Privacy Policy

Last updated: June 8, 2026

This Privacy Policy explains how YaBudu (“we”, “our”, “the service”) collects, uses, and protects your personal information when you use the YaBudu mobile app and the yabudu.app website (the “Platform”).

1. What data we collect

1.1. Data you provide directly

  • Phone number — to create an account and authenticate via a one-time passcode (OTP) in Telegram.
  • Email address — if you sign in with Google or Apple, we receive and store your email address to create and identify your account.
  • Name and organization details — your business name, description, address, working hours, and the services you add to your profile.
  • Profile photo — if you upload an avatar, the image is stored in our secure file storage and shown on your profile.
  • Booking data — booking information: date, time, service, client, and booking status.
  • Phone book contacts — only with your explicit consent (a system permission), to quickly fill in a client’s number. We do not store or transmit your contact book to our servers.

1.2. Data collected automatically

  • Technical device information — model, OS version, session identifier — for error diagnostics via Sentry.
  • Platform interaction data — errors and app crashes — solely to improve stability.

1.3. Diagnostics in support requests

When you submit a support request through the mobile app, we may attach additional technical information to your ticket — to help us find the cause of the problem faster.

  • What we collect — the app version, operating system and its version, device model, current screen, interface language, network connection status (online / offline), and the technical Sentry event identifier to correlate with error logs.
  • When we collect it — only with your explicit consent. The request form has an «Attach device diagnostics» toggle that you can turn off before sending. If it is off — no diagnostic data is added to the ticket.
  • What we do not collect — your Wi-Fi network name (SSID/BSSID), IP address, location, or the contents of other apps. Only the aggregated connection status.

2. How we use your data

  • Authentication and securing access to your account.
  • Providing the Platform’s core features: profile creation, booking management, and online booking.
  • Sending booking reminders via Telegram.
  • Diagnosing and fixing technical errors.
  • Improving the functionality and usability of the Platform.

3. Sharing data with third parties

We do not sell or share your personal data for marketing purposes. We use the following services to operate the Platform:

  • Telegram — to deliver one-time authentication codes (OTP) and booking reminders.
  • Google and Apple — to sign in with your account (Sign in with Apple / Google). We receive only your email address for authentication.
  • Sentry (sentry.io) — to monitor application errors and crashes. Only the technical information necessary for diagnostics is transmitted.
  • Cloudflare — to protect the website from bots (Turnstile CAPTCHA) and to store uploaded profile images (R2 storage).
  • Railway — to host the backend and database (EU West region, Amsterdam).

4. Data storage and protection

  • Data is stored on servers in the European Union (Amsterdam, the Netherlands).
  • Data transfer between the app and the server happens exclusively over the encrypted HTTPS protocol.
  • Authentication tokens are stored in the device’s secure storage (Keychain on iOS, Keystore on Android).
  • We do not store passwords — authentication is done through one-time codes.

5. Your rights

You have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your account and all associated data.
  • Withdraw your consent to data processing at any time.
  • Lodge a complaint with the competent data protection authority.

To exercise these rights, contact us using the details below.

6. Data retention

We retain your data for the entire time you use the Platform. After you delete your account, all personal data is deleted within 30 days, except for data we are required to retain by law.

7. Tracking and analytics

We do not use advertising trackers, analytics SDKs for tracking user behavior, or cookies for marketing purposes. The only monitoring tool — Sentry — is used solely for technical diagnostics.

8. Children

The Platform is not intended for persons under 16 years of age. We do not knowingly collect children’s personal data. If you believe a child has provided us with their data, please contact us to have it deleted.

9. Changes to this Policy

We may update this Privacy Policy. We will notify you of material changes through the Platform. By continuing to use the Platform after changes take effect, you accept the updated Policy.

10. Contact

If you have any questions about this Privacy Policy or the processing of your data, contact us: