Privacy Policy

This Privacy Policy explains what information Sukona collects, how we use it, who we share it with, and the rights you have. We’re committed to being plain about this — no dark patterns, no buried clauses.

The short version:we collect only what we need to run the Service, we don’t sell your data, we don’t use it to train AI models, and you can ask us to delete it at any time.

Sukona is operated from the United Arab Emirates. For the purposes of data protection law, we are the data controller for the information you provide. Contact us at hellosukona@gmail.com.

Account information you give us when you sign up: your name, email, phone, business name, business website (optional), country, category, team size, and how you heard about us.

Business operating data you create using the Service: appointments, clients (their names, contact details, addresses, visit history), services, staff, payments, expenses, inventory, reviews, attached receipt photos, and activity logs.

Payment information is collected and stored by Stripe, our payment processor. We never see or store your full card number. We retain only metadata necessary to operate your subscription (Stripe customer ID, subscription ID, billing period, last 4 digits of card for display).

Technical data generated when you use the Service: IP address, browser type, device type, log timestamps, error reports.

We use the information we collect to:

• Provide and maintain the Service;
• Process subscription payments via Stripe;
• Send transactional emails (sign-up confirmation, password resets, trial reminders, payment receipts, important service notices);
• Respond to your support requests at hellosukona@gmail.com;
• Investigate and prevent fraud, abuse, security incidents, or violations of our Terms;
• Improve the Service in aggregate (e.g., understanding which features are used). No individual user’s data is sold or shared for this purpose.

We do not:

• Sell your data to anyone;
• Share your data with third parties for their marketing;
• Use your client lists or business data to train AI models;
• Run third-party advertising trackers in the dashboard.

We use a small number of trusted services to operate Sukona. Each one only sees the data needed for its role:

• Supabase — database, authentication, and file storage. Data is stored in their managed Postgres database.
• Stripe — payment processing for subscriptions. Card data lives only with Stripe.
• Vercel — application hosting.
• Resend — transactional email delivery (welcome, trial reminders, etc.).
• WhatsApp (via Meta) — to send notifications and receipts to your clients, when you trigger that action from the dashboard.

Your data is stored in encrypted databases managed by Supabase. All connections to the Service use TLS (HTTPS). We follow industry standard security practices and limit access to your data to authorized personnel only.

No system is 100% secure. If we ever experience a breach affecting your data, we’ll notify you without unreasonable delay.

You can, at any time:

• Accessthe data you’ve created (it’s all visible in your dashboard);
• Correct or update it from inside the dashboard;
• Export your data (reports include CSV export; we can provide a full data export on request);
• Delete your account and all associated data by emailing hellosukona@gmail.com. We’ll process deletion within 30 days.
• Opt out of non-transactional emails by clicking the unsubscribe link in any such email.

We keep your data for as long as your account is active. If you cancel your subscription, your data remains available and exportable for 30 days. After that, we permanently delete it from our active systems. Backups containing your data are deleted within 90 days.

Some records (invoices, payment receipts) may be retained longer to comply with tax and accounting regulations.

Our service providers may store and process data in countries outside the UAE (typically the EU, US, or Singapore depending on the provider). All providers we use offer contractual safeguards consistent with international data protection standards.

Sukona is a business tool. The Service is not intended for anyone under 18. We do not knowingly collect data from children.

We use essential cookies to keep you signed in and to remember your session. We do not use advertising or cross-site tracking cookies.

We may update this policy from time to time. If we make material changes, we’ll notify you by email or via the dashboard. The “Effective” date at the top of this page always reflects the latest version.

Questions, requests, or complaints about privacy? Email us at hellosukona@gmail.com.