Effective 18 October 2026
BookVanity ("the app") is operated by DevGud Technologies, Shiva Heights, Raipur, Chhattisgarh, India, 492001 ("we", "us"). For any privacy question or request, contact support@devgud.com.
BookVanity is a booking book for makeup artists. You can use the app fully offline. You create an account once with a verified email. On the free plan your bookings, notes and photos stay on your device and we never receive them. Your bookings only reach our servers while you are on a free trial or a paid plan, so we can back them up and sync them.
Email address (also used as your username), password (stored only as a salted hash — we never see it), your name, business name and mobile number, whether your email is verified, and your invite (referral) code and who joined with it. One-time email codes are stored only as a keyed hash and expire after 10 minutes.
So we can back it up and sync it across your devices, we store the bookings and enquiries you create: client or contact name, phone number, event type and name, dates, venue and city/state/country, prices and amounts received, payment status, and any notes you write.
This includes personal data about your clients. You decide what to enter; you are responsible for having a lawful basis to record it, and for telling your clients. We process it only to provide the service to you.
You can attach up to two photos to each event of a booking. They are made smaller on your device. On the free plan they stay on your device. On a trial or paid plan they are also stored in a private cloud bucket that only your account can reach. If you share a booking as text, the app creates links to those photos that expire after 90 days and stop working as soon as you delete the photo.
Business logo, social links (Instagram, Facebook, YouTube, website) and your card design settings.
Subscription plan, status, amounts, currency, and a transaction reference from our payment provider. We do not store your card details — those go directly to the payment provider.
A push-notification token for your device (so we can send account messages and announcements), and the read/unread state of those messages. Booking reminders, enquiry nudges and the month-end summary are created on your device and work without internet.
To show a booking's venue on a map, the venue text (e.g. "Taj Vivanta, Raipur") is looked up by your phone's own location service (Google on Android, Apple on iOS), and map images are loaded from OpenStreetMap, which sees your device's IP address. We do not track your location.
We do not sell your data. We do not use it for advertising. We do not run third-party advertising or tracking SDKs in the app.
Read this carefully. If you are on a trial or paid plan and
you share your digital card, we publish a public web page at
/p/<your-handle>/. Anyone with the link can see whatever you
put on the card: your name, business name, logo, social links, and the phone
number and email you chose to display. It is public by design and may be indexed
by search engines. Your bookings and client data are never on that page.
You can retire the page at any time by deleting your cloud data or your account.
Where India or other applicable law requires a legal basis, we rely on performance of our contract with you, and on our legitimate interest in keeping the service secure.
Only the processors needed to run the service, acting on our instructions:
We also disclose data if the law compels us to.
We keep your synced data until you delete it. If your free trial ends without a subscription, we do not delete what you have already synced — we keep it so it is waiting for you if you subscribe later, and we stop syncing new changes in the meantime.
Database backups are kept for 30 days and then deleted automatically, so data you delete can remain in a backup for up to 30 days. You can erase it at any time — see the next section. After you delete your account we deactivate it immediately and remove your personal data within 30 days, except records we must keep for tax, accounting or fraud-prevention purposes — which includes a one-way hash of your email address if you used the free trial, so it cannot be claimed twice. See "What we keep, and why" below.
You can access, correct, export or delete your data:
Depending on where you live you may also have the right to object, to restrict processing, or to complain to your data-protection regulator.
Traffic is encrypted with HTTPS (enforced). Passwords and email codes are stored as hashes, photos are kept in private storage, and sign-in is rate limited. Sessions use signed tokens held in your device's secure keystore (Keychain / Android Keystore). Every server request is authenticated and scoped to your own account. No system is perfectly secure, but we take this seriously.
BookVanity is a tool for working professionals and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, contact us and we will remove it.
Our servers are hosted in India (AWS ap-south-1). If you use the app from elsewhere, your data is transferred to and processed there.
If we change this policy we will update the date below and, for material changes, tell you in the app.
support@devgud.com · DevGud Technologies, Shiva Heights, Raipur, Chhattisgarh, India, 492001