Privacy Policy

Your privacy matters. This policy explains what information Miali collects, how we use it, and the choices you have, whether you run a business on Miali or you're a client booking through it. It covers the website at miali.app, public booking pages, and the Miali Android app.

When you book with a business on Miali, that business decides how it uses your information, and Miali stores and processes it on the business's behalf. For questions about what a business does with your data, contact that business first. You can always contact us too.

1. Information We Collect

• Business owner accounts: Your name, email address, profile photo, and sign-in details, either a password or your Google account if you use Google Sign-In.
• Business details: Your business name, description, address, phone number, email, logo, photos, opening hours, services, prices, Instagram handle, country, and timezone. If you turn on deposits, the payment details you enter, such as an M-Pesa till number or a Cash App, Venmo, Zelle, Revolut, or PayPal handle.
• Staff: Details a business adds about its staff, such as name, phone number, email, photo, specialties, and commission rate.
• Clients: Your name, phone number, and email when you book, and your address if you book a home visit so the business can come to you. The business you book with may also add information such as your date of birth, notes, service formulas (for example a hair colour formula), loyalty points, memberships, packages, payments, and appointment history.
• Deposits: If a business asks for a deposit, we store the deposit amount and the payment reference you enter. You pay the business directly, so Miali never receives your card, bank, or mobile money details.
• Started but unfinished bookings: If you begin booking an appointment but don't complete it, we save the phone number and service you were interested in as a "booking intent." This lets the business you were booking with follow up and help you finish. Unfinished booking intents are automatically marked expired after 48 hours.
• Reviews: If you review a business, we store your rating and comment linked to your client record at that business.
• Push notifications: If you choose to get push notifications, we store a device token so we can send them. Business owners can turn them on in the app.
• Subscriptions: Payments for Miali plans are handled by LemonSqueezy. We receive and store your plan, billing status, renewal dates, and your card brand and last four digits, never your full card number.
• Support conversations: If you message our support team, or we contact you about your account, we keep those messages along with the phone number or email address used.
• Booking page visits: To show businesses how many people view their page, we record a visit using a one-way hash of the visitor's IP address and browser. We don't store the IP address itself.
• Usage data: We automatically collect data about how you interact with Miali, including your IP address, approximate country, browser and device type, and the pages you visit. This helps us understand and improve the platform.

2. How We Use Your Information

• To provide our services: To manage bookings, schedules, deposits, loyalty programmes, and communication between clients and businesses.
• To send messages to clients on a business's behalf: Appointment reminders, booking confirmations, reschedules, cancellations, running-late notices, and aftercare messages over WhatsApp; booking confirmations, review requests, and messages a business writes to its clients by email.
• To keep business owners informed: Notifications and emails about new bookings, reviews, daily and weekly summaries, reminders about unconfirmed appointments or clients due for a visit, setup tips, and billing.
• To help with your account: Our support team may contact business owners directly on WhatsApp, by phone, or by email, using the details on the account, about things like setup, billing, a duplicate account, or a security issue. Business owners can also message us on WhatsApp from their dashboard. We use these conversations only to help you, not for marketing.
• To protect Miali: We use Google reCAPTCHA on booking forms to block spam and automated abuse, and error monitoring to find and fix problems.
• To improve Miali: Usage data helps us make the platform faster, more reliable, and easier to use.
• For marketing: With your consent, to tell you about new features or offers.

3. Sharing Your Information

We don't sell your personal information. We share it only in these cases:

• With businesses: A client's name and contact details are shared with the specific business they book with, so that business can fulfill the appointment. If you start but don't finish booking, the business you were booking with can also see your phone number and the service you wanted, so they can reach out and help you complete it.
• Publicly: A business's profile is visible to anyone who visits Miali or finds it through a search engine. It shows the business's name, description, location, opening hours, services, prices, photos, staff names, photos and specialties, and review excerpts without the reviewer's name. If deposits are on, the business's payment details are shown to clients who book. A business's email is never published. Its phone number is shown as a call or WhatsApp button only when online booking isn't available. Staff phone numbers, emails, and commission rates are never public.
• Service providers we use to run Miali: We share information with the following providers, only as needed for them to perform their service. The full list, with what each receives and where, is in our Data Processing Agreement:
  • Supabase for our database, sign-in, and file storage, and Vercel to host the website.
  • WhatsApp (Meta) and Resend to send booking confirmations, reminders, cancellations, messages from businesses, and account emails, and WhatsApp for our support chats with business owners.
  • Firebase Cloud Messaging (Google) to deliver push notifications to your device.
  • Google Sign-In if you choose to sign in with your Google account, and Google reCAPTCHA to protect booking forms from spam.
  • LemonSqueezy, our payment processor, to handle subscriptions and billing.
  • Sentry, for error monitoring: technical details of what went wrong and record ids, without names, contact details or IP addresses.
  • QR Code Generator (goqr.me), which receives a business's booking page link when the business creates a QR code for it.
• Analytics partners: We use Google Analytics and Microsoft Clarity to understand how people use Miali. This may involve cookies, session data, and site interactions. Clarity is set to hide client names, contact details, notes and the details clients type when booking, so those aren't recorded. See Google's Privacy Policy and Microsoft's Privacy Statement for details on how they handle this data.
• When required by law: If we're required to by law, or to protect the rights, safety, or property of our users or Miali.

4. Cookies and Data on Your Device

• Essential cookies keep you signed in and remember your approximate country so we can show prices in your local currency.
• Analytics and security cookies are set by Google Analytics, Microsoft Clarity, and Google reCAPTCHA.
• Local storage remembers things like dismissed banners and prompts, and data you enter into some free tools, so it's still there when you come back.
• Offline mode: So the dashboard keeps working without a connection, Miali saves pages you've visited and your appointments and client list on your device. This data is cleared when you sign out.

5. Data Security

We use industry-standard security measures to protect your information from unauthorized access, misuse, or disclosure. No system is completely secure, but we work continuously to keep your data safe.

6. Your Rights and Choices

• You can access, correct, export, or request deletion of your personal information at any time. Business owners can export their business data from account settings.
• Clients can stop WhatsApp messages from every business on Miali by replying STOP to any of our WhatsApp messages (and START to turn them back on), and stop a business's emails with the unsubscribe link in any of them. Businesses can also pause messages to a client at the client's request. To access, correct, or delete the information a business holds about them, clients can ask that business directly or contact us.
• You can turn off push notifications in your device settings, and ask us to stop marketing emails at any time.
• You can ask our support team to stop contacting you on WhatsApp at any time, and we'll use email instead.

To make a request, or for anything else, contact us at privacy@miali.app.

7. Data Retention & Deletion

• When a business owner requests account deletion, we hold the data for a 90-day grace period before permanently deleting it, so the request can be cancelled if they change their mind. After that period, we permanently delete the account, business profile, photos, staff, services, appointments, reviews, and the business's client records.
• Free plan accounts with no sign-ins and no appointments for 90 days are paused, and paused accounts with no sign-in for a year are permanently deleted, after an email at least 14 days before. See section 10 of our Terms of Service.
• Accounts that sign up but never set up a business get an email after 2 days, and are permanently deleted 7 days after that email if no business has been set up. See section 9 of our Terms of Service.
• Unfinished booking intents are marked expired after 48 hours.
• Otherwise, we keep information for as long as the account using it is active.

8. International Transfers

Our service providers operate in several countries, including the United States and the European Union, so your information may be processed outside the country where you live. We only use providers that protect it in line with this policy.

9. Children

Business accounts are for people aged 18 or over. If you believe a child has given us personal information without a parent or guardian's involvement, contact us and we'll delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date at the top of this page.