Calpio Privacy Policy (v1)

1. Data Controller

Simplment s.r.o., Werferova 6, 040 11 Košice – mestská časť Juh, Slovakia

IČO 55766561, DIČ 2122077551, IČ DPH SK2122077551

2. What Data We Process

Depending on service use, we may process:

• account identification data (email, name, language, timezone),
• therapist practice and service settings,
• client data (name, email, phone),
• booking data (time, appointment type, status, notes),
• technical logs and security diagnostics.

Note: Calpio is not intended for medical records processing.

3. Purposes and Legal Bases

• Service delivery and account management: GDPR Art. 6(1)(b).
• Bookings, notifications, transactional emails: GDPR Art. 6(1)(b).
• Security and abuse prevention: GDPR Art. 6(1)(f).
• Marketing communications: consent only, GDPR Art. 6(1)(a).

4. Processors and Recipients

• Google Firebase (hosting, DB, auth, storage),
• Resend (email delivery),
• Stripe (payments/billing where used).

5. Transfers to Third Countries

Some providers may process data outside the EU/EEA. Appropriate safeguards are applied.

6. Retention Period

Data is stored while the account is active and then only as required by law and security obligations.

7. Your Rights

You have rights to access, rectification, erasure, restriction, portability, objection, and consent withdrawal.

You may lodge a complaint with the Slovak Data Protection Authority.

8. Contact

Privacy contact: privacy@calpio.com