Privacy Policy

Effective Date: 01.01.2026

Introduction

Welcome to AMFY! Maksim Kuzhelev pr RING-DOVE, Mite Ruzica 2, Novi Sad ("The Company," "We," "Us," or "Our") is committed to protecting the privacy of Our users ("You," "Your"). This Privacy Policy explains how We collect, use, disclose, and safeguard Your information when You use Our Application and related services ("Platform").

We comply with applicable privacy laws, including the California Consumer Privacy Act (CCPA), if legally required. If You are a California resident and have questions about Your privacy rights, You may contact Us at support@amfy.app.

By using Our Platform, You confirm that You are at least 18 years old and acknowledge that You have read and agree to the terms of this Privacy Policy. If You do not agree, You must discontinue using Our Platform.

Our Platform is intended for use exclusively in the United States due to legal and regulatory considerations. Currently, Our mobile Application is only available for download in the United States through Google Play and the Apple App Store. While We incorporate compliance with certain international regulations, Our Platform is not officially offered outside the United States. We may expand availability to additional regions in the future.

1. Age Restriction

Our Platform is intended for users who are 18 years of age or older. By using Our Platform, You confirm that You are at least 18 years old. We do not knowingly collect, store, or process Personal Data from individuals under 18. If We become aware that We have inadvertently collected such information, We will take prompt steps to delete it.

If You are a parent or guardian and believe that Your child has provided Us with Personal Data, please contact Us at support@amfy.app. We will take appropriate action, including data deletion, as required by applicable laws.

2. Definitions

Words with capitalized initial letters have the meanings defined below. These definitions apply regardless of whether the terms appear in singular or plural form.

Account means a unique account created for You to access Our Platform or specific features of Our Platform.
Affiliate means any entity that controls, is controlled by, or is under common control with a party. "Control" means direct or indirect ownership of at least 50% of the voting rights or equity interest in such entity.
Application refers to AMFY, the software program provided by the Company.
Company (referred to as "the Company," "We," "Us," or "Our" in this Agreement) refers to Maksim Kuzhelev pr RING-DOVE, Mite Ruzica 2, Novi Sad.
Device means any electronic device capable of accessing the Platform, including but not limited to computers, mobile phones, and tablets.
Personal Data means any information that relates to an identified or identifiable individual, as defined under applicable privacy laws.
Platform refers to the AMFY Application and all related services, features, and functionalities provided by the Company.
Service Provider means any natural or legal person that processes data on behalf of the Company. This includes third-party companies or individuals hired to facilitate, operate, or provide services related to the Platform, such as hosting, analytics, customer support, payment processing, or other business operations.
Usage Data refers to data collected automatically through the use of the Platform or from the Platform infrastructure itself (e.g., duration of a page visit, device identifiers, or IP addresses).
You means the individual accessing or using the Platform, or the company or other legal entity on behalf of which such individual is accessing or using the Platform, as applicable.
User Content means any Content uploaded, submitted, or shared by a User through the Platform.
Owner means an individual or organization that provides services through the Platform, such as haircuts, nail painting, or similar personal or professional services. An Owner may operate as a business entity or an independent entrepreneur.
Specialist means an individual user who performs services on behalf of an Owner. Specialists may be employees, contractors, or independent professionals offering services under an Owner's business.
Admin means an individual user responsible for managing an Owner's Account, services, or appointments within the Platform. Admins may also be Specialists who have administrative privileges.
Client means an individual user who books and receives services from Owners or Specialists through the Platform.

3. Data Storage and Jurisdiction

Data Storage by Region:

Personal Data of users in the European Union (EU) is stored exclusively on Our EU server located within the European Union.
Personal Data of users in the United States (US) is stored exclusively on Our US server located in the United States.
Backups, logs, and analytics data are retained within their respective regions unless legally required to be stored elsewhere.

Cross-Border Transfers: We do not transfer Personal Data across borders unless strictly necessary (e.g., for global analytics, fraud prevention, or customer support) or with Your explicit consent. In such cases, We implement appropriate legal safeguards in compliance with applicable data protection laws, such as Standard Contractual Clauses (SCCs) under the GDPR or equivalent mechanisms recognized by relevant authorities.

