Privacy Policy
Aptxa ("we", "us") is a practice-management app for solo practitioners. This policy explains what information the app collects, how it is stored and used, and the choices you have. We keep it plain and short on purpose — there is nothing hiding in the fine print.
1. Information we collect
Account information
When you sign in with Google or Apple, we receive your name, email address, and (if available) profile photo from that provider. We use this to create and identify your Aptxa account. We never see or store your Google or Apple password.
Practice data you enter
As you use Aptxa, you may enter information about your practice, including:
- Client details — names, phone numbers, email addresses, and fee settings;
- Session details — appointment dates, times, status, and related notes;
- Payment records — amounts, dates, and payment status for sessions.
This data exists solely so the app can function for you. You are its owner and controller; we act only as its custodian.
What we do not collect
- We do not collect your location.
- We do not access your contacts, photos, camera, or microphone.
- We do not use advertising trackers or sell data to third parties — ever.
2. How your data is stored and protected
Your data is stored in a managed PostgreSQL database hosted by Supabase, our backend infrastructure provider. All data is transmitted over encrypted connections (HTTPS/TLS) and protected by row-level security, meaning your data is only accessible from your own signed-in account. Authentication tokens on your device are kept in the platform's secure storage (Keychain on iOS).
3. How we use your information
We use the information described above only to:
- Provide the core features of the app — scheduling, client management, payment tracking, and insights;
- Keep your account secure and signed in;
- Respond when you contact us for support;
- Maintain backups so your data is not lost.
We do not use your data for advertising, profiling, or any purpose unrelated to running the app. Insights and statistics shown in the app are computed from your own data, for your eyes only.
4. Your clients' information
As a practitioner, you may store personal information about your clients in Aptxa. You are responsible for having an appropriate basis (such as consent) to record that information. We process it only on your behalf, to display it back to you inside your account — we never contact your clients, share their details, or use them for any other purpose.
5. Sharing of information
We share data only with the service providers required to run Aptxa:
- Supabase — database hosting and authentication;
- Google / Apple — sign-in, when you choose that provider.
We may also disclose information if required by law. We do not sell, rent, or trade your information with anyone.
6. Data retention and deletion
Your data is retained for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing aptxa.dev@gmail.com from your registered email address. Deletion is permanent and covers your account, clients, sessions, and payment records. We aim to complete deletion requests within 30 days.
7. Your rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you;
- Correct inaccurate data;
- Request deletion of your data;
- Withdraw consent for processing.
To exercise any of these rights, email aptxa.dev@gmail.com. We will respond promptly.
8. Children's privacy
Aptxa is intended for professional use by adults and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
9. Changes to this policy
If we make material changes to this policy, we will update this page and revise the effective date above. Continued use of the app after changes take effect constitutes acceptance of the updated policy.
10. Contact us
Questions about privacy or this policy? Email aptxa.dev@gmail.com — we read everything.