Your information, explained clearly.

1. Scope and who we are

Quelboo is a booking and business-operations platform developed and operated by QUELVARO, LLC ("Quelboo," "Quelvaro," "we," "us," or "our"), a Maryland limited liability company. This Privacy Notice applies to the Quelboo mobile applications, public product website at quelboo.com, app-handoff and authentication pages, customer and business portals, support interactions, and related services that link to this notice (collectively, the "Services").

Separate notices may apply to employment, contractor, vendor, or other relationships that are not part of the Services.

2. Quelboo's role and participating businesses

Quelboo provides technology that helps customers discover and interact with participating service businesses. Participating businesses independently determine the services they offer, their staff, schedules, locations, policies, and many ways they use information available to them through Quelboo.

When you book, register, join a waitlist, purchase a business-issued gift card, or otherwise interact with a participating business, relevant information is made available to that business and its authorized personnel so they can provide the requested service. A participating business may have its own privacy practices and legal obligations. Questions about how a business uses information outside Quelboo should be directed to that business.

3. Information we process

Account and identity information

• Name, email address, telephone number, profile image, account role, and account identifiers.
• Authentication, multi-factor authentication, account-recovery, device-registration, and security information.
• Communication preferences, consent records, and account status.

Business and staff information

• Business identity, contact information, service locations, services, prices, policies, availability, public profile content, and verification status.
• Owner, manager, and staff identities; roles; permissions; schedules; assigned services; attendance or operational activity; and account invitations.
• Payment-account readiness, subscription or plan status, staff-seat capacity, SMS-credit balances, and operational records.

Bookings, Sessions, and participant information

• Appointments, Group Bookings, Sessions, selected services, dates, times, locations, participants, waitlists, attendance, cancellations, rescheduling, and refund status.
• Dependent-participant information supplied by a parent or guardian, which may include name, date of birth when needed for eligibility, guardian relationship, skill level, waiver status, and emergency-contact information.
• Business policies and consent or waiver versions accepted in connection with a booking or Session.

Payment and commerce information

• Transaction amount, currency, status, provider, product or service, payment and refund references, dispute status, gift-card balances, promotional rewards, and related audit information.
• Business subscription, paid-seat tier, and SMS-credit purchase status.
• Limited payment-method details returned by a payment provider, such as brand, expiration month/year, or last four digits, when available.

Quelboo generally does not receive or store full payment-card numbers, card verification codes, or bank-login credentials. Those details are handled by authorized payment or app-store providers.

Content and communications

• Messages, support requests, reviews, notes, uploaded images, service descriptions, and other content you choose to provide.
• Email, SMS, push-notification, and in-app notification delivery and preference records.

Location, device, and technical information

• Approximate location derived from an IP address and, when you grant permission, precise device location used for location-based features.
• Device type, operating system, app version, language, browser, network information, IP address, identifiers, timestamps, requested pages or screens, crash reports, diagnostics, and security events.
• Fraud, abuse, account-integrity, and risk signals used to protect users, businesses, providers, and the Services.

4. Sources of information

We receive information:

• Directly from customers, business owners, staff, guardians, and other users.
• From participating businesses and their authorized personnel.
• From payment processors, app stores, communications providers, authentication providers, hosting providers, and other service providers.
• Automatically from devices, browsers, application activity, logs, and security systems.
• From public or commercial business sources when reasonably necessary to verify a business or prevent fraud.

5. How we use information

We may use information to:

• Create, authenticate, secure, support, and administer accounts.
• Operate appointments, Group Bookings, Sessions, participant registrations, calendars, waitlists, attendance, reminders, cancellations, and refunds.
• Process and reconcile payments, subscriptions, paid seats, SMS credits, gift cards, promotions, referral rewards, disputes, and provider events.
• Help participating businesses manage services, staff, customers, schedules, policies, and operations.
• Send transactional, security, support, and permitted promotional communications.
• Detect, investigate, prevent, and respond to fraud, abuse, security incidents, policy violations, and unlawful activity.
• Maintain audit history, resolve disputes, enforce agreements, and satisfy accounting, tax, legal, and compliance requirements.
• Analyze performance, troubleshoot errors, improve accessibility, and develop or evaluate features.

We may use automated tools to identify security, fraud, or eligibility signals. Where required by law, we provide an opportunity to request human review or otherwise exercise applicable rights.

