Privacy Policy

Privacy Policy

Last updated: 2026-08-07

Dorak is an appointment platform: businesses use it to manage their calendar, clients and memberships, and customers use it to find businesses and book appointments after verifying their phone number once over WhatsApp. This page explains, in plain language, what information Dorak collects, why, and what we do — and don’t do — with it. It applies to our websites, booking pages and mobile apps. The rules for using Dorak itself live in our Terms of Service.

1. Who we are

Dorak (“Dorak”, “we”, “us”) operates the Dorak apps, the Dorak booking pages and the business directory. For anything privacy-related, write to [email protected] — we read every message.

2. Information we collect

If you are a business owner:

• Your name, email address and password. Passwords are stored only as a cryptographic hash — we cannot see or recover the original.
• Your business details: business name, address, services and prices, working hours, logo and photos, brand colours, social links and booking settings.

If you are a customer:

• Your phone number, verified once with a one-time code delivered over WhatsApp.
• Your name, if you choose to share it when booking.
• Your bookings: which service, with which business, when, and their status (confirmed, cancelled and so on).
• The places you save.

Client records kept by businesses: a business can keep records about its own clients — typically a name, phone number, email and private notes. That information belongs to the business’s relationship with its clients: the business is responsible for it, and Dorak stores and processes it on the business’s behalf, only to provide the service. If a business added information about you that you would like corrected or removed, the quickest route is the business itself — and we help businesses honour such requests.

Technical data: like nearly every online service, our servers keep basic technical logs (for example, an IP address and the time of a request), used only to operate, debug and secure the service.

3. What we don’t do

• We show no ads.
• We never sell or rent personal data.
• Our apps and sites contain no third-party tracking or advertising SDKs.

4. How we use information

For one purpose: running Dorak. Concretely — creating accounts and signing you in, delivering verification codes over WhatsApp, showing businesses their calendar and client list, placing and managing bookings, sending confirmations and reminders, tracking membership sessions, preventing fraud and abuse, and answering support requests.

5. Who we share data with

A small number of providers help us run Dorak. They process data for us and may not use it for their own purposes:

• Hosting — our servers and database run with a cloud hosting provider.
• WhatsApp — verification codes and booking-related messages are delivered through the Meta WhatsApp Business API, so your phone number and the message content pass through Meta’s infrastructure for delivery.
• Push notifications (planned) — when we add push notifications, they will be delivered via Google Firebase Cloud Messaging, and we will update this policy at that point.

Beyond that, we disclose information only where the law requires it, or to protect our users or the service.

6. What businesses see about you

Dorak is two-sided, so some sharing is simply the product working: when you book with a business, that business sees your name, your phone number and your booking details, plus your booking history with them — exactly what an appointment book has always held. A business never sees your activity with other businesses, and your saved places are visible only to you.

7. How long we keep data

• Verification codes are short-lived and purged automatically once used or expired.
• Bookings are retained as part of the business’s records — like the pages of an appointment book — including after the appointment has happened.
• Account information is kept while your account exists. When an account is deleted, we delete or de-identify its data within a reasonable period, unless the law requires us to keep something.

8. Your rights

You can ask to see the data we hold about you, have it corrected, or have it deleted.

• You can delete your account directly in the app (from the settings screen) — business owners and customers alike.
• You can also email a deletion or access request to [email protected]; we honour these wherever you live.
• Records a business entered about you are that business’s responsibility — contact the business first, and we will help it comply.

9. Security and where data lives

Data is stored on our hosting provider’s servers and encrypted in transit (HTTPS/TLS). Passwords are stored only as strong hashes, verification codes are stored hashed with strict attempt limits, and access to production data is limited to people who need it to run the service. No online service can promise perfect security — but we treat your data the way we would want ours treated.

10. Children

Dorak is not directed at children under 13, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy as Dorak evolves. The date at the top always reflects the current version, and if a change meaningfully affects you we will say so clearly in the app or on this site before it takes effect.

12. Contact

Questions, requests or complaints: [email protected].