Privacy Policy

Last updated: 11 May 2026

This Privacy Policy explains how Tribi ("we", "us") collects and uses your personal data when you use the Tribi platform.

1. Data controller

Tribi is the data controller for the personal data processed through this platform. For data protection enquiries contact [email protected].

2. What we collect

  • Account data: email, name, password hash, phone, country of origin, current city, profile photo.
  • Booking data: appointments you create or receive, including time, service, price, notes, and payment method.
  • Communication data: messages exchanged through Tribi, system notifications, emails we send you.
  • Usage data: pages visited, providers viewed, IP address, browser fingerprint (for fraud prevention).

3. Why we process it

  • Service delivery — to let clients find providers and book appointments (Art. 6(1)(b) GDPR — contract).
  • Communication — to send booking confirmations, reminders, and platform notices (Art. 6(1)(b)).
  • Fraud prevention and security — to block abusive sign-ups and protect the platform (Art. 6(1)(f) — legitimate interest).
  • Marketing emails — only with your explicit consent at registration, revocable any time (Art. 6(1)(a)).

4. Retention

  • Bookings and reviews: kept for 5 years after the last interaction, for tax and dispute resolution.
  • Audit logs: kept for 90 days, then automatically deleted.
  • Security and login events: kept for 180 days.
  • Provider view history: kept for 365 days.
  • Account data: kept until you delete your account. After deletion we anonymise records that must be retained for tax/legal reasons (booking ledger).

5. Your rights

You have the right to:

  • Access your data (Art. 15) — request a copy from Settings → Download my data.
  • Rectification (Art. 16) — edit your profile at any time.
  • Erasure (Art. 17) — delete your account from Settings → Danger Zone.
  • Portability (Art. 20) — receive your data as JSON via the export above.
  • Object to marketing (Art. 21) — unsubscribe link in every marketing email, or toggle in Settings.

To exercise any right, email [email protected]. We respond within 30 days.

6. Sharing

We do not sell your data. We share it only with:

  • Service providers strictly required to run Tribi (hosting, email delivery, payments) under data processing agreements.
  • Other users as part of bookings (provider sees client name and contact; client sees provider profile).
  • Authorities when legally required.

7. Cookies

Tribi uses only essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

8. Changes

We will notify registered users by email about material changes at least 14 days before they take effect.