4. Information We Collect

4.1. Information You Provide

Account Information: While using Our Platform, We may collect Your first and last name, email address, phone number, and other required details. In some cases, We may request Your birth date to verify age eligibility or enable certain features.
User Content: Photos, text, and other content You upload while using the Platform.
Payment Information: If applicable, payment data processed through third-party providers (e.g., Apple, Google). We do not store or process full payment details such as credit card numbers.

Depending on Your role (Owner, Specialist/Admin, or Client), We may collect additional information:

Owners: Business registration details, public profile data, and service-related information.
Specialists/Admins: Work schedules, availability, and service preferences.
Clients: Booking history, Platform preferences, and service interactions.

4.2. Appointment Data & Restrictions

Our Platform allows users to make appointments on behalf of others, including minors. However, You must not enter any Personal Data of a minor (such as full name, birthdate, or contact details) into the comments field or any other part of the Platform.

Prohibited Data Entries: You are solely responsible for ensuring that no personally identifiable information (e.g., full names, birthdates, contact details) of minors or non-registered Clients is entered into the system. The Company does not verify appointment details and is not liable for any unauthorized entry of minor or third-party data.

If You violate this rule, Your content may be removed, and Your account may be suspended or terminated. Further legal consequences may apply in accordance with applicable data protection laws.

4.3. Specialists Adding Appointments for Non-Registered Clients

Registered users (Specialists) may add appointments for Clients who do not have an Account. However, Specialists must not enter personally identifiable information (such as full names, birthdates, or contact details) for these Clients. Only general appointment notes may be recorded.

Specialists are solely responsible for ensuring compliance with this restriction. The Company does not verify appointment details and is not liable for any unauthorized entry of minor or third-party data. Any violation of this rule may result in content removal, account suspension, or legal consequences in accordance with applicable laws.

4.4. Information Collected Automatically

Usage Data: We may collect information such as Your IP address, browser type, browser version, the pages You visit on Our Platform, the time and date of Your visit, the duration of Your visit, Device type, operating system, unique Device identifiers, and usage patterns.
Location Data: With Your explicit consent, We may collect Your geographic location for Platform functionality, such as service discovery and navigation.

4.5. Data from Third-Party Services

We may receive additional data from Third-Party Services, such as Google or Apple, in connection with features like analytics, authentication, or Platform integrations.

5. How We Use Your Information

To Provide and Maintain the Platform: Ensure functionality, process transactions, deliver content, and monitor usage.
To Personalize Your Experience: Customize content, features, and recommendations based on Your preferences.
To Ensure Security and Compliance: Detect, prevent, and address fraud, unauthorized access, security issues, and violations of applicable laws.
To Communicate with You:
- Send updates about Our Platform, new features, promotions, or general informational messages.
- Respond to Your inquiries, feedback, or support requests.
- Notify You about technical events, scheduled maintenance, security alerts, or other critical updates relevant to Your use of the Platform.
For Analytics and Improvement: Conduct data analysis, track usage trends, evaluate marketing effectiveness, and enhance Platform functionality, products, and user experience.
To Comply with Legal and Regulatory Requirements: Fulfill Our legal obligations, such as tax reporting, record-keeping, and responding to lawful requests from authorities.

5.1. Legal Basis for Processing (GDPR)

We process Your Personal Data under the following legal grounds:

Contractual Necessity: To provide and fulfill Our obligations under Our Terms of Service (e.g., account creation, appointment management).
Consent: For processing optional data (e.g., birthdate, location) or sending marketing communications.
Legitimate Interests: To improve Our Platform, detect and prevent fraud, and ensure security.
Legal Obligations: To comply with applicable laws, regulations, and legal processes (e.g., tax reporting, law enforcement requests).

