Privacy Policy
Service: VisitKit — online booking inside Telegram (bot and Mini App) and on its booking pages in a browser
Version: 2026-11-04 · This English text is the governing version; translations are provided for convenience.
1. Who is responsible for your data
The controller of your personal data is Sergei Ianchuk, Republic of Serbia. Contact for privacy questions: support@dailykit.top.
Specialists and client data. When you book with a specialist, the specialist receives your name, phone number, comment and Telegram username in order to provide the service you booked. The specialist decides independently how to use this data for that purpose and is responsible for their own use of it. We are responsible for what the service itself does with the data: storing the booking, showing it to you and the specialist, and sending notifications and reminders.
2. The short version
- A client's name, phone number and comment are shown only to the specialist the booking is made with.
- A specialist's booking page (name, description, services, prices and free times) is visible to anyone who has its link.
- We do not take payment for specialists' services and never receive card or bank details.
- We do not use advertising or tracking tools and do not sell data.
- A specialist can delete the profile together with all its bookings in the Mini App at any time.
3. What data we process
Everyone who opens the Mini App or writes to the bot
| Data | Where it comes from | Why we need it |
|---|---|---|
| Telegram user ID, first and last name, username, language code | Telegram, when you open the Mini App or write to the bot | To sign you in, to show the service in your language, and to know who makes a booking or owns a booking page |
This data is kept in a signed session token that lives only in the memory of the open Mini App. It is saved in our database only as part of a booking or of a specialist profile, as described below.
Clients
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name, phone number, comment | You, in the booking form. The phone number can be typed or, if you choose so, shared from your Telegram account; when you book in Telegram, you may leave it out | So that the specialist knows who is coming and can contact you |
| Service, date and time, status of the booking | Your choice in the booking form; later changes by you or the specialist | To keep the appointment in the specialist's schedule and in your list of bookings |
| The secret link of a booking made in a browser | Created by us when you book on a booking page opened in a browser, without Telegram | So that you can see and cancel the booking without an account, and, if you choose, tie it to your Telegram account for confirmations and reminders |
| Telegram user ID, username, language code, time zone of your device | Telegram and your device, when you book in Telegram; if you book in a browser, only the time zone of your device, and the Telegram data once you open the reminders link of the booking in Telegram. If a specialist enters a booking for you, Telegram when you open the link they send you, or your earlier booking with them when they choose you from their past clients | To show you your bookings, to let the specialist write to you in Telegram, and to send confirmations and reminders in your language and local time |
Specialists
| Data | Where it comes from | Why we need it |
|---|---|---|
| Telegram user ID, username, language code | Telegram | To recognise the owner of the booking page, to let clients write to you, and to send you notifications |
| Profile: name or title, description, address if you give it, link name, time zone | You | To show your booking page to clients |
| Where you came from: the tag of the link you first opened the bot with, if it had one, or the fact that you had booked with another specialist before | The link, and your earlier bookings | To see which links and which ways of spreading the word bring specialists; it is kept with your booking page and deleted with it |
| Services (title, duration, price, currency), working hours, days off | You | To offer clients free times |
| Which getting-started tips the bot has sent you, whether you turned them off (/notips), and for which end of Pro it warned you | The service | So that each tip and each warning is sent once, and none after /notips. The bot sends at most three tips to a new page: a day on without services, three days on without a booking by a client, and after the first booking. Kept with your booking page and deleted with it |
| Your own calendar entries: for a client who booked with you another way, the client's name, phone number if you give it, service, time and comment; for time you closed, its time and comment | You | To keep your schedule and to stop clients from booking time that is taken. A client you choose from your past clients, or who opens the link you send them, is told of the booking by the bot |
| Clients you blocked: the client's name and their Telegram account or phone number from the booking | You | To take no bookings from someone who takes up your time. The client is not told of the block: the page tells them booking is not available now |
| Plan: Pro expiry date, subscription identifier and renewal status | Telegram, when you pay | To apply the plan limits and manage renewal |
| Payments: Telegram payment identifier, Telegram user ID, plan, amount in Stars, date, subscription period | Telegram, when you pay | To activate and renew Pro, handle refunds and keep accounting records |
| Withdrawal from a purchase: the name of your Telegram account as the statement showed it, the language of your Telegram, the date and time of the statement, of the refund and of the acknowledgement | You, when you withdraw, and the service | To carry out the withdrawal, return the Stars, send you the acknowledgement and show later when the withdrawal was made |
Everything in a specialist's profile and services is public, the address too: it is shown to anyone who opens the booking link, and clients get the address in their confirmations, reminders and calendar files. Do not put private information there; give an address only if clients come to it. The calendar entries you make are seen only by you; for the details of clients you enter yourself, you decide what is entered and why, and we keep them only to show them to you (Terms, 8.5). Where you came from is not part of the page and is shown to nobody.
Links with a tag. A link to the bot may carry a tag that says where the link was posted. We count how many times the links of each tag were opened, as a number per tag and day; who opened them is not recorded. Until you make a booking page, the tag you first came with is kept in the storage Telegram provides to you for this bot, not on our servers.
Technical data
| Data | Where it comes from | Why we need it |
|---|---|---|
| Logs: IP address, time, requested address, response code, size and duration of the response; for errors, the Telegram user ID | Your device, with each request | To keep the service secure and to find faults |
| Request counters by IP address and Telegram user ID | Your device, with each request | To limit the rate of requests; kept for about a minute, and for about an hour for bookings made in a browser |
The requested address can contain the link name of a booking page, the identifier of a booking or the secret link of a booking made in a browser.
We do not receive your contacts, your card or bank details, your location, or your messages in other chats. If you share your phone number through Telegram, Telegram also shows it as a message in your chat with the bot; we store the number only when you submit a booking.
