Updated 28 September 2026.
Draft. The company details in brackets are still to be filled in, and the wording has not yet been reviewed by a lawyer.
[company legal name], tax ID [NIF], [registered address], runs the Serenity app and is responsible for your data. Write to us at [support email].
Name, email, mobile number, password (stored scrambled) or Google sign-in
Why: Your account. The number confirms it is you and carries booking updates from us.
How long: Until you delete your account
Health answers: conditions, pregnancy, allergies, notes, areas to focus on or avoid
Why: So the treatment is safe for you. You choose what to tell us, and can clear it at any time.
How long: Until you change them or delete your account
Addresses, floor and door, how to get in, and the point on the map
Why: So a therapist can find the right door.
How long: Until you delete them or your account
Your location, when you allow it
Why: To place a new address where you are standing. Not tracked afterwards.
How long: Only as the address you save
Bookings: treatment, date, time, price, therapist, rating and tip
Why: To run the booking, and because a sale is a tax record.
How long: 6 years, as tax law requires. Kept without your name if you delete your account
Payments: amount, method, and your card’s brand, last four digits and expiry
Why: To charge for the treatment. Card numbers go directly to Stripe and never reach us.
How long: 6 years, as a tax record
Messages and in-app calls with your therapist
Why: The only way the two of you can talk. Calls travel directly between the two phones and are not recorded; we keep only when they happened.
How long: Until you delete your account
Your location while travelling to an accepted job, including with the screen off
Why: So the customer can see you coming and knows when to expect you. It stops when the treatment starts.
How long: Only your latest position is kept
Shifts, jobs and earnings
Why: To pay you and keep the accounts.
How long: 6 years, as a tax record
A therapist sees your first name, your address, how to get in, and the health notes that change the treatment — only while they are doing your booking, never before or after. They never see your number or email. We do not sell data, show ads, or use tracking or analytics services. These companies process data for us and only for this:
Stripe
For: Card payments. Receives your card details and the amount.
Vercel and Supabase
For: Host the app (in Dublin) and its database (in Ireland).
OpenStreetMap (Nominatim)
For: Turns a typed address into a point on the map, and back.
OSRM
For: Works out the driving route from the therapist to you.
OpenFreeMap
For: Draws the map. Receives your device’s internet address, like any website you load.
You can ask for a copy of your data, have it corrected, restrict or object to its use, take it elsewhere, and withdraw consent for your health answers at any time by clearing them in your profile. Write to [support email]. If you are not satisfied with our answer you can complain to the Agencia Española de Protección de Datos (aepd.es).
Profile → Delete account, in the app or on the web at /delete-account. It happens straight away. Everything that identifies you is removed; the record that a treatment was sold is kept without your name, as tax law requires.