Account › Delete account and confirm with the code we email you. Your account is deleted 7 days later, and you can cancel until then. Deletion removes your account, your sign-in on every device, your access to every store and your alerts. The stores keep their bookings and customers, notes you wrote stay with the store without your name, and we keep a record that the account was deleted. If you are the only owner of a store, add another owner in Shopify admin first. You can also ask us to delete your account by email; see Delete your account.

• To provide the service: show real availability, create and manage bookings, and keep them in sync with Shopify orders.
• To send transactional messages a merchant has enabled — booking confirmations, reminders, reschedule and cancellation notices — to the customer and to the merchant or staff member concerned.
• To operate merchant billing and plan limits through Shopify Billing.
• To support merchants when they contact us, and to investigate errors and abuse.
• To improve the app using aggregated, non-identifying usage figures.

We do not sell personal data, and we do not use booking data to advertise to customers.

For the personal data of a store’s customers, the merchant is the data controller and DatePick acts as a processor on the merchant’s instructions. For a merchant’s own account and billing data, we act as the controller.

We share data only with the service providers needed to run the app, and only what each needs:

• Shopify — installation, authentication, orders, and billing.
• Our hosting and database providers, which store the app's data.
• Email, SMS and WhatsApp providers, to deliver the notifications a merchant turns on.
• Apple and Google Firebase, to deliver alerts to the DatePick Scheduler app and to receive its crash reports.

We may also disclose data where the law requires it, or to protect our rights, safety or property.

Booking and service data is kept while the app is installed. When a merchant uninstalls DatePick, Shopify sends us a shop redact request and we delete the store’s data within 48 hours of receiving it, except where we must keep records to meet a legal obligation. Customer redact requests from Shopify are handled the same way for the customer named in the request. Logs are kept for a short period and then discarded.

Data travels over TLS and is stored on managed infrastructure with access restricted to the people who operate the app. Shopify access tokens are stored encrypted and used only to serve the merchant. No system is perfectly secure, but we work to keep this one current and to respond quickly if something goes wrong.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict its processing. If you booked with a store, contact that store first — it controls your booking data — or write to us and we will pass the request on and help the merchant answer it.

The app and its providers may process data in countries other than your own. Where data leaves the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

DatePick is a tool for businesses and is not directed at children. We do not knowingly collect personal data from children.

This site sets no tracking or advertising cookies. Booking pages and the storefront widget use only the storage needed to hold a booking in progress, and Shopify’s own cookies apply on the merchant’s storefront and checkout.

We will update this page when the app’s data practices change and revise the date at the top. Significant changes will be notified to merchants in the app.

Questions about this policy or a data request can go to support@datepick.com.