Privacy Policy

This policy describes how Hono handles personal data on hono.cl, in the business dashboard and on the public booking pages we host.

Hono is a scheduling and booking platform for service businesses, so there are two distinct relationships: with the business that subscribes to the platform, and with the person who books an appointment at that business.

For business data (its account, its team, its subscription) Hono is the controller. For the end-customer data a business uploads or that customers create when booking, the business is the controller and Hono acts as processor: we handle it on the business's instructions and only to provide the service.

We handle data under Chilean data protection law: Law 19.628 and, once in force, Law 21.719.

Account data: name, email, phone and hashed password. If you sign in with Google or Apple, that provider gives us your email, your name and a user identifier — never your password.

Business data: name, address, opening hours, services, prices, staff and calendar settings.

Booking data: date and time, service, professional, price, appointment status and any notes the business adds.

Loyalty data: progress and rewards for the business's campaigns, plus any digital wallet passes issued.

Payment data: transaction identifiers and statuses returned by Mercado Pago. Hono does not store card numbers.

Technical data: IP address, browser type and activity logs, used to run the service and detect failures or abuse.

Creating and maintaining your account, and signing you in.

Running the calendar: showing availability, confirming bookings and notifying changes.

Sending operational email: appointment confirmation, reminders, feedback requests and loyalty notices. We do not send third-party advertising.

Charging the business's plan and, when the business enables it, processing its customers' payments.

Keeping the service available and secure: logs, backups, fraud prevention and support.

Meeting legal, tax and accounting obligations.

We work with providers that process data on our behalf and only to deliver the service: Supabase (database, authentication and file storage), Resend (operational email delivery), Mercado Pago (payments and subscriptions), and Vercel and Google Cloud (application hosting and operational logs).

Google and Apple receive data only if you choose to sign in with them.

We do not sell personal data and we do not share it with third parties for advertising.

You can create your account or sign in with Google or Apple. The provider gives us your user identifier, your email and, if you allow it, your name.

We request only basic identity permissions (openid, email and profile). Hono does not access your Gmail, contacts, calendar or any other data in your Google or Apple account.

We use that data only to identify you, create your profile and contact you about your account and your bookings.

If you use Apple's "Hide My Email", we receive a relay address instead of your real one and everything works the same.

You can revoke access at any time from the security settings of your Google or Apple account. Revoking it does not delete your Hono account — write to us for that.

We use first-party cookies that are necessary to keep you signed in and remember your language. We also store the booking flow state in your browser so you don't lose your progress if you reload the page.

We do not use advertising or cross-site tracking cookies.

We keep your account data while the account is active. Booking and payment data is kept for as long as the business needs it to operate and to meet legal and accounting retention periods.

If you close your account, we delete or anonymize the data we no longer need to keep.

Traffic is encrypted with HTTPS and passwords are stored hashed, never in plain text.

Database access is restricted by row-level policies, so each business only sees its own information.

No system is infallible: if a breach affecting your data occurs, we will tell you.

You can request access to your data, its correction or deletion, object to certain processing, and ask for a copy in a portable format.

To exercise them, write to gus.morales@me.com from the email tied to your account. We reply within the deadlines set by law.

If your data sits in the calendar of a business that uses Hono, contact that business first — they decide about that information. If you get no answer, write to us and we'll help you route it.

Our infrastructure providers run servers outside Chile. By using Hono, your data may be processed in those countries under the contractual safeguards we require from each provider.

Hono is intended for businesses and for adults. If a business books an appointment for a minor, it is the business's responsibility to have the consent of whoever is in charge of them.

If we change something meaningful we update the date in the header, and when the change affects you significantly we notify you by email.

Questions about this policy or your data: gus.morales@me.com.