4. Who sees what
- The specialist you book with sees your name, phone number, comment, Telegram username, the service and the time.
- Anyone with the link to a booking page sees the specialist's name, description, Telegram username, services, prices and free times. Free times are calculated from the schedule and existing bookings; other clients' details are never shown.
- Search engines (Google, Yandex and others) may show the booking page of a specialist with Pro: the name, description, address, services and prices, but not their Telegram. This happens only once at least 3 different clients have booked on the page and the specialist has not turned off "Show in search" in the settings. No client details are shown on the page.
- Anyone with the "add to calendar" link of a booking sees the service, the specialist's name and address and the time. The file contains no client details, and the link cannot be guessed. For a booking made in a browser, the file also contains the secret link of the booking, so that the entry in your calendar leads back to it: whoever you share the calendar entry with gets that link too.
- Anyone with a specialist's calendar link sees the bookings with that specialist from the last 30 days onwards: the client's name, phone number, Telegram username and comment, the service and the time. The link exists only if a specialist with Pro turned on calendar sync; it cannot be guessed, and the specialist can turn it off or replace it at any time. The calendar service the specialist adds the link to (for example, Google Calendar or Apple Calendar) receives a copy of these bookings and keeps it under its own rules: the specialist chooses that service and is responsible for how they use it.
- Anyone with the secret link of a booking made in a browser sees that booking, including the name and phone number entered, and can cancel it. Keep the link to yourself; it cannot be guessed.
- We have access to the database for support and maintenance.
5. Legal grounds
- Performing our contract with you (the Terms of Service): account data, booking pages, bookings, notifications and reminders, payments, withdrawal from a purchase.
- Legal obligations: keeping payment records for as long as accounting and tax law requires.
- Our legitimate interest in keeping the service secure and working: technical logs and rate limiting.
These grounds correspond to Article 6(1)(b), (c) and (f) of the EU General Data Protection Regulation and to the equivalent provisions of the Serbian Law on Personal Data Protection.
The service is not meant for health data or other sensitive information. Please do not enter such information in the comment or in service descriptions.
6. Who else is involved
- Telegram. You use the service through Telegram. Telegram processes your messages and payments as an independent service under its own privacy policy. Notifications and reminders are delivered to you as messages from the bot.
- Hosting provider: DigitalOcean, LLC (United States). The servers we rent from it are in its data centre in Frankfurt am Main, Germany. It runs them on our behalf under its data processing agreement.
- The specialist's calendar. If a specialist turned on calendar sync, the calendar service they chose fetches their bookings by the link (section 4).
We do not share your data with anyone else, except where the law requires it.
7. Where data is kept and international transfers
The database is located in Germany, in the European Union. The hosting provider is a company from the United States; if its staff reach the servers from there, the transfer is covered by the EU–U.S. Data Privacy Framework and, should that framework fall away, by the standard contractual clauses of its data processing agreement. We are established in Serbia and access the data from there for support and maintenance.
8. How long we keep data
| Data | Kept for |
|---|---|
| Specialist profile, services, working hours, days off | Until the specialist deletes the profile |
| Bookings, including the client's name, phone number and comment | Until the specialist deletes the profile, and no longer than 90 days after the appointment; earlier on request, see section 9 |
| A specialist's block of a client: the client's name and Telegram account or phone number | Until the specialist lifts the block or deletes the profile |
| Payment records | 10 years after the end of the year of the payment (the period Serbian accounting law sets for such books); then they are deleted. Deleting the profile does not delete them earlier |
| Withdrawal statements | Together with the record of the payment they belong to, and deleted with it |
| Technical logs | Up to 14 days |
| Session token | Kept only in the memory of the open Mini App; valid for up to 7 days |
If the service is discontinued, all user data is deleted, except records the law requires us to keep.
9. Your rights
You have the right to access your data, to have it corrected, deleted or restricted, to object to processing, and to receive your data in a portable form.
- Specialists — delete everything yourself: Mini App → Settings → Delete profile. This permanently removes the profile, services, schedule and all bookings made with you. Payment records are kept as described in section 8.
- Specialists — correct your data: Mini App → Settings.
- Clients — cancel a booking: open the booking in the Mini App, or the page of a booking made in a browser, and choose "Cancel booking". The specialist is notified and the time becomes free again; the booking record itself is kept, marked as cancelled, for the period in section 8.
- Clients — have booking data deleted, or use any other right: write to support@dailykit.top. We answer within 30 days. You can also ask the specialist directly.
Payment records we are legally required to keep are retained until that obligation ends.
You may also complain to a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU, the data protection authority of the country where you live.
10. Cookies and tracking
The Mini App and its booking pages in a browser do not set cookies and do not use analytics, advertising or tracking tools. It keeps two things in the storage of the app on your device: the tag of the link you first opened it with, if the link had one, until you create a booking page; and, after you book, the name and phone number you entered, so that the next booking form is filled in for you. Neither leaves your device on its own; they are removed when you clear the data of Telegram or of the browser.
The website dailykit.top sets no cookies either, runs no analytics and loads nothing from other servers; the server that delivers its pages writes no log of visits.
11. Children
The service is not directed at children. You may use it only if you are old enough to use Telegram under Telegram's terms.
12. Security
Access to the Mini App is authenticated with launch data signed by Telegram; no passwords are used. Requests are sent over an encrypted connection. A booking can be opened only by the client who made it and by the specialist it is made with; a booking made in a browser, also by whoever has its secret link. Access to the database is limited to the operator.
13. Changes
We may update this policy. The current version is always available from the bot (/privacy) and the Mini App. If a change is significant, we will tell specialists in the bot chat.