Privacy Notice
Who we are
sched.fyi is a booking tool for small businesses in the Philippines. The data controller is sched.fyi, operated by Joey Hipolito. Our data protection officer (DPO) is Joey Hipolito — reach him at [email protected].
What we collect
When you make a booking we collect your name and your mobile number or email address, and we store the business, service, date and time you booked. If the business asks booking-form questions or for a waiver, we store your answers and signature. If the business asks for payment, we store the payment reference you type and the proof-of-payment image you upload. We keep a record of the text messages we send you. To prevent abuse, each booking attempt records a device fingerprint (a hash of your browser details and IP address) together with the IP address; the abuse-tracking record is deleted after 90 days, and the fingerprint saved on the booking stays with the booking record. We do not collect card details or browsing history.
Why we collect it
Your name and contact details are used solely to confirm your booking with the business. The business may contact you if your slot changes or is cancelled. We do not use your data for advertising or share it with third parties for marketing.
How long we keep it
Booking records, including the device fingerprint saved on them, stay with the business's records for as long as the business uses sched.fyi. The booking audit trail is deleted after 12 months, abuse-tracking records (fingerprint and IP address) after 90 days, and expired sign-in sessions as they expire. You can request deletion of your data at any time (see Delete my data below).
Your rights (Philippines Data Privacy Act 2012)
Under the Philippine Data Privacy Act 2012 you have the right to be informed, object, access, correct, erase, and be compensated for damages arising from misuse of your data. Complaints may be lodged with the National Privacy Commission (NPC) at privacy.gov.ph. Email [email protected] with your name and mobile number and we will respond within 5 business days.
Delete my data
You can request deletion of your booking history, SMS log, and related opt-out flags yourself, without emailing anyone. Enter the mobile number you booked with below — we'll text a 6-digit code to confirm it's yours, then your request goes to a human for review before anything is deleted (a dedicated page for this also lives at /privacy/delete). This covers phone-keyed customer data only — email-keyed records (e.g. our waitlist) aren't covered by this form; email [email protected] for those.
Security
All data is transmitted over HTTPS and stored in an encrypted database. Access is limited to the business owner and sched.fyi operations staff.