Krasna Studio
This policy explains what personal data Krasna Studio collects, why, who processes it for us and how you can control it. It covers the app, the booking pages and this website.
1. Who is responsible
For your account and studio, we are the controller. For the data you keep about your clients, you are the controller and we process it on your behalf, only to provide the service to you.
2. What we collect
Account: your name and email from Sign in with Apple, and your studio's name, services, prices, schedule and time zone.
Your clients: what you or they enter: names, phone numbers, email addresses, Instagram handles, appointments, private notes, photos of procedures and whether the client allowed AI analysis of her photos.
Booking page: what a client types when she books: her name, contact details, the procedure, the time and her consents.
Usage and devices: the app version, your language, a push notification token, and technical logs needed to run and secure the service. On this website your browser keeps only your cookie choice. We do not use advertising trackers.
Purchases: your subscription status from the App Store, through RevenueCat. We never see your card details.
3. Why we use it
To run your calendar and booking page, send the reminders and notifications you set up, show business figures, answer your questions in the AI assistant, review work photos when you ask for it, provide support and keep the service secure. We do not sell personal data and do not use it for advertising.
4. AI features
When you use the AI assistant or ask for a work review, the relevant data (your question and studio facts, or the procedure photos) is sent to our AI provider, Microsoft Azure OpenAI, to produce the answer. It is not used to train AI models. Photos are reviewed only for clients whose permission is recorded in the app. Please do not enter health information into the assistant.
5. Who processes data for us
We use trusted providers, each only for its task: cloud hosting and storage for the database and photos; Twilio for SMS and WhatsApp messages; Resend for emails; Expo for push notifications; Microsoft Azure OpenAI for AI features; RevenueCat and Apple for subscriptions; Stripe, when you take deposits. They process data under agreements that require them to protect it.
6. Where data is stored and how long
We keep your data while your account exists. When you delete your account in the app (Settings › Delete account), your studio, clients, appointments, photos, messages and assistant history are deleted. Some records may be kept longer where the law requires it.
7. Security
Data travels encrypted, photos are stored privately and are reachable only through short-lived links, and access within our team is limited to what is needed to run the service.
8. Your rights
Depending on where you live, including under the GDPR, you can ask to access, correct, export or delete your data, object to or restrict its use, and complain to your data protection authority. Clients of an artist should first contact the artist, who controls their data; we will help the artist answer. To make a request, write to [email protected].
9. Children
The service is for professionals and is not meant for anyone under 16.
10. Changes
We will update this policy as the service changes and tell you in the app or by email about significant changes. The date at the top shows the latest version.
11. Contact
Privacy questions and requests: [email protected].