Nextil ("Nextil Booking", "we", "us", or "our") values your privacy. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our booking platform, websites, and mobile applications (collectively, the "Service"). By using the Service, you consent to this Policy.

We collect personal information to operate our booking platform effectively and provide you with the best experience.

Information you provide: name, email, phone number, profile photo, service preferences, and booking details.

Automatically collected information: device data, IP address, browser type, access times, pages visited, and session identifiers via cookies or analytics tools.

From third parties: data from sign-in providers (e.g., Google, Apple) or service providers you interact with through our platform.

Third-Party Sign-In (OAuth): You can sign in to Nextil using Google Sign-In or Apple Sign-In. When you use these services, we receive basic profile information (name, email, and profile photo if provided) from these providers. Your use of these sign-in methods is also governed by Google's Privacy Policy and Apple's Privacy Policy. We do not receive or store your Google or Apple passwords.

Location Services (Mapbox): We use Mapbox to display the address and coordinates of staff/shop locations provided by service providers. This allows customers to view shop locations and tap for directions, which opens their device's navigation app. Mapbox only processes the address and coordinates entered by staff for this purpose. We do not collect or use your device's location. For more information, see the Mapbox Privacy Policy.

Photo Access: When you choose to upload a profile photo, our mobile app uses your device's photo picker (iOS PhotosPicker) to allow you to select images from your photo library. We only access photos you explicitly select and do not have access to your entire photo library.

Push Notifications: With your permission, we send push notifications to your mobile device to provide booking confirmations, reminders, updates, and important service announcements. You can manage notification preferences in your device settings at any time.

Advertising: We use Google AdMob to display advertisements in our mobile app. AdMob may collect information such as device identifiers, IP address, and usage data to provide personalized ads. For more information, please see the Google AdMob Privacy Policy and Google Privacy & Terms.

Security and spam prevention: We use hCaptcha to protect our forms from spam and abuse. hCaptcha collects hardware and software information such as device and application data, and sends it to Intuition Machines for the purpose of providing and improving the hCaptcha service. For more information, please see the hCaptcha Privacy Policy.

We use your information to:

• Create and manage your account.
• Facilitate bookings and communicate with service providers.
• Send confirmations, reminders, and updates.
• Improve, personalize, and secure the Service.
• Prevent fraud or misuse.
• Comply with legal and regulatory obligations.

User data (including account information, bookings, and profile images) is automatically deleted when you delete your account or request deletion. This process is irreversible and cannot be undone. We do not retain deleted data.

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. To open an account, we only require your name, last name, and email address. Profile photos are optional and only used for your account image or service listings. If we learn that we have collected personal information from someone under 18, we will delete that information immediately.

We may share your information with:

• Service Providers: professionals you book with, so they can manage your appointment.
• Third-Party Vendors: email/SMS notification providers, analytics platforms (Google Analytics), security services (hCaptcha for spam prevention), advertising partners (Google AdMob), and mapping services (Mapbox for location and navigation).
• Apple: Subscription and billing information is handled exclusively by Apple through their App Store billing system.
• Legal Authorities: when required to comply with applicable law or to protect our rights.

We do not sell or rent your personal information.

We retain personal data only for as long as necessary to provide the Service, resolve disputes, enforce our agreements, or comply with legal requirements. Once data is no longer needed, we securely delete or anonymize it.

Depending on your location, you may have rights to:

• Access or correct your data.
• Request deletion of your data.
• Object to processing or withdraw consent.
• Export your personal data.

To exercise these rights, contact us at privacy@nextil.net.

We use cookies and similar technologies to remember preferences, analyze usage, and enhance performance. You can adjust cookie settings through your browser or our Cookie Preferences tool, but some features may not function properly if disabled. For more information, please see our Cookie Policy.

We implement administrative, technical, and physical safeguards to protect your information. However, no online service is completely secure, and we cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach that may compromise your personal information, we will notify affected users via email and/or through the Service within a reasonable timeframe as required by applicable law. We will also report the breach to relevant authorities where required.

You must be at least 18 years old to create an account and use Nextil. By using the Service, you represent and warrant that you are 18 years of age or older. We do not knowingly collect information from individuals under 18. If we discover that we have collected personal information from someone under 18, we will delete it immediately.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the personal data we collect, use, disclose, and sell.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You can request correction of inaccurate personal information.

To exercise these rights, contact us at privacy@nextil.net. We will respond to verified requests within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your data.
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us at privacy@nextil.net. We will respond within one month of receiving your request.

If you access our Service from outside our primary operating country, your data may be transferred to and processed in countries with different data protection laws.

We may update this Privacy Policy periodically. The updated version will be posted on this page with a new "Last Updated" date. Continued use of the Service indicates acceptance of the updated policy.

If you have any privacy concerns, contact us at privacy@nextil.net.