6. How we disclose information

We may disclose information as reasonably necessary to:

• Participating businesses and authorized staff: to fulfill bookings, Sessions, communications, payments, support, safety, and business operations.
• Customers, payers, and guardians: to show account, booking, payment, dependent, and service information they are authorized to access.
• Service providers: providers of hosting, databases, authentication, payment processing, app-store billing, communications, maps, analytics, crash reporting, cybersecurity, and customer support.
• Professional advisers: attorneys, accountants, auditors, insurers, and other advisers subject to professional or contractual obligations.
• Legal and safety recipients: courts, regulators, law enforcement, governmental authorities, or other parties when required by law or reasonably necessary to protect rights, safety, security, or property.
• Business transactions: parties involved in a prospective or completed financing, reorganization, merger, acquisition, sale of assets, or similar transaction, subject to appropriate safeguards.

Quelboo does not currently sell personal information for money or use personal information for cross-context behavioral advertising. If these practices change, we will update this notice and provide any choices required by law.

7. Payments and commerce

Different providers may process different transactions. Physical-service payments and business-specific gift cards may be processed through Stripe or a participating business's connected payment account. Quelboo platform subscriptions, paid-seat tiers, and SMS-credit purchases may be processed through Apple, Google, or another authorized provider.

Payment providers may collect and use information under their own privacy notices. Quelboo may receive transaction identifiers, status, amount, currency, limited payment-method information, refunds, disputes, and fraud signals needed to operate and reconcile the Services.

8. Communications

We and participating businesses may send account, booking, payment, waitlist, reminder, security, support, and other service-related messages by email, SMS, push notification, or in-app notification. Transactional or security messages may continue while an account is active even if marketing preferences are disabled.

You may manage available communication preferences in the Services, use an unsubscribe method provided in a promotional message, or contact us. Carrier message and data rates may apply to SMS messages.

9. Cookies, SDKs, and analytics

The website and applications may use cookies, local storage, mobile software development kits, and similar technologies for authentication, preferences, security, performance, crash reporting, communications, and service operation. We do not currently use these technologies for cross-context behavioral advertising.

Browser and device controls may allow you to limit certain technologies. Disabling essential storage or permissions may prevent account, authentication, location, or notification features from working correctly.

10. Dependents and children's privacy

Quelboo is intended for adults and authorized business users and is not directed to children under 13. Children are not permitted to create independent paid Quelboo accounts. A parent or legal guardian may create or manage a dependent participant profile when a business offers an eligible Session or service.

By submitting dependent information, the adult represents that they are authorized to do so. Communications and payment control remain with the adult payer or guardian. Where applicable law requires additional parental notice, consent, or verification, Quelboo or the participating business may request it before processing a child's information or allowing participation.

If you believe a child provided information directly to Quelboo without appropriate authorization, contact support@quelvaro.com.

11. Retention

We retain information only for as long as reasonably necessary for the purposes described in this notice, including to provide the Services, maintain booking and transaction history, satisfy legal and accounting obligations, prevent fraud, resolve disputes, enforce agreements, and maintain security.

Retention depends on the type of information, the status of the account or business relationship, provider requirements, active bookings or liabilities, disputes, legal obligations, and technical backup cycles. When information is no longer required, we may delete it, deidentify it, or restrict its use. Deidentified or aggregated information may be retained where it cannot reasonably be linked to an individual.

12. Security

Quelboo uses administrative, technical, and organizational safeguards designed to protect information, including role-based access controls, tenant isolation, server-side authorization, audit logging, provider verification, encryption in transit, credential protections, and monitoring. Access is limited according to account, business, role, and operational need.

No method of transmission, storage, or security is perfect, and we cannot guarantee absolute security. You are responsible for protecting your credentials and promptly reporting suspected unauthorized access.

13. Privacy rights and choices

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information; to withdraw consent; to opt out of certain processing; or to appeal a privacy-request decision.

To submit a request, email support@quelvaro.com. We may need to verify your identity and authority before completing a request. Authorized agents may be required to provide proof of authority. We will not unlawfully discriminate against you for exercising a privacy right.

Some information may be exempt from a request or retained as required for transactions, legal obligations, security, fraud prevention, disputes, or the rights of others.

14. Account deletion

Users can initiate account deletion through the available account settings in the app or use our public Account Deletion and Privacy Choices page. Business-account closure may require resolution of future bookings, outstanding refunds, disputes, gift-card obligations, staff access, payouts, or other legal and operational responsibilities before final deletion or deidentification.

Deleting an account does not require us to erase records that we are legally permitted or required to retain. We will delete, deidentify, or restrict associated information in accordance with applicable law and the retention principles described above.

15. United States operations and international access

Quelboo is initially intended for participating businesses and service locations in the United States. Information may be processed and stored in the United States and other locations where our service providers operate. Those locations may have privacy laws different from those in your place of residence.

Access from outside the United States does not mean that every feature, business, payment method, or legal protection is available in that location.

16. Changes to this notice

We may update this Privacy Notice to reflect changes in the Services, our practices, providers, or applicable law. We will post the revised notice on this page and update the effective date. When required, we may provide additional notice through the Services or request consent.