6. How We Share Your Information

We do not sell Your Personal Data to third parties. We do not share Your data for advertising, marketing, or commercial gain unrelated to service fulfillment. We may share Your information in the following circumstances:

With Service Providers: We engage trusted Third-Party Service Providers to assist in delivering Our Platform. These providers may include hosting services (e.g., GoDaddy), analytics providers (e.g., Google Analytics), and payment processors (e.g., Stripe, PayPal, Apple Pay, Google Pay). These Service Providers process Your information solely on Our behalf and in accordance with Our instructions.
For Business Transfers: If We are involved in a merger, acquisition, or sale of all or part of Our business, Your information may be transferred to the acquiring entity. If required by law, We will provide notice and an opportunity to opt out.
With Affiliates: We may share Your information with Our Affiliates, including parent companies, subsidiaries, joint ventures, or other entities under common control with Us. Any Affiliate receiving Your information must comply with this Privacy Policy.
With Business Partners: We may share Your information with partners that offer integrated or complementary services within Our Platform. For example, We may share limited Client information with Owners or payment processors to facilitate bookings. This sharing occurs only with Your explicit consent or as necessary to fulfill a service request.
For Legal Compliance: We may disclose information to comply with applicable laws, respond to lawful requests from public authorities, or protect Our legal rights, prevent fraud, and ensure the safety of Our users.
With Other Users: If You voluntarily share personal information in public areas of the Platform, such as reviews or comments, it may be visible to other users and publicly accessible.
With Your Consent: We will share Your information with third parties when You explicitly agree to such sharing.

Sharing for Service Fulfillment: To facilitate bookings and service delivery, certain Client information (e.g., name, appointment details) may be shared with Owners or Specialists/Admins. This data sharing is strictly limited to what is necessary to fulfill requested services and does NOT constitute a "sale" under the California Consumer Privacy Act (CCPA).

We only share Your information with third parties under the following circumstances:

With Your Consent: When You explicitly agree to data sharing with other parties.
To Fulfill a Contract: When necessary to provide services, process transactions, or otherwise fulfill Our contractual obligations.
For Legitimate Business Interests: When required to improve Our Platform, ensure security, prevent fraud, or support essential business operations.
For Legal Compliance: When required to comply with applicable laws, respond to legal requests, or protect Your vital interests.

7. Data Retention

We retain Your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. This includes compliance with legal obligations (e.g., tax or regulatory requirements), dispute resolution, and enforcement of Our legal agreements and policies.

Retention Periods:

General Account Data: If You delete Your Account, all personally identifiable information (PII) will be anonymized within 7 days. Once anonymized, this data will no longer be linked to any identifiable individual and will exist only in an aggregated or de-identified form.
Usage Data: Information collected for security, analytics, and operational purposes (such as logs and usage records) will be retained for up to 50 days before permanent deletion.

In certain circumstances, We may retain some data beyond these periods if required to comply with applicable laws, regulatory obligations, or for legitimate business purposes, such as fraud prevention or security monitoring. In such cases, the retained data will be stored securely and restricted to the specific purpose requiring extended retention.

8. Transfer of Your Personal Data

Your Personal Data is currently stored and processed within its respective region (see Section 3). We do not transfer Personal Data across borders at this time.

However, if We engage in cross-border data transfers in the future, Your Personal Data may be processed, stored, or transferred to locations outside Your state, province, country, or other jurisdiction, where data protection laws may differ. In such cases, We will ensure that all transfers comply with applicable data protection laws by implementing appropriate safeguards, such as:

Standard Contractual Clauses (SCCs): If required, We will use SCCs approved by the European Commission to ensure adequate protection for data transferred outside the EU.
Adequacy Decisions: Where applicable, We will transfer data only to jurisdictions recognized by the European Commission as providing an adequate level of data protection (e.g., the EU-U.S. Data Privacy Framework).

By using Our Platform and providing Your information, You acknowledge that Your Personal Data may be transferred internationally if We engage in cross-border data transfers in the future. If We initiate cross-border transfers, We will notify You in advance and ensure compliance with applicable data protection laws.

Where legally required, You will have the option to opt out of such transfers. If You choose to opt out, You may be required to discontinue using Our Platform and request account deletion.

