Privacy Policy

Welcome to Keelyst.

This Privacy Policy explains how Keelyst ("Keelyst", "we", "our", or "us") collects, uses, stores, and protects personal information when you use the Keelyst mobile application ("App") and related services ("Services").

Keelyst is operated by Ankit Pandoh, an individual developer based in India. References to "Keelyst", "we", "our", or "us" mean the operator of the Keelyst platform.

By using the App, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of this Privacy Policy

This Privacy Policy applies to:

• The Keelyst mobile application.
• Business users who access and use the App.
• Information collected through the App while providing the Services.

This Privacy Policy does not apply to third-party websites, products, or services that may be linked from the App or operated independently of Keelyst.

2. Definitions

For the purposes of this Privacy Policy:

3. Who Can Use Keelyst

Keelyst is intended exclusively for legitimate business use.

At this time:

• Individual consumers cannot create accounts.
• Business Clients cannot log in to the App.
• Accounts are created and managed by Keelyst as part of the onboarding process.
• Businesses cannot currently self-register through the App.
• Access is provided only to authorized Business Users.

Keelyst is not intended for personal or household use.

4. Information We Collect

Depending on how the Services are used, we may collect the following categories of information.

4.1 Business User Information

When a Business User account is created, we may collect:

• Full name
• Email address
• Mobile number
• Gender
• Date of birth
• Address

This information is used to create and manage user accounts, authenticate users, and provide the Services.

4.2 Business Information

For each Business using Keelyst, we may collect:

• Business name
• Business address

This information is used to identify the Business and provide business management functionality.

4.3 Staff Information

Businesses may create and manage staff profiles within Keelyst. The information collected may include:

• Full name
• Email address
• Mobile number
• Gender
• Date of birth
• Address

This information enables Businesses to manage staff members, assign appointments, and administer access to the Services.

4.4 Business Client Information

Businesses may record information relating to their own customers, including:

• Name
• Email address
• Mobile number
• Gender
• Date of birth
• Address

Businesses act as the primary controllers of Business Client information they enter into Keelyst. Keelyst processes that information solely to provide the Services on behalf of the Business.

4.5 Appointment Information

Businesses may create and manage appointments using the App. Appointment records may include:

• Appointment date
• Appointment time
• Assigned staff member
• Selected services
• Business Client information
• Appointment-related notes

Keelyst does not currently collect or store medical records, prescriptions, diagnostic information, treatment history, or other healthcare records as part of the Services.

4.6 Payment Records

Keelyst allows Businesses to record payment transactions for bookkeeping and operational purposes. Recorded information may include:

• Payment method
• Payment amount
• Payment status
• Wallet balance for prepaid services, where applicable

Keelyst does not process payments, collect card details, or provide payment gateway services. Any payment information recorded within the App is entered by the Business solely for record-keeping purposes.

4.7 Analytics and Diagnostic Information

To improve the quality and stability of the Services, Keelyst uses:

• Firebase Analytics
• Firebase Crashlytics

These services help us understand application usage, identify crashes, diagnose technical issues, and improve overall application performance. We do not use these services to deliver targeted advertising within the App.

5. How We Use Information

We use the information we collect only for legitimate business and operational purposes necessary to provide and improve the Services. Specifically, we use information to:

• Create, maintain, and administer Business accounts.
• Authenticate Business Users and manage secure access to the App.
• Manage appointments, services, staff schedules, and Business Clients.
• Maintain records of payments entered by Businesses for bookkeeping and operational purposes.
• Provide customer support and respond to enquiries or technical issues.
• Monitor the stability, reliability, and performance of the App.
• Diagnose and resolve software defects and application crashes.
• Maintain the security and integrity of our Services.
• Comply with applicable legal obligations and enforce our Terms of Service.

We do not use personal information to make automated decisions that produce legal or similarly significant effects on individuals.

We do not use Business data, Business Client information, or appointment information to train artificial intelligence models or for advertising purposes.

We do not use personal information for advertising or behavioural profiling.

