Privacy Policy

1. Introduction

Calemio ("we", "our", "us") is operated by Mio Bilgi Teknolojileri A.Ş., a company registered in Sivas, Turkey. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our mobile application and related services.

We are committed to protecting your privacy in compliance with the Turkish Personal Data Protection Law No. 6698 (KVKK), the EU General Data Protection Regulation (GDPR), and other applicable data protection legislation.

2. Data Controller

Mio Bilgi Teknolojileri A.Ş.
Sivas Teknokent, Sivas, Turkey
Email: info@miox.io

3. Data We Collect

3.1 Account Information

When you create an account, we collect your name, email address, phone number, and profile photo (optional). If you register a business, we also collect your business name, address, working hours, and service details.

3.2 Appointment Data

We store appointment details including date, time, duration, service type, client information, and any notes you add. This data is necessary to provide our core scheduling service.

3.3 Client Information

When you add clients to your account, we store their name, phone number, email (if provided), and appointment history. You are responsible for obtaining appropriate consent from your clients before entering their data.

3.4 AI Assistant Interactions

Our AI assistant (Mio) processes your queries to provide scheduling suggestions, business insights, and support. Conversations with Mio may be stored to improve service quality.

3.5 Payment Information

Subscription payments are processed securely through Apple App Store and Google Play Store. We do not directly collect or store your credit card or payment details.

3.6 Device & Usage Data

We collect device type, operating system version, app version, language preference, push notification tokens, and anonymous usage analytics to improve our service.

4. How We Use Your Data

We use your personal data for the following purposes:

• Providing and maintaining the appointment management service
• Sending appointment reminders and notifications
• Powering AI-assisted scheduling and business insights
• Processing subscriptions and managing your account
• Improving app performance and user experience
• Communicating service updates and changes
• Complying with legal obligations

5. Legal Basis for Processing

We process your data based on the following legal grounds:

• Contract performance: Processing necessary to provide you with our services
• Legitimate interest: Analytics and service improvement
• Consent: Marketing communications and optional data processing
• Legal obligation: Compliance with applicable laws and regulations

6. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit (TLS/SSL). We implement industry-standard security measures including database-level encryption for sensitive fields (names, phone numbers, appointment notes) using PostgreSQL pgcrypto.

Data is primarily stored in servers located within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., financial records, tax obligations).

8. Data Sharing

We do not sell your personal data. We may share data with the following categories of third parties only as necessary:

• Cloud infrastructure: Hosting and database providers
• Analytics: Anonymous usage data for service improvement
• Payment processors: Apple and Google for subscription management
• Legal authorities: When required by law or court order

9. Your Rights

Under KVKK (Turkey)

You have the right to:

• Learn whether your personal data is processed
• Request information about the processing
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of your data
• Object to automated decisions made about you
• Claim compensation for damages arising from unlawful processing

Under GDPR (EU/EEA)

In addition to the above, you have the right to:

• Data portability — receive your data in a structured, machine-readable format
• Restrict processing in certain circumstances
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

10. Push Notifications

We use push notifications to send appointment reminders, schedule updates, and service notifications. You can disable push notifications at any time through your device settings.

11. Children's Privacy

Calemio is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact us at:

Mio Bilgi Teknolojileri A.Ş.
Email: info@miox.io
Address: Sivas Teknokent, Sivas, Turkey