Solista privacy policy

1. Who is responsible for your data

The App is operated by the owner of Solista (contact above), who acts as the data controller for your account data. For the personal data you store about your clients (see section 4), you act as the data controller and we act as a processor providing you the storage and processing infrastructure.

2. Data we collect about you

When you create an account and use the App, we collect and store:

• Account data — your email address, name, and optional profile photo. If you sign in with Google or Apple, we receive your email and name from that provider. Sign in with Apple lets you hide your email.
• Business profile data — your professional activity, services and prices, working schedule, currency, language, and timezone.
• Business records you create — appointments, income and expense records, notes, and attached photos.
• Push notification tokens — a device token used to deliver reminders and summaries you have enabled.
• Technical data — data required to operate the service (authentication identifiers, sync timestamps). We do not use analytics, advertising, or tracking SDKs, and we do not collect device identifiers for advertising.

3. What we do NOT do

• We do not sell or rent your data to anyone.
• We do not use your data for advertising.
• We do not track you across other apps or websites.
• We do not collect data beyond what the App's features need.

4. Client data you store about others

The App lets you keep records about your clients: names, phone numbers, email addresses, photos, appointment history, and notes. You may import this data from your device's contact book (only after you grant the contacts permission, and only the contacts you choose).

This data is stored privately in your account, is visible only to you, and is used solely to provide the App's features to you. You are responsible for having a lawful basis to store your clients' information and for honoring their privacy requests (e.g. deleting a client's record when asked — the App provides deletion for every record).

5. Where your data is stored

Your data is stored in Google Firebase (Firestore, Cloud Storage, Authentication, Cloud Functions, Cloud Messaging), operated by Google LLC, with server-side processing in the European Union (europe-west1). Google acts as our sub-processor under the Google Cloud Data Processing Addendum. Data in transit is encrypted (HTTPS/TLS); data at rest is encrypted by Google's infrastructure.

A copy of your data is cached on your device so the App works offline; it is protected by your device's security and removed when you sign out or delete the App.

6. Permissions the App requests

All permissions are optional and requested only when you use the related feature:

7. How long we keep data and how to delete it

Your data is kept for as long as your account exists. You can delete individual records (clients, appointments, transactions, images) at any time in the App.

8. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, export, restrict, object to processing of, and erase your personal data, and the right to lodge a complaint with your supervisory authority. Most of these you can exercise directly in the App (all your records are viewable and editable; reports are exportable; the account is deletable). For anything else, contact admin@solista.me.

9. Legal bases

We process your data to perform our contract with you (providing the App), and, for optional features such as push notifications, on the basis of your consent, which you can withdraw at any time in the App's settings or your device settings.

10. Children

The App is intended for professionals and is not directed at children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy as the App evolves. Material changes will be announced in the App. The current version is always available at this address.