We use information only for the purposes described in this Privacy Policy or as otherwise permitted or required by applicable law.

6. Business Client Information

Businesses using Keelyst may enter and manage information relating to their own clients for appointment scheduling and business operations. Keelyst provides the technology platform that enables Businesses to securely store and manage this information.

Each Business is responsible for:

• determining what information is collected from its clients;
• ensuring it has the necessary rights or permissions to collect and use that information;
• complying with applicable privacy and data protection laws; and
• managing its relationship with its clients.

Keelyst does not independently collect Business Client information from individuals. Such information is entered solely by the Business using the Services.

Except as described in this Privacy Policy or where required by law, Keelyst does not access Business Client information except where reasonably necessary to:

• provide technical support;
• investigate technical issues;
• maintain the security and reliability of the Services; or
• comply with applicable legal obligations.

8. Sharing of Information

We do not sell, rent, or trade personal information to third parties. We share information only in the limited circumstances described below.

With the Business Using Keelyst

Information entered into Keelyst is accessible to authorized Business Users within the same Business account, subject to the permissions assigned by that Business. For example, a Business owner may authorize receptionists, practitioners, or other staff members to access information necessary to perform their roles.

With Service Providers

We engage trusted third-party service providers to support the operation of our Services. These providers process information only to the extent necessary to perform services on our behalf. Our current service providers include:

• Amazon Web Services (AWS) for application hosting, infrastructure, and database services.
• Google Firebase Analytics for understanding application usage.
• Google Firebase Crashlytics for crash reporting and application diagnostics.
• Cloudflare for hosting and securing the Keelyst website.

These providers are not permitted to use your information for their own marketing purposes through Keelyst. Firebase services are provided by Google and may collect technical and diagnostic information in accordance with Google's privacy practices.

Legal Requirements

We may disclose information where we believe such disclosure is necessary to:

• comply with applicable laws, regulations, legal processes, or lawful requests from public authorities;
• protect the rights, property, or safety of Keelyst, our users, or others;
• investigate suspected fraud, misuse, or security incidents; or
• enforce our Terms of Service or other applicable agreements.

Business Transfers

If Keelyst is involved in a merger, acquisition, investment, reorganization, or sale of assets, information covered by this Privacy Policy may be transferred as part of that transaction. If such a transfer materially affects your rights, we will provide notice where reasonably practicable.

9. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect the information entrusted to us from unauthorized access, disclosure, alteration, or destruction. Our current security measures include:

• encrypted communication using HTTPS/TLS;
• secure password storage using BCrypt hashing;
• authenticated access using secure authentication tokens;
• role-based access controls that restrict access based on a user's assigned permissions; and
• automated database backups to support business continuity and disaster recovery.

Where access is necessary, it is limited to circumstances such as:

• providing technical support requested by a Business;
• diagnosing technical or operational issues;
• maintaining the security, availability, or reliability of the Services; or
• complying with applicable legal obligations.

Although we work to protect the information entrusted to us, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

10. Ownership of Business Information

Businesses retain ownership of the information they enter into Keelyst. Keelyst provides the technology platform that enables Businesses to manage appointments, staff, Business Clients, services, and related operational information.

Businesses determine:

• what information they choose to enter into the Services;
• which authorized users may access that information within their organization; and
• how that information is used in connection with their business operations.

Keelyst processes such information solely for the purpose of providing the Services described in this Privacy Policy. We do not use Business Client information for advertising, marketing, or any purpose unrelated to operating and improving the Services.

11. Data Retention

We retain your personal information for as long as your account is active and thereafter only as long as reasonably necessary to:

• Comply with legal and regulatory obligations.
• Resolve disputes and enforce our agreements.
• Maintain business records as required by law.

You may request deletion of your data at any time by contacting us at support@keelyst.com.

12. Your Rights

Depending on applicable law, you may have the right to:

• access your personal information;
• request correction of inaccurate information;
• request deletion of your information;
• object to certain processing activities;
• request a copy of your information where applicable.

Requests may be submitted to: support@keelyst.com

13. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Email: support@keelyst.com