Privacy policy

This Policy explains what personal data Bukly collects, why we use it, whom we may share it with and how you can exercise your rights.

Data controller: Individual entrepreneur Litash Oleksandr Oleksandrovych, Ukrainian tax ID 3386900232, Ukraine, Kyiv region, Vyshhorod district, Slavutych, Nezalezhnosti avenue, building 13, apartment 3. Privacy contact: hello@bukly.app.

1. Data we collect

• Account data: email, name, avatar, interface language, notification settings and account creation date.
• Data you enter into Bukly: clients, contacts, schedule, sessions, prices, payment statuses, debts, balances, recurring sessions and other work records.
• Subscription data: plan, period, status, start and end dates, payment events, order reference, amount, currency, transaction status and technical payload from the payment provider.
• Support data: email, message text, Telegram username or other data you voluntarily send us.
• Mobile app waitlist data: email, selected platform, language, form source and shortened user agent.
• Technical data: IP address in provider logs, browser/device type, country from Vercel headers, session cookies, language cookie, cookie/Local Storage for calendar preferences, and aggregated performance and usage analytics.

2. Payments and card data

Payments are processed by WayForPay. Bukly does not receive or store the full card number, CVV or other sensitive card credentials. We receive only the data needed to confirm payments, subscriptions, refunds, accounting and support.

3. How we use data

• account creation and authentication by email magic link or Google OAuth;
• providing calendar, client, session, payment and balance features;
• activating, renewing, cancelling and restoring Pro subscriptions;
• processing payments, refunds, disputes and fiscal or accounting obligations;
• user support, replies to requests and notices about important changes;
• account security, abuse prevention and error diagnostics;
• aggregated product, performance and stability improvements.

4. Legal bases

We process data based on your consent, the need to enter into and perform an agreement, legal obligations, protection of Bukly's and users' rights and legitimate interests, and other bases available under Ukrainian law.

5. Who processes data

We do not sell personal data. Data may be processed by our providers only as needed to operate Bukly.

• Supabase — authentication, database and session storage;
• Vercel — hosting, logs, analytics and Speed Insights;
• WayForPay — payments, recurring charges, receipts and refunds;
• Google — optional OAuth sign-in and public-page analytics according to the preferences below;
• email providers or other service providers where needed for support or notifications;
• public authorities, banks, auditors or advisors where required by law or to protect rights.

6. Cookies and Local Storage

Bukly uses necessary cookies for Supabase sessions, language preference and stable interface behavior. We may also store local calendar preferences in Local Storage so the interface remains consistent after reloads.

We use Google Analytics 4 through Google Tag Manager, Vercel Analytics and Speed Insights on public pages only to measure visits, interactions and performance. Analytics is enabled by default for visitors in Ukraine unless they previously opted out. For other or unknown countries it is enabled only after your selection. Google may store analytics cookies. No cookie banner is shown. You can disable or enable analytics using the toggle at the bottom of this page; your preference is saved in Local Storage and a cookie. We do not send client records, email addresses, form contents or authorization tokens. Advertising services, heatmaps and session recordings are not used.

7. Client, student and minor data

Bukly is a tool for your work, so you decide what data about your clients or students to enter. You are responsible for having a lawful basis for entering such data, especially where it relates to minors.

We do not use your client data for our own marketing and do not contact your clients without your request or a legal basis.

8. Retention

Core account and work records are kept while the account is active or while needed to provide the service. After a deletion request, we delete or anonymize data except for information that must be retained for legal, accounting, tax, security or dispute purposes.

Payment and accounting records may be retained for statutory periods. Support request data may be retained for up to 3 years for support history and rights protection.

9. Your rights

• know what data we process and why;
• access your data;
• request correction of inaccurate or outdated data;
• request deletion where no lawful basis for retention remains;
• withdraw consent where processing is based on consent;
• object to processing where provided by law;
• contact the Ukrainian Parliament Commissioner for Human Rights or a court.

10. Security

We use technical and organizational safeguards: HTTPS/TLS, access control, database row-level security, server-side processing of sensitive operations and limited access to service keys.

No online service can guarantee absolute security. If we identify an incident that may materially affect your rights, we will notify you within a reasonable period according to legal requirements.

11. International processing

Infrastructure, payment or analytics providers may process data in Ukraine, the EU, the US or other jurisdictions. By using Bukly, you understand that such transfer may be necessary for the service to operate.

12. Requests

To exercise privacy rights or ask privacy questions, contact hello@bukly.app. We may ask you to confirm that the request relates to your account.