Privacy policy for people who book
Version 2026-10-02. A lawyer is reviewing this document; any change is posted here with its date before it applies.
This policy is for people who book appointments through their AI and have an account on My Prytan. Prytan is run by [Company name, kennitala, registered address, Iceland] ("Prytan", "we"). Questions and requests go to support@prytan.ai.
If you run a business, read the privacy statement for businesses and visitors.
1. In short
- Prytan holds what it needs to book for you: your name, your email, the bookings you made through Prytan, and the AIs you connected.
- Everything else is optional and yours to remove: a saved phone number, your preferences, your access needs.
- A business receives only what its booking system needs for your booking.
- Prytan never holds your conversations with your AI, never takes payment, never sells or advertises with your data.
- My Prytan shows it all, lets you download it and lets you delete it.
2. What we hold, and where it comes from
| What | Where it comes from |
|---|---|
| Your account: your email address and your name | you, when you sign in the first time; the email is proved with a one-time code |
| A phone number proved by a text code (only on accounts made while sign-in by text was switched on; it is switched off) | you |
| Details for your bookings: one phone number and, where a business needs it, an email address | you, through your AI or on My Prytan; kept only if you say yes; not verified by Prytan |
| Your bookings made through Prytan: the business, service, time, what became of it, the name and contact details that went on it, the name of the AI app that made it and its network address | your AI, at your request; changes come back from the business's booking system |
| The AIs you connected: the name each one registered with, what you allowed it to do, when, when it was last used, and its passes (stored only as hashes) | you, on Prytan's sign-in page |
| Your preferences (all optional): usual places and staff, days and times that suit you, areas, a budget, a language | you, on My Prytan, or your AI after you said yes |
| Your access needs (optional, in your own words) | you, on My Prytan, only after your explicit consent (section 9) |
| Your consents and acceptances: which terms you accepted and which consents you gave or withdrew, with the version, the language and the time | you |
| How you found Prytan (section 10) | the page you created your account from, or a code you typed |
| Safeguards: the limits in the terms are counted from your bookings; short-lived counters limit how often codes are sent and requests are made; if your account is suspended, when and our short note of why | Prytan |
| Sign-in codes (stored only as a hash, unusable after ten minutes) and browser sessions (30 days) | Prytan |
| Your language for Prytan's pages and emails | you |
Busy times. If your AI can see your calendar, it may pass your busy times with a search so that only times that fit are offered. Prytan uses them for that one search and never stores or logs them. Prytan never reads your calendar.
3. Why we use it, and the legal basis
Each purpose has one legal basis under the GDPR, which has the force of law in Iceland (Act 90/2018).
| Purpose | Legal basis |
|---|---|
| Your account, signing you in, making, showing, moving and cancelling your bookings, sending the booking to the business, the confirmation email | the contract with you (Article 6(1)(b)) |
| Keeping a phone number or email for your next bookings | your consent (Article 6(1)(a)); withdraw with "Forget it" |
| Your preferences | your consent (Article 6(1)(a)); remove any of them at any time |
| Bookings of health services | your explicit consent (Article 9(2)(a)); section 8 |
| Your access needs | your explicit consent (Article 9(2)(a)); section 9 |
| Security, rate limits, the booking limits, suspension for misuse | our legitimate interest in protecting businesses' calendars and the service (Article 6(1)(f)) |
| Counting which business sent you | our legitimate interest in crediting that business fairly (Article 6(1)(f)); it is a count, and the business never learns who you are |
| Keeping the record of what you accepted and consented to | our legal duty to be able to show it (Article 6(1)(c)) |
We make no automated decisions about you with legal effect, and we do no profiling.
4. Who receives your data
- The business you book with, and its booking system. They receive your name, a phone number or email (whichever that booking system needs) and the booking itself. The business sends its own confirmation.
- Your own AI. The AI apps you connected can read your bookings made through Prytan and your preferences, because you allowed it. You chose that AI; its provider is not acting for Prytan.
