Privacy Policy
Last updated: 22 July 2026
This Privacy Policy explains how Heavony (“we”, “us”) collects, uses, shares, and protects your personal information when you use the Heavony mobile app, website, and related services (the “Service”). By using the Service you agree to the practices described here.
1. Information we collect
Information you provide
- Account details — your name, email address, and password (stored only as a secure hash). If you sign in with Google, we receive your name, email, and profile photo from Google.
- Workspace content — the projects, tasks, comments, labels, appointments, and files you and your team create in the Service.
- Booking & guest information — when someone books an appointment through your public booking page, we collect the guest’s name and, if provided, email address, phone number, and notes, in order to create and manage the booking.
- Payment information — subscription payments are processed by our payment partners (Paystack and Stripe). We do not store your full card details; we retain only limited billing metadata such as plan, status, and invoice records.
- Communications — messages you send us for support and any feedback you submit.
Information collected automatically
- Device & usage data — app version, device model, operating system, language, and how you interact with features, used to keep the Service reliable.
- Diagnostics & crash data — we use Sentry to capture crash reports and performance data so we can fix problems.
- Push notification tokens — a device token so we can deliver notifications you’ve enabled (for example, when a task is assigned or an appointment is booked).
- Log & security data — IP address and audit-log entries recording key actions in your workspace, used for security and troubleshooting.
- Local storage — we store your session and cached data on your device to keep you signed in and let the app work offline.
2. How we use your information
- Provide, operate, and maintain the Service and your workspace.
- Authenticate you and keep your account secure.
- Send appointment, task, and account notifications (in-app, push, email, and — where you enable it — WhatsApp).
- Process subscriptions and send billing records.
- Provide customer support and respond to your requests.
- Monitor, debug, and improve performance and reliability.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations.
3. How we share your information
We do not sell your personal information. We share it only in these cases:
- Within your workspace — content you create is visible to other members of the same workspace according to their roles and permissions.
- Service providers (processors) who help us run the Service, bound by confidentiality and data-protection terms — including hosting and infrastructure (Render), file storage (Cloudflare R2), diagnostics (Sentry), payments (Paystack, Stripe), sign-in (Google), push delivery (Expo, Apple, and Google), and messaging (Meta / WhatsApp).
- The business you booked with — if you book and pay for an appointment, the name, contact details and payment record for that booking are shared with that workspace. They are the seller for that appointment and need this to serve you, issue refunds, and keep their own records.
- Legal & safety — when required by law, or to protect the rights, property, and safety of Heavony, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
Card and account details. Payments are taken on Paystack’s own checkout page. We never receive or store your card number, PIN, or mobile-money credentials. For a workspace’s settlement account we store only the last four digits and the account name — the full number is held by Paystack, not by us.
4. Push notifications
With your permission, we send push notifications about your workspace activity. You can turn them off at any time in your device settings or within the app.
5. Data retention
We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account or workspace, we delete or anonymise the associated personal data within a reasonable period, except where we must retain certain records (for example, invoices) to meet legal, tax, or accounting obligations.
6. Security
We use encryption in transit (HTTPS), secure credential storage on your device, hashed passwords, role-based access controls, and audit logging to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of significant incidents where required.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most information in the app, or contact us using the details below. Residents of Ghanahave rights under the Data Protection Act, 2012 (Act 843); other regions may provide additional rights.
8. International data transfers
Your information may be processed on servers located outside your country. Where we transfer data internationally, we take steps to ensure it remains protected in line with this Policy and applicable law.
9. Children
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
10. Third-party links
The Service may link to third-party sites and services that we do not control. Their privacy practices are governed by their own policies.
11. Changes to this Policy
We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date; significant changes may also be notified in the app or by email.
12. Contact us
If you have questions about this Policy or your personal information, contact us at support@heavony.com.