Your privacy as a Pinkbook Discovery client.

1. What Information We Collect

When you create an account

• First and last name — used to personalise your booking experience and display your initials in the app
• Email address — used to verify your account, send booking confirmations, and for sign-in
• Phone number (optional) — used for SMS appointment reminders if you opt in
• Password — stored as a secure, salted hash; your plaintext password is never saved

When you sign in with Google

• Your Google account identifier, display name, and email address
• We do not access your Gmail, contacts, calendar, or any other Google data

When you write a review

• Your star rating (1–5) and optional comment text
• Your display name (first name + last initial only, e.g., "Sarah T.")
• The date the review was submitted

When you use Discovery

• What you like, comment on, save, share and follow, the pros you save, and what you search for
• How the feed is used (for example which posts were viewed and for how long), recorded under a pseudonymous identifier, not your name or email, to rank the feed and to give pros totals for their own posts
• Your comments, which other users can see with your display name
• The city you choose for "Nearby" (Pinkbook does not use your device's GPS)

You can see Discovery without an account. If you do, feed activity is still recorded under a pseudonymous identifier for ranking and to prevent abuse.

Notifications

• If you allow notifications, your device's push token, used only to send you Pinkbook notifications (booking updates, and activity from pros you follow if you turn that on)

Automatically collected data

• Basic server logs (IP address, request timestamp) — retained for security purposes only
• Authentication tokens stored on your device (in localStorage on the web, in the iOS Keychain in the app)

2. How We Use Your Information

• Pre-fill booking forms — your name, email, and phone number carry over automatically when you book any pro on Pinkbook
• Account management — sign-in, email verification, and password reset flows
• Reviews — displaying your review on the service provider's public Discovery profile
• Discovery — showing you posts and pros you are likely to want, keeping your saves and follows, and showing pros anonymous totals (views, saves) for their own posts
• Safety — screening comments and reviews automatically, and handling reports and blocks
• Security — detecting unauthorised access and preventing fraudulent activity
• Service communications — transactional emails (e.g., booking confirmations, verification links) only; no marketing emails without explicit consent

Pinkbook does not sell your information. We do not use your data for targeted advertising or share it with third parties for their marketing purposes.

3. Who We Share Your Information With

Service providers you book

When you complete a booking with a service provider through Pinkbook, your name, email, phone number, and any notes you include in the booking are shared with that service provider. They receive only what is necessary to fulfil your appointment.

Infrastructure providers

• Render (hosting) — processes server traffic
• Render / PostgreSQL (database) — stores your account data
• Cloudflare — network security and the delivery of Discovery photos and videos; sees your IP address and requests
• Brevo — delivers our emails to you
• Apple — delivers notifications to your iPhone
• Stripe / PayPal — process payments when you pay a deposit or balance; they receive the payment details you enter with them
• DeepSeek (based in China) — the text of reviews and comments is checked automatically for spam and abuse before it is shown
• Google (Sign-In) — if you use Google Sign-In, Google's authentication servers verify your identity

These providers process data under agreements that require them to maintain appropriate security standards.

Legal requirements

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Pinkbook, its users, or the public.

4. Google Sign-In

Using "Continue with Google" is optional. If you choose it:

• Google authenticates your identity and sends us your Google ID, display name, and email
• We link your Google ID to your Pinkbook client account to allow passwordless sign-in in the future
• We never store your Google password or request access to your Google Calendar, Gmail, Drive, or any other Google service
• You can remove the Google Sign-In link by deleting your Pinkbook client account
• See Google's Privacy Policy for how Google processes your data on their side

5. Reviews and Public Display

Reviews you post are displayed publicly on the service provider's Discovery profile. Your review includes your star rating, comment, and your first name and last initial only (e.g., "Sarah T."). Your full last name, email, and phone number are never shown publicly.

You may delete your review at any time from your account. Deleted reviews are removed from public display immediately. A copy may be retained briefly in database backups before being purged.

Pinkbook may remove reviews that violate our Client Terms without prior notice.

6. How Long We Keep Your Data

• Account data: Retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except as required by law.
• Reviews: Deleted when you remove a review or delete your account.
• Booking records: Booking data associated with your name/email may be retained by the service provider as per their own policies. Contact your service provider to request deletion of their records.
• Security logs: IP logs are retained for up to 90 days for security monitoring.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update your name, email, or phone number at any time from your account settings
• Deletion — delete your Pinkbook client account and associated data
• Portability — request your data in a structured, machine-readable format
• Objection — object to specific data processing activities

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You can delete your comments, likes, saves and follows at any time in the app; deleting your account removes them all.

United States residents: you can ask what personal information we hold about you, and ask us to correct, delete or send you a copy of it, at [email protected]. We will not treat you differently for asking. Pinkbook does not sell personal information or share it for cross-context behavioural advertising.

8. Cookies and Local Storage

Pinkbook uses the following storage mechanisms for client accounts:

• pb_client_token — your sign-in token, kept in localStorage on your device (in the iOS app, in the device Keychain) and sent with each request to keep you signed in. It expires 30 days after you sign in and is deleted when you sign out. Pinkbook does not use a cookie to keep you signed in.
• pb_client — a localStorage entry on your device containing your name and email for booking form pre-fill. This is stored on your device only and cleared when you sign out.

We do not use advertising cookies or third-party tracking scripts.

9. Security

We use the following technical measures to protect your data:

• Passwords stored as bcrypt hashes — never in plaintext
• Session tokens signed with HS256 JWT
• All connections over HTTPS/TLS
• Database access restricted to backend services only
• Google ID tokens verified server-side before any account action is taken

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at [email protected].

10. Children's Privacy

Pinkbook Discovery client accounts are intended for users aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has created an account, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via a notice in the app at least 14 days before the change takes effect. Continued use of your account after that date constitutes acceptance of the updated policy.

12. Contact Us

For any privacy questions, data access requests, or complaints:

For the full platform Privacy Policy covering service providers, see pinkbook-privacy.html.