Privacy Policy
Effective date: April 9, 2026 · Last updated: April 9, 2026
1. Who We Are
ScheduleFriend ("we," "us," or "our") is an online scheduling platform that connects tennis coaches with students. Our service is available at schedulefriend.com. If you have questions about this policy, contact us at privacy@schedulefriend.com.
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, role (coach or student), and timezone. Coaches also provide a bio, headline, profile slug, and venue details.
Google Account Data
If you sign in with Google, we receive your name, email address, and profile picture from your Google account via OAuth 2.0. We do not receive or store your Google password.
Google Calendar Data
If you connect your Google Calendar, we access the following through the Google Calendar API:
- Free/busy information (via the
calendar.freebusyscope) to prevent double-bookings - Calendar events (via the
calendar.eventsscope) to create, update, and delete booking events on your calendar
We cache free/busy data temporarily to compute available time slots. We do not read the content, attendees, or descriptions of your existing calendar events beyond what is needed for free/busy checks.
Location & Venue Data
Coaches provide venue addresses when setting up courts. We use Google Maps and Google Places APIs to geocode addresses and display maps. We store venue addresses, coordinates, and Google Place IDs. We do not track your real-time location or collect background location data.
Booking Data
When a booking is made, we store the lesson type, date, time, venue, status, and any notes provided. Cancellation records (reason, timestamp) are also stored.
Notification Preferences
We store your preferences for receiving email and SMS notifications about bookings, reminders, and cancellations.
Mobile Phone Number & SMS Consent
If you opt in to receive SMS notifications, we collect your mobile phone number and the date and time of your consent. This information is used solely to send appointment-related text messages (booking confirmations, reminders, and cancellation notices). We will not share your mobile phone number, SMS opt-in data, or consent information with any third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, both internal and external. You may opt out at any time by replying STOP to any message or disabling SMS in your notification settings. For more details, see our SMS Messaging Terms.
Automatically Collected Information
When you use our service, our hosting provider may automatically collect standard web server logs including your IP address, browser type, operating system, and referring URL.
3. How We Use Your Information
- Provide the scheduling service — match coaches with students, compute available time slots, process bookings
- Sync your calendar — create, update, and delete Google Calendar events when bookings are made, modified, or cancelled
- Send notifications — booking confirmations, reminders, and cancellation notices via email and SMS
- Display venue maps — show court locations on booking and venue management pages
- Improve our service — diagnose technical issues and improve reliability
4. Actions We Take on Your Behalf
When you connect your Google Calendar, ScheduleFriend will:
- Create a calendar event when a booking is confirmed
- Update a calendar event when booking details change
- Delete a calendar event when a booking is cancelled
These actions are performed only at your direction (by connecting your calendar) and only for bookings associated with your account.
5. Google API Services Usage Disclosure
ScheduleFriend's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Third-Party Services
We use the following third-party services to operate ScheduleFriend. Each has its own privacy policy governing its handling of your data:
- Supabase — database hosting and authentication (privacy policy)
- Google — OAuth sign-in, Calendar API, Maps API, Places API (privacy policy)
- Resend — transactional email delivery (privacy policy)
- Twilio — SMS notifications (privacy policy)
- Vercel — web hosting and deployment (privacy policy)
We do not sell your personal information to third parties. We do not use your data for advertising or share it with data brokers.
7. Data Retention
We retain your personal information for as long as your account is active and as needed to provide you with our services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, financial, or compliance purposes.
Booking records may be retained in anonymized form for aggregate reporting purposes after account deletion.
8. Data Security
We take reasonable measures to protect your data, including:
- All data transmitted over HTTPS (TLS encryption in transit)
- Database encryption at rest
- OAuth 2.0 for all third-party integrations (we never handle your Google password)
- Row-level security (RLS) policies ensuring users can only access their own data
- Passwords hashed and managed by our authentication provider (Supabase Auth)
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your personal data
- Portability — request your data in a machine-readable format
- Objection — object to processing of your data for certain purposes
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at privacy@schedulefriend.com. We will respond within 30 days.
California Residents (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.
EU/EEA/UK Residents (GDPR)
We process your data on the following legal bases: performance of a contract (providing the scheduling service), legitimate interests (improving our service, preventing fraud), and consent (where applicable, such as connecting third-party integrations). You have the right to lodge a complaint with your local data protection authority.
10. Cookies & Local Storage
ScheduleFriend uses the following browser storage:
- Authentication cookies — session cookies set by Supabase Auth to keep you signed in
- Language preference — a localStorage item (
i18nextLng) that remembers your preferred language
We do not use third-party tracking cookies, analytics services, or advertising pixels.
11. Location Data
We use Google Maps and Google Places to display venue locations and provide address autocomplete. Venue addresses and coordinates are stored to show maps on booking pages. We do not collect or track your real-time or background location. Your use of Google Maps features is also governed by the Google Privacy Policy.
12. Children's Privacy
ScheduleFriend is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child under 16, please contact us at privacy@schedulefriend.com and we will promptly delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. For material changes, we will notify you by email. Your continued use of the service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us at privacy@schedulefriend.com.