Privacy policy

When you book with a practice, that practice decides how your booking information is used, and Fit handles it on the practice's behalf. For your Fit account itself (your sign-in details), Deprekated is responsible.

• Account details. Your name and email address, and either a password (stored only in hashed form) or, if you choose Google sign-in, the identifier Google gives us for your account.
• Booking details. Your name, email address, and any phone number or note you choose to add; the service, practitioner, date and time; and the appointment's status, including any cancellation reason.
• Practice and staff details. Names, email addresses, roles, services and availability of the people who work at a practice.
• Google Calendar connection. If a practice connects a Google account, we store that account's email address and an encrypted credential that lets Fit create meetings for it.
• Technical information. Sign-in cookies and the routine server records (such as IP address and time of request) needed to run the service securely.

• To create, show and manage appointments.
• To send emails about your account and your appointments, such as verification codes, confirmations and cancellations.
• To set up online meetings for online appointments.
• To keep accounts and the service secure.

We do not sell personal information, show advertising, or use analytics or tracking cookies.

• The practice you book with. Its authorised staff see your booking details.
• Our email provider (Resend). It delivers the emails described above, so it receives your email address and the content of those emails.
• Google. If you sign in with Google, Google confirms who you are. For online appointments, see the next section.
• Our hosting provider. It stores the data and runs the service on our behalf.

These providers may process information in countries other than yours. We share information with authorities only where the law requires it.

When a practice confirms an online appointment, Fit creates a calendar event with a Google Meet link in the practice's connected Google account. To do that, your name and email address, and the practitioner's, are shared with Google as attendees of that event. Notes and phone numbers are never sent.

The link is shown only to you and to the practice's authorised staff, and sent to you by email. If the appointment is cancelled, Fit hides the link and removes the calendar event. Google may still open a waiting room for an old link; the practice will not admit anyone from it.

Fit can only create and remove events on a calendar it created for this purpose. It cannot read a practice's other calendar entries. Fit's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. A practice can disconnect its Google account at any time in its settings, which erases the stored credential.

Fit uses only the cookies needed to keep you signed in. They are not readable by scripts and are not used for tracking.

• Account details: until the account is deleted.
• Appointment records: for as long as the practice uses Fit, or longer where the law requires records to be kept.
• Verification codes and sign-in records: for a short time, then deleted automatically.

You can cancel an upcoming appointment from your account. You can ask to see, correct or delete your information: contact the practice you booked with about your bookings, or contact us about your Fit account. We will respond as the law in your country requires.

Connections to Fit are encrypted, access to practice data is limited by role, and Google credentials are stored encrypted. No system is perfectly secure, so we cannot guarantee absolute security.

We will update this page when our practices change, and change the date at the top. Questions or requests: hello@deprekated.com.