- Companies that work for Prytan (hosting, the database, email). They are listed, with their countries, in the sub-processor list.
- Nobody else. No advertising, no data brokers, no selling.
The owner of a business sees your name and your booking in their Prytan dashboard and notifications. They never see your phone number or email in Prytan, because their booking system already holds them. A business never sees your Prytan account, your other bookings or your preferences.
5. Who is responsible for what
- Prytan is the controller of your account and of collecting your booking details and sending them to the business you chose.
- The business is a separate controller from the moment its booking system receives your booking. Its own privacy policy covers what it does with it.
- For what Prytan keeps and shows to the business about bookings made at that business, Prytan acts on the business's behalf under the data-processing terms.
6. How long we keep it
A nightly job enforces these periods.
- Bookings: 24 months after the appointment, then deleted.
- Your account, saved details, preferences and access needs: until you remove them or delete the account.
- AI passes and sign-in requests: deleted the day after they expire. An access pass lasts an hour; a renewal pass ends after 90 days without use.
- Sign-in codes and browser sessions: deleted the day after they are used, ended or expired.
- Rate-limit counters: deleted when their window ends, within two days at most.
- Records of acceptance and consent: for as long as the account exists.
- Booking emails are not stored by Prytan. Our email provider keeps its sending log for 30 days.
- Encrypted backups are kept for up to 14 days, so deleted data leaves them within that time.
When you delete your account, the account, its sessions and its passes are deleted at once. Your bookings lose their link to you and follow the booking period above, so the business can still see what was booked.
7. Where your data goes outside the EEA
- Email. Our email provider, Resend (Plus Five Five, Inc.), stores emails in the United States for 30 days. The transfer rests on the EU-US Data Privacy Framework, which applies in Iceland, and on the European Commission's standard contractual clauses.
- The business's booking system. A booking at a business whose booking system keeps data outside the European Economic Area sends your name, your contact detail and the booking there, at your request, because the booking cannot be made otherwise (Article 49(1)(b)), unless a decision of the European Commission already covers that country.
| Booking system | Company | Where it keeps data |
|---|---|---|
| Noona | Iceland | Amsterdam, Netherlands |
| Cal.com | USA | USA |
| Cliniko | Australia | the region the business chose: Australia, the UK, Canada or Ireland |
| SimplyBook.me | Cyprus | Canada, France and Singapore |
| Square | Ireland, for European businesses | the USA, the EU and elsewhere |
| Acuity | Ireland, for businesses outside the USA | USA |
Prytan's own database is in Frankfurt and its server in Amsterdam; the companies that provide them are named in the sub-processor list.
8. Health bookings
The fact that you book a health service is health data about you. Prytan handles it only with your explicit consent, given on Prytan's own page with you signed in, never through a chat. You must be 18 or older.
If you consent, Prytan:
- sends your name, your phone number or email and the booking (service, time, staff) to the business through its booking system;
- keeps the booking in your account, so that you and the AIs you connected can see, move or cancel it;
- emails you a confirmation with a calendar file. For a health booking the email names the business and the time, not the service.
This data is used only for your bookings. It is kept for 24 months after the appointment, or until you withdraw your consent.
- Withdrawing. A switch on My Prytan, "Health bookings". Prytan then deletes its record of your health bookings and makes no new ones. Appointments already booked stay with the business unless you cancel them first. The business keeps its own records under its own rules.
- Saying no. Nothing else in Prytan changes. Health services are simply not shown or booked for you, and you can still book with the business directly.
- Business owners' AIs. An owner who connects their own AI to read their figures never gets the names of people who booked a health service.
- Outside Iceland and the EEA. Health businesses in other countries are not offered through Prytan yet.
9. Access needs
You can write, in your own words, what you need from a place (for example a step-free entrance). That may say something about your health or a disability. Prytan stores it only with your explicit consent, given on Prytan's own page.
- It is shown to the AIs you connected when they search, so they can look for places that suit you.
- It is never sent to businesses.
