Privacy Policy

NazBook — Last updated: May 13, 2026

1. Overview

NazBook ("the App") is developed by Naz Apps ("we", "us"). This policy explains what data the App collects, how it is used, and your rights.

2. Data You Enter

The App stores the following data locally on your device in a private SQLite database:

Booking details (title, date, time, duration, notes, status, line items)
Customer names, phone numbers, email addresses, addresses, and notes
Service type names, durations, and prices
Staff profile names, email addresses, phone numbers, notes, and working hours
Attachments (photos or files you attach to bookings)
Business settings (name, logo, tagline, business hours, currency, country)

This data never leaves your device unless you explicitly use the Google Drive backup, Google Calendar sync, or cloud backup features described below.

3. Location Data

The App includes an optional Staff Arrival Tracking feature, available to Team Leader accounts only. When enabled by the Team Leader and consented to by the staff member:

A single GPS coordinate (latitude and longitude) is captured at the moment a staff member taps "Mark Arrival" on a booking.
This snapshot is stored locally on the staff member's device and may be uploaded to Firebase Storage as part of the Team Leader's backup (see Section 5).
Location data is not collected continuously — only on explicit tap.
Staff members are shown a one-time consent dialog before any GPS data is captured.
The Team Leader can disable this feature at any time from Settings → Team.

The App requests the ACCESS_FINE_LOCATION and ACCESS_COARSE_LOCATION permissions only when the arrival tracking feature is active.

4. Google Services

When you sign in with Google, the App may access:

Scope	Purpose
`userinfo.email`	Identity — used to sign in, link your subscription tier, and prevent trial abuse across reinstalls
`drive.appdata`	Storing and restoring your backup file in a hidden app folder. The App can only access its own `appDataFolder` — it cannot read, modify, or delete any of your other Drive files.
`calendar.events`	Creating, updating, and deleting calendar events that correspond to bookings you create in the App
`calendar.readonly`	Reading your calendar list (so you can choose which calendar to sync to) and importing existing events as bookings

Google sign-in is optional. All core booking features work without a Google account. You can sign out at any time from Settings → Google Account.

Google's privacy policy applies to data processed by Google services: https://policies.google.com/privacy

5. Firebase (Google)

The App uses Firebase, a Google platform, for:

Firebase Authentication — verifying your Google sign-in and linking your subscription tier to your account.
Cloud Firestore — storing your subscription tier and trial start date only. No booking, customer, or staff data is stored in Firestore. Team Leader accounts also store team membership records (staff email addresses and invitation status) so that staff can be matched to the correct team after accepting an invitation.
Firebase Storage — Team Leader accounts only. Your booking, customer, service, staff data, and (optionally) attachment files are uploaded as compressed backup files to Firebase Storage under a path accessible only by your own account (users/<your-uid>/backup/). Personal, Trial, and Free tier users have no data stored in Firebase Storage.

Data stored in Firestore per user: { tier, trialStartedAt }. Team Leader accounts additionally store: { teamId, staff members, invitation records }.

Firebase data is stored in the asia-southeast1 (Singapore) region.

6. Local Notifications

The App schedules local notifications (booking reminders, daily summary, trial expiry alerts) entirely on-device using Android's notification system. No notification content is sent to any server.

7. Permissions Used

Permission	Why it is needed
`RECEIVE_BOOT_COMPLETED`	Re-schedule booking reminders after the device restarts
`SCHEDULE_EXACT_ALARM` / `USE_EXACT_ALARM`	Fire reminder notifications at the precise time you set
`POST_NOTIFICATIONS`	Show booking reminder and daily summary notifications (Android 13+)
`CAMERA`	Take a photo directly when attaching an image to a booking or setting a business logo
`READ_EXTERNAL_STORAGE` / `READ_MEDIA_IMAGES`	Pick photos from your gallery when attaching files to bookings or setting a business logo
`ACCESS_FINE_LOCATION` / `ACCESS_COARSE_LOCATION`	Staff arrival tracking only — a single GPS snapshot when a staff member taps "Mark Arrival". Requires explicit consent. Not used otherwise.
`INTERNET`	Google sign-in, Calendar sync, Drive backup, and Firebase
`READ_CONTACTS`	Optional — only accessed when you tap "Import from contacts" while adding a new customer. A single contact's name, phone, and email are read and pre-filled in the form. No contacts are stored or transmitted beyond what you explicitly save.

8. No Advertising, No Analytics

The App does not use any advertising SDKs or analytics tools. We do not track your usage, display ads, or sell any data to third parties.

9. Data Retention & Deletion

All local data is deleted when you uninstall the App.
Your Google Drive backup file can be deleted from Google Drive at any time.
Your Firestore record (tier, trialStartedAt) can be deleted by contacting us at naz.support@gmail.com.
Team Leader Firebase Storage backup files and Firestore team records are deleted automatically when your account is closed or downgraded. You may also request immediate deletion by contacting us.
GPS arrival snapshots are stored locally and included in your cloud backup only if you are a Team Leader with backup enabled. You can delete individual arrival records by editing the booking, or remove all cloud data by contacting us.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of the personal data we hold about you
Request correction or deletion of your data
Withdraw consent to location data collection at any time

To exercise any of these rights, contact us at naz.support@gmail.com.

11. Children

The App is not directed at children under 13. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact

Questions, requests, or data deletion: naz.support@gmail.com