Komado Privacy Policy
Toshihiro.nakao ("we", "us") has established this Privacy Policy to explain how the iOS / iPadOS app "Komado" (the "App") handles your information. The App is for shop owners: it manages bookings and publishes a web booking page for the shop's customers. How we handle what customers enter on a booking page is set out separately in the booking page's privacy policy.
1. Our Approach
- Your bookings, customer records and shop settings are kept on your device and in your own iCloud. We cannot read them.
- The shop details you enter for your booking page (shop name, phone number, menus, free times and so on) are published so that the booking page can show them (see "2. Information the App Handles").
- Bookings made on your booking page reach you encrypted with a key that exists only on your devices. We cannot read their contents.
- There is no account to register.
- The App uses no advertising, no usage analytics, no tracking and no third-party SDKs.
2. Information the App Handles
What you enter and keep
Your shop's details (name, phone number, opening hours, days off, menus and prices, how bookings are taken), bookings (date and time, menus, price, status, notes) and customer records (name, phonetic name, phone number, email address, notes, things to be careful about, visit history).
Your customers' personal information
The App lets you enter and keep personal information about your shop's customers. It is stored only on your devices and in your own iCloud, and is never sent to us. As the shop, you are responsible for managing your customers' personal information.
What is published for your booking page
To show your booking page, the App stores the following in Apple's CloudKit public database. Anyone who knows your booking page's address can see it.
- Your shop name, phone number, menus and prices, and the text you write for the booking page (a message, directions, notes, links to social media and so on)
- Your free times (the times not taken by bookings; they contain nothing about the customers who booked)
- Your booking settings, the date your plan is valid until, and the public key used to encrypt bookings
For bookings made on the web, the App also stores a record that lets the customer check their booking (its status, date and time, and menu name). This record contains no customer name or contact details, and the App deletes it 90 days after the booking's date.
Bookings from your booking page
What a customer enters on your booking page reaches you encrypted with a key that exists only on your devices, and the App decrypts it on your device. Once it has been received, the encrypted original is deleted from the booking server (anything never received is deleted after 60 days).
3. Where Your Data Is Stored
- Bookings, customer records and shop settings are stored on your device and in the private area of your own iCloud, and are synced between devices signed in to the same Apple ID. We have no access to this area.
- The keys used to read bookings are stored in iCloud Keychain and synced between devices signed in to the same Apple ID.
- A summary (such as your next customer and the number of requests waiting for a reply) is stored in an area on your device reserved for the App, so that the Home Screen and Lock Screen widgets can show it.
- Deleting the App deletes the data on your device. Data stored in iCloud remains available on your other devices and if you reinstall the App.
4. Access to Device Features
- Notifications: used to tell you that a new booking has arrived from your booking page. If you do not allow them, new bookings are still brought in when you open the App.
- Adding to Photos: used only when you save your booking page's QR code to Photos. The App never reads your photos. If you do not allow it, you can still share the QR code or copy the address.
5. Third-Party Services
Apple iCloud (CloudKit)
Used to store and sync your data, to store what is published for your booking page, and to notify you of new bookings. See Apple's privacy policy at https://www.apple.com/legal/privacy/.
Booking server (Cloudflare)
The booking server we operate runs on services provided by Cloudflare, Inc. The App contacts it to confirm that a booking has been received, to free a booked time when a booking is cancelled or moved, and to check whether a new version is available. What it sends is your booking page's address, the date, time and slot details of the booking concerned, and a signature made with your shop's key; it never sends customers' names or contact details. When the App connects, Cloudflare processes information such as IP addresses to provide its service. See Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.
6. In-App Purchases
Plans for the App (auto-renewable subscriptions) are purchased through Apple's App Store. We never receive credit card or other payment details. Apple tells the App the status of your plan, which the App uses to decide whether your booking page takes bookings.
7. Sharing With Third Parties
We do not share your information with third parties, except where required by law. For the services the App uses, see "5. Third-Party Services".
8. Deleting Your Data
- You can delete bookings and customer records in the App at any time.
- Deleting a shop deletes its bookings, menus, opening hours, days off, published booking page information and keys.
- "Delete all data and reset" deletes all of the App's data, including what is stored in iCloud.
- You can also delete data stored in iCloud from the iCloud settings in your device's Settings app.
9. Children
The App is a tool for running a shop and is not directed at children under 13.
10. Changes to This Policy
We may update this Privacy Policy as needed. The updated policy takes effect when it is posted on this page.
11. Information We Receive When You Contact Us
The contact form on the support page is provided by Google Forms (Google LLC). What you enter there (such as your name, the email address to reply to and your message) is used only to respond to you and to investigate and fix problems, and is not shared with third parties except where required by law. We delete it once we no longer need it. Google's privacy policy also applies to the form. Using the App never sends this information to us.
12. Contact
For questions about this Privacy Policy or the App's privacy, please contact us through the support page.