Privacy and Personal Data Processing Policy

2026-09-05

This is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

This policy complies with Colombian Statutory Law 1581 of 2012 and Decree 1377 of 2013 (compiled into Single Regulatory Decree 1074 of 2015) and any rules amending them, and constitutes the controller’s Information Processing Policy. For users in the European Economic Area and the United Kingdom it additionally incorporates the requirements of the General Data Protection Regulation (GDPR).

1. Data controller

Platform: AionClock — mobile app and the aionclock.app website.
Controller: Jonny Cano, a natural person.
Address: Bogotá D.C., Colombia.
Email for personal data matters: [email protected].

2. What data we process

Account data: first and last name, email address, phone number (optional), profile photo (optional) and preferred language.

Credentials: your password is stored only as a cryptographic hash (bcrypt); never in plain text. If you choose federated sign-in, we store the technical identifier that Google or Microsoft provide us; we never see your password for those accounts.

Location: only if you grant the device permission. We use it to show you nearby professionals and, for home services, to validate that the address falls within the coverage area. Your last known location is stored; there is no continuous background tracking.

Professional profile (only if you activate it): business name, profession, base address and its coordinates, coverage radius, time zone, opening hours, social networks and your services with price and duration.

Activity: appointment history (bookings, cancellations with their reason, no-shows), and the reviews and ratings you write or receive.

Technical data: IP address and access logs (needed for security and abuse prevention), the device’s push notification token and session identifiers.

Biometrics: we never receive them. If you enable fingerprint or Face ID unlock, the verification happens exclusively on your device, through the operating system. No biometric data ever reaches our servers.

We do not process sensitive data or data about minors, and you are not required to provide either. Accounts are for people aged 18 or over (section 13).

3. Purposes of processing

Providing the service: managing your account, publishing schedules, computing availability, creating and managing appointments.
Sending you transactional communications: confirmations, status changes, cancellations and appointment reminders (24 hours and 1 hour before), by email and push notification.
Enabling communication between client and professional about a specific appointment, by sharing with the professional the contact channel you choose (section 4).
Showing you nearby professionals when you authorise location access.
Security: protecting the service against unauthorised access, limiting abusive attempts, detecting fraud and preserving incident evidence.
Handling your requests, queries and complaints.
Complying with legal obligations and orders from competent authorities.

We do not send third-party advertising, we do not sell or rent personal data, and we do not build advertising profiles. If we ever wanted to send you our own marketing communications, we would ask for a separate authorisation, which you could refuse without affecting the service.

4. What is published and what is not

If you activate your professional profile, the following becomes public (visible in the app and on search-engine-indexable web pages): your business name, profession, photo, your services with price and duration, your opening hours, your declared social networks and your average rating.

Never published: your email address, phone number, real-time location, appointment history, or any technical identifier of your device.

Your exact address and its coordinates are only published if you offer at least one service that is not a home service — that is, if you receive clients at your premises. If all your services are home services, only your city is shown, with no coordinates and no map, because your base location would be your private home.

When you book an appointment, the Professional sees the data needed to serve it: your name; the contact channel you choose so they can communicate with you about that appointment; and, for home services, the service address.

You control the shared channel: your phone is the default and you can switch it to your email at any time, from Edit profile in the app or from the appointments section of the website. If you chose phone but have none saved, your email is shared so communication remains possible. The Professional may only use this data to manage that appointment (section 8 of the Terms and Conditions).

Conversely, when you have an appointment with a Professional, you see the contact channel they chose under the same rule (phone, or email if none is saved) or, if they work at a company, that company’s phone number; and the address of their premises with its details (floor, tower, unit), only if they publish their exact address. This data may only be used to manage that appointment, and a deleted Professional exposes nothing.

5. Processors and third parties involved

We do not share data for commercial purposes. Only the providers needed to operate the service are involved, acting on our behalf under their own contractual data-protection commitments:

Infrastructure and database: DigitalOcean (API and storage) and Vercel (website).
Transactional email: the email delivery provider (MailerSend or our own SMTP server).
Push notifications: Firebase Cloud Messaging (Google). It only receives the device token and the notification content; we do not use Firebase as a database.
Federated identity: Google or Microsoft, only if you choose to sign in with them.
Web analytics: self-hosted Umami, a cookieless analytics tool that stores no personal data and does not track visitors across sites.

Some of these providers process data in the United States or other countries. That international transfer is carried out in accordance with articles 26 and 27 of Law 1581 of 2012 and, for European users, with Chapter V of the GDPR, under the standard contractual clauses or transfer frameworks (for example, the EU-U.S. Data Privacy Framework) each provider subscribes to.