We take reasonable steps to ensure that all Personal Data is handled securely and in accordance with this Privacy Policy. If You have any questions about how We handle data transfers, You may contact Us for further details.

9. Delete Your Personal Data

You have the right to request the deletion of the Personal Data that We have collected about You.

Our Platform provides tools to manage and delete Your information. You can delete Your Account directly from within the Application or by visiting https://amfy.app/app/delete-account.

When You delete Your Account:

Clients: Personal Data (such as name and contact information) will be anonymized. Service history (e.g., past appointments) will be retained in anonymized form without any Personal Data for record-keeping purposes.
Specialists: Personal profiles will be anonymized. Earnings records and appointment data will be retained without any personal identifiers.
Admins: Personal Data related to administrative actions will be anonymized. Data necessary for Owner account management will be retained without personal identifiers.
Owners: All Personal Data, including names, contact information, and any business-related information (such as business name, descriptions, or service listings), will be anonymized. Public profiles and listings will be modified to remove any identifiable information. No Personal Data will remain publicly available.

Important: Certain information may be retained where required by applicable law (e.g., tax, accounting) or for legitimate business purposes such as fraud prevention or dispute resolution. In such cases, data will be securely stored and limited to the specific purpose that requires retention.

10. Disclosure of Your Personal Data

Business Transactions: If the Company is involved in a merger, acquisition, sale of assets, or other business transfer, Your Personal Data may be transferred to the acquiring entity. In such cases, We will make reasonable efforts to ensure that the new owner handles Your Personal Data in accordance with this Privacy Policy. We will notify You of such changes, and where required by law, provide You with the option to delete Your Account and Personal Data if You do not agree with the new policies.
Law Enforcement: The Company may disclose Your Personal Data if required to do so by law or in response to valid legal requests from public authorities, such as court orders, subpoenas, or government investigations.
Other Legal Requirements: The Company may disclose Your Personal Data in good faith when such disclosure is necessary to:
- Comply with a legal obligation or regulatory requirement.
- Protect and defend the rights, property, or safety of the Company, its users, or others.
- Prevent, detect, or investigate potential wrongdoing in connection with the Platform.
- Ensure the personal safety of users of the Platform or the public.
- Protect against legal claims or liabilities.

11. Your Rights

11.1. Overview of Your Data Rights

Access and Correction: You may access and update Your Personal Data directly through Your Account settings.
Deletion: You can delete Your Account at any time from within the Application or by visiting https://amfy.app/app/delete-account.
Data Portability (GDPR): You may request a copy of Your Personal Data in a structured, commonly used, and machine-readable format.
Restriction and Objection (GDPR): You have the right to object to the processing of Your Personal Data for direct marketing purposes at any time. If You prefer not to receive promotional messages, You can adjust Your preferences in the Application settings or opt out of marketing communications.
Non-Discrimination (CCPA): We will not discriminate against You for exercising Your rights under CCPA (e.g., by denying services, charging different prices, or providing a different quality of service).
Opt-Out of Sale (CCPA): We do not sell Your Personal Data. Therefore, no opt-out mechanism is required under CCPA.

11.2. How to Exercise Your Rights

You may exercise Your data rights directly through Our Platform. Both the mobile Application and Our website provide secure tools that allow You to manage, access, correct, and delete Your Personal Data without the need to contact Us separately.

You can access the dedicated page for managing Your data rights here: Privacy Center.

For security reasons and to prevent unauthorized access to Your data, We only process data rights requests submitted through Your authenticated user Account in the mobile Application or via Our official website.

11.3. Response Time and Additional Information

Most data rights requests (such as account deletion or data access) are processed automatically and immediately through Our Platform. However, under applicable laws, We may take up to 30 days (or up to 45 days for CCPA requests, if an extension is needed under applicable law) to fully respond in exceptional cases.

In addition to the rights listed above, please note that We will not deny services, impose penalties, or provide a lower quality of service if You exercise Your rights under CCPA or GDPR. However, as permitted by law, We may charge a reasonable fee for requests that are excessive, repetitive, or unfounded.

12. Children’s Privacy

Our Platform is intended for users who are 18 years of age or older. We do not knowingly collect Personal Data from individuals under 18.

We restrict access to users 18 years of age or older in compliance with applicable laws.
We comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect, use, or disclose Personal Data from children under 13.

In jurisdictions following the General Data Protection Regulation (GDPR), we do not collect data from anyone under the age of digital consent (typically 16, but may vary by country).

COPPA Compliance

Although our Platform is designed exclusively for adults (18+), we take additional precautions to ensure compliance with COPPA and protect children under 13:

We do not offer features, content, or services directed to children under 13.
We do not permit anyone under 13 to create an Account, use the Platform, or submit any Personal Data.

Parental and Guardian Rights

If You believe that a child under 13 has provided Personal Data to Us without parental consent, You should contact Us immediately at support@amfy.app. Please include the following:

A description of the Personal Data You believe was submitted.
Proof of Your relationship to the child (e.g., birth certificate, legal guardianship).

Once verified, We will investigate and take appropriate action to remove the data within 7 days.

Data Deletion Process

If We become aware that We have inadvertently collected Personal Data from a child under 13, We will:

Disable and delete any associated Account (if applicable).
Remove Personal Data from active systems.
Retain only anonymized or aggregated data if required for legal compliance (e.g., security logs), without identifying the individual.

13. Publicly Available Owner and Specialist Data

By using Our Platform as an Owner or Specialist, You acknowledge and agree that certain business-related information may be made publicly available or visible to signed-in users, depending on Your role and chosen settings.

13.1. Public Website (Accessible to Everyone)

Some Owner and Specialist business-related information may be publicly displayed on a web server, accessible to anyone without an Account. This may include, but is not limited to:

Business profile information, such as name, description, and contact details (if explicitly provided for public display).
Offered services, including service descriptions and pricing (if applicable).
Working hours and availability.
Business location (e.g., address or service area).

We do not publish private contact details such as personal phone numbers or home addresses unless You explicitly choose to make such information public.

13.2. Inside the Mobile Application & Web App (Accessible to Signed-In Users)

Within the mobile Application and web App, certain business-related Owner and Specialist data may be visible to all signed-in users, including Clients, Owners, and Specialists. This information is necessary to facilitate appointment scheduling, service discovery, and communication between users.

13.3. Managing Public Data Visibility

Owners and Specialists may control the visibility of their publicly available business-related information directly through settings in the mobile Application.

14. Security of Your Information

We use commercially reasonable technical and organizational measures to safeguard Your Personal Data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee absolute security.

Data Breach Notification: In the event of a data breach likely to result in a risk to Your rights and freedoms, We will notify affected users and relevant authorities without undue delay and, where required, within 72 hours (as required by GDPR). For U.S. residents, We will notify affected users in compliance with applicable U.S. state laws, including the California Data Breach Notification Act, which requires notification without unreasonable delay. Where specific timeframes apply (e.g., Florida’s 30-day requirement), We will comply with the applicable state law.

15. Handling User Content

Users retain all rights to the User Content they upload or submit to the Platform. However, by uploading User Content, Users grant the Company a non-exclusive, worldwide, royalty-free license to use, store, reproduce, distribute, and display such User Content solely for operating and improving the Platform. This license ends when Users delete their User Content or terminate their Account. However, User Content shared with others or incorporated into public features (e.g., comments or reviews) may remain visible after deletion, as permitted by applicable laws.

Users are responsible for ensuring their User Content complies with all applicable laws, does not infringe on intellectual property or privacy rights, and avoids offensive, harmful, or illegal material, including but not limited to:

Violent, graphic, or disturbing User Content
Sexually explicit materials or nudity
User Content promoting illegal activities
Hate speech, harassment, or defamation
Intellectual property infringement (e.g., copyrighted images)
Fraudulent, misleading, or deceptive User Content
Spam, scams, or phishing attempts
Content promoting self-harm, suicide, or violence against oneself or others
Depictions of cruelty, including animal abuse
Unauthorized sharing of personal, private, or confidential information of others

For a detailed list of prohibited User Content, please refer to Our End User License Agreement (EULA).

By uploading User Content, Users affirm they have the rights to distribute it, will not post prohibited material, and take full responsibility for the User Content they upload. The Company is not liable for User Content or any resulting legal disputes.

The Company reserves the right to review, remove, or disable User Content that violates these terms. Violations may result in User Content removal, Account suspension, or termination. If Users believe that User Content infringes their rights, they may contact Us at support@amfy.app with the following:

Description of the alleged infringing User Content
Proof of ownership or rights to the User Content
A sworn statement asserting the claim in good faith under penalty of perjury

Users agree to indemnify the Company against legal claims arising from their uploaded User Content. By using the Platform, Users accept these guidelines and are solely responsible for compliance.

Public reviews or comments, as part of User Content, may remain visible after Account deletion to maintain service transparency, unless they violate Our terms.

The Company is not liable for damages arising from User Content, except where required by law.

16. Intellectual Property & Content Removal Requests

We respect intellectual property rights. If You believe that content on the Platform infringes Your copyright or other intellectual property rights, please follow the procedure set out in Section "Intellectual Property Infringement Policy" of our End User License Agreement (EULA).

17. Third-Party Services and Links

Cookie Policy: Our website may use cookies and similar technologies. For more details, please review Our Cookie Policy.

Tracking Technologies: Our mobile Application does not use cookies, web beacons, advertising IDs, or similar tracking technologies. Some technical data (such as device type or OS version) may be collected for security, analytics, or purchase processing. We do not collect device identifiers for advertising purposes.

Our Platform may include integrations with trusted Third-Party Services (e.g., Firebase, Google, Apple) to support analytics, payments, and other functionalities. When You use services like Firebase, Google Pay, or Apple Pay, these providers act as independent data controllers for processing payments and handling data according to their own privacy policies. We do not control their data practices and recommend reviewing their privacy policies directly.

Below are links to the privacy policies of Third-Party Services we currently use:

If You click on a third-party link, You will be directed to that third party’s site. We encourage You to review the privacy policy of every site You visit to understand their data handling practices.

We may integrate additional Third-Party Services in the future to enhance functionality. If We do so, this Privacy Policy will be updated accordingly, and users will be notified. Please note that such Third-Party Services will act as independent data controllers, and their use will be governed by their respective privacy policies.

18. Updates to This Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time. Changes will become effective upon posting on the Platform, unless otherwise specified. We encourage You to review this Privacy Policy periodically to stay informed of any updates.

If any changes materially affect Your rights or obligations, We will make reasonable efforts to notify You, such as by posting a notice within the Platform or sending an email to registered users. Your continued use of the Platform after the updated Privacy Policy becomes effective constitutes Your acceptance of the revised terms. If You do not agree to the updated terms, You must stop using the Platform.

19. Contact Us

If You have any questions, concerns, or requests regarding this Privacy Policy, You may contact Us using the following details:

Email: support@amfy.app
Mailing Address: Republic of Serbia, 21101 Novi Sad, Mite Ruzica 2

20. Additional Disclosures for California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the following rights:

The right to know the categories of Personal Data We collect, disclose, or share for a business purpose (see Section 4).
The right to request the deletion of Personal Data (see Section 9).
The right to opt out of the "sale" of Personal Data (note: We do not sell Personal Data).

We do not sell or share Your Personal Data for advertising, marketing, or commercial gain. When We share Client appointment details with Owners or Specialists to facilitate bookings, this is solely to fulfill the requested services and does not constitute a 'sale' under CCPA.

To exercise Your CCPA rights, including access or deletion requests, You can manage Your data directly through the mobile Application under the settings menu or by visiting Our Privacy Center: Privacy Center.

21. U.S. Legal Notice

The Company is registered in Serbia and operates under Serbian law. Although registered in Serbia, We serve users in the United States and comply with applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA), when legally required.

California residents may exercise their data rights (such as access, deletion, or correction requests) exclusively through the tools available in the mobile Application or via Our official website at Privacy Center.

Thank You for using AMFY. If You have any questions or concerns regarding this Privacy Policy, please feel free to contact Us.