Effective 27 September 2026
About this notice
Takdo is operated by NumPy Org. NumPy Org is responsible for the personal information Takdo processes to operate the platform. Takdo provides business discovery, appointment booking, and customer and business support. This notice applies to guests, customers, and business users. It explains how information is processed; acknowledging it is not blanket consent to unrelated uses.
Information collected
We process names, email addresses, phone numbers, account identifiers and account type, authentication information, preferences, favorites, and agreement records. Guests provide a booker name and email address, may optionally provide a phone number, and receive a private guest identifier. Booking references are shown on screen; booking confirmation emails are not currently sent. Booking records include the business, service, staff, date/time, price shown, status, cancellation or rescheduling details, and information you enter in notes.
Business information includes owner contact details, business name, category, description, address and map coordinates, hours, services and prices, staff names, photos and schedules, availability, and subscription or trial information. Business users may record customer notes associated with their bookings.
We process messages between customers and businesses, support conversations, reviews, ratings, and uploaded business/staff photos. Free-text fields may contain sensitive information, including health-related information that you or a business enters. Do not submit diagnoses, medical records, identification documents, passwords, payment-card details, or other unnecessary sensitive information. Takdo is not a medical-record system.
Profile photos and bug reports are optional. Bug reports include the description you send and the app and operating-system versions to help resolve problems. Public business images may be cached on the device for faster loading; private photos are cached in memory. Account-specific cached records support offline recovery, with access scoped to the signed-in identity.
With permission, location is used to find nearby businesses. Searches and selected locations may be sent to our service to return results; Apple map and address lookup services may also process map queries. On the website, OpenStreetMap supplies map tiles and Photon supplies address and city suggestions. Typed location searches and pin coordinates used for address lookup are sent to Photon through Takdo; loading map tiles shares normal connection details and the viewed area with the tile provider. Search results are temporarily cached to reduce repeated requests. We do not need continuous background location to provide booking. Technical records may include IP addresses, request timestamps, device/app information, security logs, and notification identifiers. Push device tokens are used when push delivery is enabled.
To protect booking slots from automated abuse, Takdo limits booking frequency and upcoming appointments and checks repeated guest contact details. When enabled, Cloudflare Turnstile processes technical connection and browser/device signals for a security check. Takdo sends the resulting verification token to Cloudflare; it does not send your booking notes, name, email address or phone number to Cloudflare for this check.
Why we use information
We use information to operate accounts, discover businesses, arrange and manage bookings, share necessary booking details with the selected business, deliver updates, provide support to both sides, moderate listings and reviews, investigate abuse or disputes, maintain security, and meet legal obligations. Processing may be necessary to perform the service you request, comply with law, or pursue proportionate legitimate interests; consent is requested separately where required. Optional device permissions can be changed in Settings.
Who can access it
The selected business and its authorized personnel can access booking and customer information needed to provide and manage its services. Customers can see public business listings, staff information published by the business, and approved reviews. Uploaded public business images may be accessible through their public URLs. Do not upload confidential documents as business images.
NumPy Org and its authorized Takdo administrators can access customer-side and business-side records, including profiles, appointments, notes, messages, support history, and moderation records, for administration, support, security, investigation, and legal compliance. Messages are not end-to-end encrypted against Takdo administration. Administrative access is not permission to use records for unrelated personal purposes.
We use Supabase for authentication, database and file hosting, and supporting infrastructure providers to operate the service. Data may be processed outside your country according to provider infrastructure and applicable safeguards. We may disclose relevant information where legally required, to protect rights and safety, or to a successor operating the service subject to applicable privacy protections. Businesses are responsible for their own use of information and their separate privacy obligations.
We do not sell personal data. Takdo does not use personal information for cross-app advertising tracking in the current app. Necessary operational disclosures described here are not a sale of data.
Storage and security
Information is stored on hosted servers and, where needed, on your device. The app uses HTTPS, authenticated requests, access controls, and Keychain storage for session credentials. Local cached information and pending changes help recover from interrupted connections. No system or transmission can be guaranteed completely secure. Protect your device and credentials and report suspected unauthorized access promptly.
Retention and deletion
Data is retained for as long as needed to provide services, manage bookings and support, resolve disputes, protect security, and satisfy applicable legal obligations. Retention varies by record and purpose; backups and legally retained records may not disappear immediately. Account deletion is available under Account management. A deletion request does not necessarily remove records independently held by a business or information lawfully retained. Guest access depends on the guest session on the device; losing that session does not itself delete server records.
Your rights and contact
Subject to applicable law, you may request access, correction, deletion or blocking, information about processing, portability where applicable, or object to processing and withdraw consent for consent-based activities. Withdrawal does not invalidate earlier lawful processing. We may need to verify identity before releasing or changing records. Use Contact Takdo in the app for support and privacy requests. Philippine users may also contact the National Privacy Commission at privacy.gov.ph. Nothing here limits statutory privacy rights.
Children and updates
Takdo is intended for adults able to enter agreements. An authorized adult should arrange bookings for a minor and provide only necessary information. Businesses remain responsible for any additional legal consent requirements. We may update this notice and will bring material changes to your attention. The current version remains available in the app.
Business verification and trial eligibility
We manually verify business phone numbers and review listings before they appear to customers. To prevent repeated free trials after account deletion, we retain a separate eligibility record containing keyed, one-way representations of the owner identifier, business phone number, business name and address, together with trial dates. This is pseudonymous information, not an anonymous record. The eligibility record does not contain the full deleted profile, email, photos, messages or bookings. It expires three years after the later of the recorded trial end or eligibility decision; expired records are excluded from matching immediately and deleted during routine signup and review processing. Access is restricted to authorized administration and server processes. We use matches for human review, not automatic findings of abuse. Contact hansenzachhy@gmail.com to question a match or request a privacy review. Separate booking, payment and support retention rules still apply.