Privacy Policy

Account and profile data

Name, email, auth metadata (including sign-in provider and last sign-in time), campus verification data (.edu email domain and verification status), profile photo, provider profile details, service categories, service pricing, business media, and account settings.

Booking and communication data

Booking records, requested date/time, notes, custom service pricing/dispute history, cancellation reasons, and in-app messages between consumers and providers.

Location and device data

Precise location if you grant browser/device permission, saved last-known location for matching, approximate location from IP fallback, device/browser information, and basic security logs (including IP and request metadata). We use this to show nearby providers and protect against abuse.

Payment data

We store booking payment metadata (amounts, status, Stripe IDs, payout/release metadata, and timestamps). Full card details are handled by Stripe and are not stored on ScheduleMe servers.

Core marketplace operations

To create accounts, verify users, show nearby providers, process bookings, power messaging, and manage provider dashboards.

Payments and payouts

To collect payment, hold funds, process refunds, compute platform fees (including Founder50 rules), apply the non-refundable $0.99 protection fee policy for standard bookings, and support provider payout workflows.

Notifications and support

To send verification emails, booking/payment updates, dispute updates, cancellation updates, and support replies.

Security and fraud prevention

To detect abuse, enforce platform policy, investigate disputes, and protect users and ScheduleMe.

Infrastructure and auth

Supabase (database, authentication, storage), Vercel (hosting/runtime), Google and Apple auth providers (when you use social sign-in).

Payments and email

Stripe (payment processing, refunds, payouts), Resend (transactional emails).

Push notifications

Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM), directly or through a push provider, for app notification delivery.

Provider data sharing

When you make or manage a booking, relevant booking and contact details are shared between consumer and provider to perform the service.

How long we keep data

Account/profile data is retained while your account is active. Booking/payment/dispute records are retained for up to 7 years for legal, tax, fraud, and reconciliation requirements. Security logs are generally retained up to 12 months unless required longer for investigations. Support requests are generally retained up to 24 months for follow-up and quality/safety review. De-identified analytics may be retained longer.

Account deletion

You can request account deletion in-app (where available) or by contacting support at usescheduleme@gmail.com. We verify identity before deletion. After verification, we delete or de-identify data that is not required to be retained. Records that must be preserved for legal, tax, fraud, or payment obligations may be retained for the required period. Typical request handling target is within 30 days.

We use encryption in transit, access controls, and production security best practices. No system is perfectly secure, but we continuously work to reduce risk.

Depending on your location, you may have rights to access, correct, export, or delete your data. To exercise rights, email usescheduleme@gmail.com. We may need to verify identity before completing requests.

We use essential cookies for authentication and session continuity. We do not sell personal data.

ScheduleMe is not intended for children under 13. If you believe a child provided personal data, contact us so we can investigate and remove it.

We may update this policy as product features evolve. Material changes will be posted here with a new "Last updated" date.

Questions, deletion requests, or privacy requests: usescheduleme@gmail.com. You can also use our support form at https://www.usescheduleme.com/support.