Privacy Policy

We collect only what we need to operate KneadNow effectively and safely.

Personal Information

• Account data: Name, email address, phone number, and role (therapist or client) when you register.
• Profile data (therapists): Location, massage specialties, license information, bio, and profile photo.
• Identity verification: For therapists, we may collect license numbers and jurisdiction to display on your public profile.

Booking & Transaction Data

• Session details including date, time, duration, massage type, and location.
• Booking status, cancellation history, and completion records.
• Ratings and reviews submitted after sessions.

Payment Information

Payment processing is handled by Stripe. KneadNow does not store your full credit card number, CVV, or bank account details. We receive limited transaction metadata from Stripe (amount, status, last 4 digits) to display in your booking history.

Location Data

Therapists provide a general service area for their profile. We do not continuously track your location. If you permit browser geolocation, we use it only to show nearby available slots — this data is not stored on our servers.

Device & Usage Information

• IP address and general browser/device type (for security and analytics).
• Pages visited, features used, and session duration (to improve the product).
• Error logs and crash reports (to fix bugs).

Communications

• Messages sent through KneadNow's AI chat assistant.
• Support emails and support ticket content.
• SMS messages sent or received via our booking notification system (powered by Twilio).

We use the data we collect for the following purposes:

Operating the Platform

• Creating and managing user accounts.
• Displaying therapist profiles and available slots to clients browsing the platform.
• Processing booking requests, confirmations, and cancellations.
• Handling payments through Stripe and issuing payouts to therapists.
• Calculating and displaying ratings and reviews on therapist profiles.

Communications & Notifications

• Sending booking confirmation and reminder emails.
• Delivering SMS booking notifications via Twilio (e.g., "Your session is confirmed for 3pm").
• Responding to support inquiries and resolving disputes.
• Sending occasional platform updates or policy changes.

AI Chat Assistant

KneadNow includes an AI-powered chat assistant to help clients find the right therapist and answer questions about the platform. Conversations are processed to generate responses and may be reviewed to improve the assistant's quality. We do not use your chat content to train third-party AI models without your consent.

Safety & Fraud Prevention

• Detecting and preventing fraudulent accounts, fake reviews, or payment abuse.
• Investigating reports of inappropriate conduct or safety incidents.
• Complying with legal obligations and responding to lawful requests from authorities.

Product Improvement

We analyze aggregated, anonymized usage data to understand how people use KneadNow and to improve features, performance, and reliability. Individual usage data is not shared externally for this purpose.

We share your data with third parties only to the extent required to operate the platform.

Stripe (Payments)

Payment processing is handled by Stripe, Inc. When you make or receive a payment, your payment information is transmitted directly to Stripe under their privacy policy. KneadNow receives only tokenized payment references and transaction metadata. See stripe.com/privacy.

Twilio (SMS)

Booking notifications and confirmations sent via SMS are processed by Twilio, Inc. Your phone number and relevant booking details are shared with Twilio solely to deliver these messages. See twilio.com/legal/privacy.

Hosting Providers

KneadNow is hosted on cloud infrastructure (Render for compute, Neon for database storage). These providers process data on our behalf under their own security and privacy standards and are bound by data processing agreements.

AI Services

Our AI chat assistant is powered by Anthropic's Claude API. Chat messages you submit are sent to Anthropic's API to generate responses. Anthropic does not use API inputs to train its models by default. See anthropic.com/legal/privacy.

What We Never Do

• We do not sell your personal data to advertisers, data brokers, or any third party.
• We do not share your data for third-party marketing purposes.
• We do not disclose your information to other users beyond what is necessary for a booking (e.g., a client's first name is visible to the therapist they book with).

Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, safety, or property of KneadNow, its users, or the public.

KneadNow uses a minimal set of cookies and tracking technologies to operate the platform.

Essential Cookies

We use cookies to maintain your login session so you don't have to sign in on every page. These are strictly necessary and cannot be disabled without breaking the platform.

Analytics

We use a lightweight first-party analytics beacon to understand basic traffic patterns (page views, visitor counts). This does not track personally identifiable information and does not share data with advertising networks.

Local Storage

We store a visitor ID in your browser's local storage for anonymous analytics purposes. This ID is random and not linked to your account or personal information.

No Third-Party Ad Trackers

We do not use Google Ads, Facebook Pixel, or any other advertising tracking technology. You won't see KneadNow ads following you around the web based on your visit here.

Controlling Cookies

You can clear cookies and local storage at any time via your browser settings. Clearing session cookies will log you out of the platform.

You have meaningful control over your personal data.

Access

You may request a copy of the personal data KneadNow holds about you. Email us at support@kneadnow.polsia.app with the subject line "Data Access Request."

Correction

You can update most profile information directly from your account settings. For corrections to data you cannot edit yourself, contact us and we'll make the update within 5 business days.

Deletion

You may request deletion of your account and personal data at any time. We will delete your information from active systems within 30 days of receiving the request, subject to the following:

• Transaction records required for financial compliance may be retained for up to 7 years.
• Aggregated, anonymized data (e.g., platform usage statistics) is not subject to deletion requests as it cannot be linked back to you.
• If you have pending bookings or outstanding payments, those must be resolved before account deletion is finalized.

Portability

You may request a machine-readable export of your personal data (account info, booking history, ratings) by emailing us.

Opt-Out of Communications

You can unsubscribe from marketing emails via the unsubscribe link in any email we send. Transactional messages (booking confirmations, session reminders) cannot be disabled as they are necessary for the service.

To exercise any of these rights, contact us at support@kneadnow.polsia.app. We will respond within 30 days.

How Long We Keep Your Data

• Active accounts: Data is retained for as long as your account is active.
• Closed accounts: Personal data is deleted within 30 days of account closure, subject to legal retention requirements.
• Transaction records: Kept for up to 7 years to comply with financial regulations.
• Support communications: Retained for up to 2 years to handle follow-up disputes.
• Usage logs: Retained for up to 90 days for security and debugging purposes.

Security Measures

We take security seriously and implement industry-standard protections:

• All data is transmitted over HTTPS/TLS encryption.
• Database access is restricted to authorized application services only.
• Passwords are hashed using bcrypt — we cannot see your password.
• Payment data is handled entirely by Stripe and never touches our servers in full form.
• We conduct regular security reviews and promptly patch known vulnerabilities.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of the breach, as required by applicable law.

KneadNow is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@kneadnow.polsia.app. We will delete that information promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page.

For significant changes — particularly those that affect how we use your data or your rights — we will notify you by email or via a prominent notice on the platform before the changes take effect.

Continued use of KneadNow after updated terms are posted constitutes your acceptance of the revised policy. If you disagree with the updated policy, your remedy is to stop using the platform and close your account.

Questions, requests, or concerns about this Privacy Policy? Reach out directly:

• Email: support@kneadnow.polsia.app
• Platform: kneadnow.polsia.app

We take privacy seriously and respond to all requests within 30 days.