Schedlio Privacy Policy

Effective date: 24 September 2026

Andreas Ioannou, operating Schedlio in Cyprus, provides the Schedlio Android app and related online services. For privacy questions or requests, email schedlio.app@gmail.com. Businesses using Schedlio control the customer information they enter and are responsible for informing their customers how they use it.

What Schedlio does

Schedlio helps adult business operators and staff manage appointments, customers, services, products, checkout, receipts, Offers/Quotes, reminders and reports. Business records are stored on the Android device. Selected features send data to online services, including account sign-in, optional Premium cloud backup, online booking, email delivery and notifications.

Information processed

How information is used

Information is used to provide requested features, authenticate accounts, protect account and purchase ownership, create and restore optional backups, process booking requests, send enabled communications, diagnose failures, prevent misuse and respond to support requests. This release does not include an advertising or analytics SDK. We will update this policy if our processing changes.

Local data and cloud services

Business records primarily reside in the local database. Optional Premium cloud backup is linked to the authenticated owner. Online booking, notifications, billing verification, Email Vault, automatic reminders, feedback and crash reporting use Firebase/Google Cloud services, which may process data outside Cyprus. Network traffic uses encrypted connections; Firebase provides encryption at rest for its supported services. Cloud backup is not described as end-to-end encrypted.

Sharing and external services

Google/Firebase and Google Play provide authentication, storage, messaging, crash reporting, backend functions and billing. Configured email providers process outgoing messages. When a user exports or shares a PDF, opens an SMS/WhatsApp/Viber composer, or sends a customer document, the chosen recipient or external app receives the relevant details. Booking customers provide details to the business operating the public booking page. Schedlio does not treat opening a composer or share sheet as proof of delivery.

Device permissions

Contacts access supports owner-initiated import. Notification permission supports alerts and reminders. Biometric permission supports optional local app lock. Boot-completed access reschedules local reminders. Internet access supports online services. The Google Play build does not request the SMS sending permission.

Retention and deletion

During account deletion, a server-only record keyed by account UID blocks further cloud writes and coordinates bounded retries. Once deletion cleanup completes, this record contains only deletion status and an expiry time. Its protection window ends about 75 minutes after the online account is removed. A five-minute cleanup job targets removal after expiry; Firestore time-to-live is a fallback, and physical deletion may take longer. The guard contains no email, purchase token, customer record or document content. Messages or notifications already handed to delivery providers before deletion may still arrive; deletion cannot recall them.

Users can edit records, export local data and request account deletion in the app or through the public deletion-request page. Account deletion removes the sign-in account and account-linked Schedlio cloud records: backup and user subcollections, Email Vault credentials, reminder and notification state, published booking data and requests, booking management tokens, feedback records, Offer number reservations, document-email state, and billing entitlement and account bindings. When deletion is completed through the app and confirmed, the app attempts to remove its private business records and generated documents on that device; if local cleanup fails, it instructs the user to clear Schedlio app storage. An email support request cannot erase app data on a device remotely; the user must clear Schedlio app storage or uninstall the app on each device. Exported files also require separate removal.

If a linked Google Play purchase is freshly verified during deletion, we retain limited security records keyed by the SHA-256 hash of a purchase token to prevent purchase replay and fraud. Each retained record contains blocked=true, the deletion time and an expiry time; it does not contain the raw token, account UID, email or purchase details. For a freshly verified active subscription, expiry is 90 days after the end of the current verified subscription period. If the subscription was already expired at deletion, expiry is 90 days after account deletion. A later freshly verified active renewal of that same blocked purchase may extend expiry to 90 days after its new current period; a delayed expired or unverified notice does not extend it. Firestore's configured time-to-live process then removes expired records, but physical deletion is not immediate. Unverifiable historical owner bindings are erased rather than assigned a guessed retention date.

Deleting the Schedlio account does not cancel a Google Play subscription. To avoid future charges, cancel it separately in Google Play subscriptions before deleting the account. Support feedback already emailed to the Schedlio support mailbox is not automatically matched to an account or erased by the cloud-data purge. To request removal, email schedlio.app@gmail.com with the approximate date and category or topic; do not resend customer information. Historical service or security logs may also remain under the cloud provider's operational retention; no exact period is stated here.

Security

Schedlio uses account authentication, owner-scoped access controls, optional local PIN/biometric lock and a server-side Email Vault for outgoing-email credentials. No system can guarantee absolute security. Users should protect their device and account credentials and check recipients before exporting business records.

Children, changes and contact

Schedlio is intended for adults operating businesses and is not designed for children. This policy may be updated as the app changes; the effective date identifies its version. For access, correction, deletion or privacy questions, contact schedlio.app@gmail.com.

English is the canonical source policy.