- Withdraw the consent on My Prytan at any time. Prytan then deletes what you wrote.
- Without consent, nothing is saved.
10. How you found Prytan
If you created your account from a business's "Book us through your AI" page, or typed a business's code the first time you connected an AI, Prytan keeps which business and when, and the date you first connected an AI. It is counted as a number towards that business's free months. The business never sees who you are. Opening a business's page adds one to a count of visits for that business; nothing about you is kept with it, and no cookie is used for this.
11. Staff who take only existing customers
Some staff at some businesses take only people who have booked with them before. Prytan could check that only with a phone number it verified by a text code, and texts are switched off, so no such check is made today. Your AI points you to the business's own booking page or phone instead. A phone number you merely saved is never checked against any business's records. If verified phones return, this policy will say so first.
12. What we never hold
- Your conversations with your AI.
- Payment details of any kind.
- Your calendar.
- A business's other appointments or its customer list.
13. Your rights, and your controls on My Prytan
| You want to | How |
|---|---|
| See what we hold | My Prytan shows your account, saved details, preferences, bookings, consents and connected AIs |
| Get a copy | "Download my data" on My Prytan gives you all of it as one file. This policy says why we hold it, who receives it and for how long |
| Correct it | change your name, saved phone and preferences on My Prytan |
| Delete it | "Delete my account"; "Forget it" for a saved phone or email; remove any preference |
| Withdraw a consent | "Health bookings" and "Access needs" on My Prytan; "Forget it"; removing a preference |
| Stop an AI, or change what it may do | "Disconnect" or "Change" under Connected AIs |
| Object to a use, or have it restricted | write to support@prytan.ai |
Withdrawing a consent does not affect what was done before you withdrew it. We answer within one month. You can also complain to the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is), or to the authority where you live.
14. Security
Passes and codes are stored only as hashes. All traffic is over HTTPS. Every request is limited to your own account, and that is covered by automated tests. Logs are cleaned of email addresses and phone numbers as they are written. Database backups are encrypted.
15. Young people
Prytan is for people aged 16 or older; under 18, with a parent's or guardian's agreement; 18 or older for health services. We delete an account on learning that it belongs to someone under 16, and at once if the person is under 13.
16. If you live outside Iceland and the EEA
Anyone may use Prytan. These notes apply when Prytan is offered in your country.
- United Kingdom. The UK GDPR gives you the same rights as above. You can complain to the Information Commissioner's Office.
- United States. Prytan does not sell personal information and does not share it for advertising. Health businesses in the USA are not offered. Our service does not respond to "do not track" signals, because it does no tracking.
- Canada. Prytan relies on the consent you give when you create your account and allow an AI. You can complain to the Office of the Privacy Commissioner of Canada. The age to use Prytan is the age of majority where you live.
- Australia. Prytan follows the Australian Privacy Principles. You can complain to the Office of the Australian Information Commissioner.
17. Changes
We post changes here with the date. Material changes are announced on My Prytan and by email before they apply. A change that needs a new consent asks for it; it is never assumed.
18. Summary
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email and name | your account and your bookings | contract | until you delete the account |
| Saved phone or email for bookings | so your AI does not ask each time | consent | until "Forget it" or deletion |
| Bookings | making, showing, moving, cancelling | contract | 24 months after the appointment |
| Health bookings | the same, for health services | explicit consent | 24 months, or until you withdraw |
| Preferences | better suggestions from your AI | consent | until you remove them |
| Access needs | finding places that suit you | explicit consent | until you withdraw |
| Connected AIs and passes | letting your AI act for you | contract | until disconnected; expired passes one day |
| Sessions and sign-in codes | signing you in | contract | 30 days; codes ten minutes |
| Rate-limit counters, suspension note | protecting businesses and the service | legitimate interest | two days at most; until restored or deleted |
| Which business sent you | crediting that business | legitimate interest | until you delete the account |
| Acceptances and consents | showing what you agreed to | legal duty | while the account exists |
Questions: support@prytan.ai. Report a bug.