Beyond the above, we will only disclose data when ordered by a competent authority acting within its powers.

6. How long we keep data

Active account: while you keep your account, we retain the data described above.
When you delete your account: your identifiers are immediately and irreversibly anonymised (name, email, phone, photo, location, federated identifiers and push token), and your professional profile and social networks are deleted. Details in Account and data deletion.
Appointment history: it is immutable by nature, as a record protecting both parties; closed appointments are not deleted, but once you delete your account they are disassociated from your identity.
Technical logs: kept for a limited period for security purposes and deleted on a rotating basis.
Backups: anonymised data may persist in encrypted backups during the infrastructure provider’s rotation cycle, after which it disappears permanently.

7. Your rights as a data subject (Law 1581 of 2012)

You have the right to:

Know, update and rectify your personal data.
Request proof of the authorisation granted for processing.
Be informed about how your data has been used.
Revoke your authorisation and/or request deletion of your data where no legal or contractual duty prevents it. You can delete your account yourself from the app, without asking anyone’s permission.
File complaints with the Superintendence of Industry and Commerce (SIC, www.sic.gov.co), Colombia’s data protection authority, once the query or complaint procedure before the controller has been exhausted.

You exercise most of these rights directly in the app: editing your profile updates your data instantly, and deleting your account executes the erasure described in section 6.

8. How to submit queries and complaints

Write to [email protected] from the email address registered on your account, stating your name, a description of your request and, where applicable, supporting documents.

Queries: we reply within a maximum of ten (10) business days. If that is not possible, we will inform you of the reasons and the new date, which will not exceed five (5) additional business days.
Complaints (correction, update, deletion or alleged non-compliance): we reply within a maximum of fifteen (15) business days. If that is not possible, we will inform you of the reasons and the new date, which will not exceed eight (8) additional business days. If a complaint is incomplete, we will ask you to complete it within five (5) days of receipt.

If you use AionClock from the EEA or the UK, we additionally inform you:

Legal bases: performance of the contract (art. 6(1)(b) GDPR) for the account, schedules and appointments; your consent (art. 6(1)(a)) for location and optional data, revocable at any time from the device permissions; our legitimate interest (art. 6(1)(f)) in security and abuse prevention for technical logs; and compliance with legal obligations (art. 6(1)(c)) when required by an authority.
Rights: access, rectification, erasure, restriction of processing, portability and objection, exercisable through the channels in section 8. You may also lodge a complaint with your local supervisory authority.
Automated decisions: we make no automated decisions with legal effects on you and we do no profiling within the meaning of article 22 GDPR. Schedule availability computation is a service function, not people profiling.
Transfers: see section 5.

10. Users in California (CCPA/CPRA)

We do not “sell” or “share” personal information within the meaning of the CCPA/CPRA, and we do not use it for behavioural advertising. You may exercise your rights to know, correct and delete through the channels in section 8, with no discrimination for exercising them.

11. Security

We apply technical and organisational measures proportional to the risk: traffic encryption (HTTPS/TLS), bcrypt-hashed passwords, token-based access control with expiration, strict input validation, rate limiting against abuse, access logging and the principle of least privilege. No system is infallible: should a security incident affect your data, we will handle it in accordance with applicable law and inform you where required.

12. Cookies and similar technologies

The mobile app uses no cookies. The website uses only technical and preference cookies, exempt from consent banners because they are necessary for what you yourself request:

Session: keeps you signed in to the private area (plus an auxiliary cookie with your email to show which account is connected).
Preferences: your theme (light/dark) and your language.
Federated sign-in: short-lived cookies protecting the Google/Microsoft sign-in flow (state and anti-forgery verification); they expire within minutes.

There are no advertising or third-party tracking cookies. The site’s analytics (Umami) works without cookies and without identifying visitors. That is why you will not see a consent banner: there is nothing to consent to.

13. Minors

You must be 18 or older to create an account. If you are a minor, you can use AionClock through the account of your mother, father or legal guardian, who will book or manage the services on your behalf. We do not knowingly collect data from minors; if you become aware that a minor has created an account of their own, write to us and we will delete it.

14. Changes to this policy

We may update this policy. If a change is substantial, we will announce it through the app or by email before it takes effect. The date of the latest update always appears in the header of this page.

15. Effective date

This policy is effective as of August 15, 2026. Databases are maintained while the Platform operates and the described purposes subsist; each data subject’s data, for the periods in section 6.