Last updated: 12 July 2026 Effective date: 12 July 2026
Kingpointment ("Kingpointment", "the app", "we", "us", "our") is a booking and client-management (CRM) mobile application for small service businesses and independent professionals. This Privacy Policy explains what personal data we handle, why, on what legal basis, and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent EEA law.
This policy applies to the Kingpointment mobile app (Android and iOS) and the backend service that supports it.
Please read Section 3 carefully — Kingpointment processes two different categories of personal data in two different legal roles, and this affects who is responsible for what.
The operator of Kingpointment and the data controller for your account and business data is:
If you have any question about this policy or wish to exercise your rights, use the contact details above (see Section 9).
Kingpointment handles personal data in two distinct roles:
(a) Your account and business data — we are the _controller_. When you register for Kingpointment and configure your business, we determine how and why that data is processed in order to provide the app to you. For this data we are the data controller.
(b) Your clients' data — we are a _processor_, and you are the _controller_. When you, the business owner, enter your own customers' details (name, phone, email, appointment notes) into Kingpointment — or when a guest books an appointment with you through your public booking page — you decide why and how that data is used. For that data, you are the data controller and we (as the operator of Kingpointment's backend) act as a data processor that stores and processes it strictly on your behalf and on your instructions.
This means that for your clients' personal data, you are responsible for:
We will support you in meeting these obligations as your processor, and we will not use your clients' data for any purpose of our own. A separate Data Processing Agreement (DPA) may be entered into on request — contact info@kingdroid.eu.
| Data | Examples | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Account data | Email, name, password | Create, secure and operate your account. Passwords are never stored in plain text — they are held only as a salted hash by our backend (Appwrite). | Performance of a contract — Art. 6(1)(b) |
| Business / tenant configuration | Business name, chosen vertical(s), working hours, app settings | Provide and tailor the service to your business | Performance of a contract — Art. 6(1)(b) |
| Service catalog | Service names, durations, prices | Let you build bookings from your services | Performance of a contract — Art. 6(1)(b) |
| Client records (entered by you) | Client name, phone, email, notes | Stored and processed on your behalf; you are the controller | Your lawful basis as controller (we process as processor under Art. 28) |
| Appointments / bookings | Date, time, linked client and service, notes | Manage your calendar and schedule | Performance of a contract / your instructions |
| Contacts you choose to import | Name, phone number and email of the contacts you tick in the import screen | Create client records without retyping them | Your lawful basis as controller (we process as processor under Art. 28) |
| Guest bookings (public booking page) | Name, phone number and optional email a guest submits when booking on a business's public booking page | Create the appointment for that business; the business is the controller of its guests' data | The business's lawful basis as controller (we process as processor under Art. 28) |
| Subscription data | Your chosen plan, subscription status, renewal date and an anonymous store transaction identifier | Determine which plan features your account is entitled to | Performance of a contract — Art. 6(1)(b) |
| Technical & diagnostic data | Server logs such as IP address and timestamps, error logs | Security, abuse prevention, troubleshooting and service reliability | Legitimate interests — Art. 6(1)(f) |
We collect only what is needed to run the app. We do not collect advertising identifiers, we do not track your location, and we do not build advertising or behavioural profiles.
Payments for subscriptions are processed entirely by Apple (App Store) or Google (Google Play). We never see or store your card number or billing details — we only receive confirmation of the subscription's status and an anonymous transaction identifier so we can unlock your plan.
Kingpointment is an appointment and client-management tool, not a medical records system. Some of the business types it supports (physiotherapy, massage, chiropractic / manual therapy) sit close to healthcare, so to be unambiguous:
As the controller of your client data, you are responsible for what you enter.
Kingpointment's backend runs on self-hosted Appwrite infrastructure operated by us on our own server located in the European Union. Your data is stored on that EU-based infrastructure and is not handed to a third-party cloud CRM or data broker.
We keep third-party processing to a minimum. Current and planned sub-processors:
| Party | Role | Status | Location |
|---|---|---|---|
| Appwrite (self-hosted) | Backend platform (database, authentication, storage) running on our own EU server | In use | EU |
| Self-hosted by KING DROID S.R.L. | Physical/virtual server hosting for our backend | In use | European Union |
| Apple (App Store) | Subscription billing for business owners who subscribe on iOS | In use | Global (Apple's own privacy terms apply) |
| Google (Google Play) | Subscription billing for business owners who subscribe on Android | In use | Global (Google's own privacy terms apply) |
| Stripe | Card payment processing for client payments | Planned / not yet live | To be confirmed |
| SimplePay | Payment processing (Hungary) | Planned / not yet live | EU (Hungary) |
| Vipps | Mobile payment (Norway) | Planned / not yet live | EEA (Norway) |
Client-facing payments (guests paying for appointments) are not yet available in Kingpointment. Stripe, SimplePay and Vipps are listed as future payment sub-processors. When payment features go live, this policy will be updated with their specific roles, data flows and safeguards before any payment data is processed.
If you are in the EU/EEA you have the right to:
How to exercise these rights: email us at info@kingdroid.eu. We will respond within one month, as required by the GDPR. We may need to verify your identity before acting on a request.
Important — if you are a _client_ of a business that uses Kingpointment: the business that collected your data is the data controller, not us. Please direct access, correction or deletion requests to that business. As their processor, we will assist them in fulfilling your request.
Supervisory authorities in our primary markets:
We take appropriate technical and organisational measures to protect personal data, including:
No system is perfectly secure, but we work to protect your data and to keep these measures current. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users as required by Articles 33–34 GDPR.
Kingpointment is a business tool intended for professional use by adults. It is not directed at children and we do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Your data is stored on infrastructure located in the EU/EEA. We do not routinely transfer personal data outside the EEA.
If, in the future, a sub-processor (for example a payment provider) processes data outside the EEA, we will ensure an appropriate transfer mechanism is in place — such as an adequacy decision or the European Commission's Standard Contractual Clauses (SCCs) — and we will update this policy before such processing begins.
We may update this Privacy Policy from time to time — for example, when we launch payment features. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app or by email. The current version is always available at https://kingdroid.eu/privacy.
Questions, requests or complaints about this policy or your data: