Privacy Policy

Effective date: 2026-06-05

Nabbee is operated by WKL Labs ("we", "us"). This Privacy Policy explains what data we collect, how we use it, and your choices. A full data-collection breakdown is maintained in our DATA_PRIVACY_MAP.

1. Who this applies to

This policy applies to customers, service providers / staff, and business owners who use Nabbee on the web or mobile app.

2. Information we collect

• Account data: name, email, phone number, password (stored only as a secure hash).
• Booking data: appointments, services, schedules, notes, and status history.
• Payment proof: screenshots/files you upload, payment method, reference number, sender name, amount, and payment date for manual payment verification (e.g. GCash, Maya, bank transfer).
• Business data (owners/providers): business name, address, hours, services, staff, and payout/account details you choose to add.
• Device & technical data: app version, device type, IP address, and crash/diagnostic logs.
• Support data: messages and attachments you send to support or disputes.

3. How we use your information

• To create and manage bookings and appointments.
• To verify manual payment proofs and prevent fraud (duplicate-reference and duplicate-file detection, amount checks).
• To send transactional notifications (booking, payment, and account updates).
• To provide customer support and resolve disputes.
• To keep the service secure and comply with legal, tax, and accounting obligations.

4. Legal bases

We process data to perform our contract with you, for our legitimate interests in operating and securing the service, and to comply with legal obligations.

5. Sharing

We do not sell your personal data. We share data only with: the business/shop you book with (or its staff), service providers that host and operate Nabbee on our behalf (e.g. hosting, email delivery, automated screenshot analysis), and authorities where required by law.

6. Automated processing of payment screenshots

Uploaded payment screenshots may be analyzed by an automated system to extract amount, reference, and sender details and to flag possible fraud. A human reviewer makes the final decision where required.

7. Retention

We keep booking, payment, and audit records for as long as needed to provide the service and to meet legal, tax, accounting, fraud-prevention, and dispute-resolution obligations. When you delete your account we soft-delete and anonymize your profile while retaining records we are legally required to keep (see our Refund/Cancellation and account-deletion process).

8. Your rights

Depending on your location you may request access, correction, deletion, or a copy of your data, and you may object to or restrict certain processing. You can request account deletion in-app (Settings → Account → Delete Account) or via the web at /delete-account.

9. Security

Passwords are hashed (bcrypt). Access to sensitive endpoints is authenticated and authorized. Uploaded payment proofs are stored in access-controlled storage and served only to authorized users.

10. Children

Nabbee is not directed to children under 13 (or the minimum age in your jurisdiction).

11. Changes

We may update this policy and will revise the effective date. Material changes may require renewed consent.

12. Contact

Privacy questions: hello@wkllabs.com. General support: hello@wkllabs.com.