Back to homepage

Privacy Policy

Last updated: September 2026

1. Controller

Nevio Santschi

Oberbottigenweg 33a

3019 Bern

Switzerland

Email: nevio.santschi@gmail.com

2. Principle

BookCh is software for online appointment booking. We process personal data under the Swiss Data Protection Act (DSG) and only to the extent required to operate the service.

3. Two roles

a) For business customers (businesses using BookCh) we are the controller for the processing of their account and contract data.

b) For the end customer data a business records through BookCh (for example appointment bookings made by its customers), we act solely as a processor on behalf of that business. The business remains the controller for this data.

c) For customer accounts that end customers create directly with BookCh, we are the controller ourselves. This covers the account data and the details stored in the account. Bookings made at a business through such an account remain that business's data as set out in b).

4. What data we process

Business customers: name, email address, phone number, business name and address, subscription and payment status.

End customers of a business: name, email address, phone number, booked service, appointment, any notes on the booking, and the business's own notes on a completed appointment (for example products used).

Staff of a business: name and, where the business records them, email address, phone number and role.

Customer accounts: name, email address, phone number and optional notes. These notes (for example allergies) may be sensitive personal data. We store them only to pass them on to the chosen business when you book.

Sign in with Google: if you choose this option, Google gives us your name, your email address and the link to your profile picture.

Technical data: server log data such as IP address, time and page requested, arising from operating the application.

5. Purpose

The data is used solely to manage appointments, send confirmations and reminders, bill subscriptions and operate the service securely. We do not sell data and do not use it for third party advertising.

6. Service providers

We use the following service providers:

  • Supabase, database and authentication, server location Zurich (Switzerland)
  • Stripe, payment processing for subscriptions
  • Resend, sending confirmation and reminder emails
  • Vercel, hosting of the website and the application
  • Google, optional sign in with a Google account; Google's own privacy policy also applies

These service providers process data only on our behalf. Where a provider is based or runs infrastructure abroad, disclosure takes place on the basis of appropriate safeguards.

7. Retention and deletion

We retain data for as long as a business's account exists. Automatic deletion after a set period does not currently take place.

Businesses and customer accounts can delete their account themselves in the application at any time. The account data is deleted immediately, for businesses together with all of the business's data including appointments, and any running subscription ends. We keep invoices for as long as the law requires.

You can also request the deletion of your data by email to the address above, for example if you no longer have access to your account. We handle such requests within 30 days, unless statutory retention obligations prevent this. Deleted data may remain in backups and server logs for a short time until it is automatically overwritten.

8. Cookies and local storage

BookCh uses technically necessary browser storage to keep you signed in and to restore a booking you have started. We do not use advertising cookies.

9. Data security and payments

Data is transmitted encrypted over TLS. Access to the data is limited to the respective business and is enforced at database level.

Payments are handled exclusively through Stripe. Credit card and bank details are collected and processed directly by Stripe; we never receive or store this data. We hold only information on subscription status.

10. Your rights

You have the right to information, correction, deletion and to the release of your data. If your request concerns a booking with a business, please address it to that business; we support them in handling it. For all other matters you can reach us at the address given above.

11. Changes

We may amend this privacy policy. The version published on bookch.app at the time governs.