Privacy policy

Who is responsible

The therapist you message is responsible for your details (the controller). Your bookings are with them, and they decide what happens to your details.

Rapatino handles your details only on their behalf, to run their booking diary (the processor). Rapatino is run by Rapat Ltd, registered in England and Wales, company number 17533883, 5 Ruskin Drive, Orpington, BR6 9RP. Email: support@rapatlabs.com.

For a therapist’s own sign-in details, Rapatino is responsible (see “If you are a therapist” below).

What happens

When you message a therapist who uses Rapatino on WhatsApp, Rapatino reads the messages you send and their replies, and notes any booking, change, or cancel in their diary. Depending on how the therapist has set it up, it either only reads, or also replies in the chat to offer times and confirm a booking. It never sends marketing.

What is kept

• Your name and WhatsApp number, as WhatsApp shows them.
• Your messages with the therapist.
• Your visits: times, any notes, and whether you came, cancelled late, or missed one.
• How many visits you have had. No card or payment details are kept.

Why

To run the therapist’s bookings (their legitimate interest in running their business, and taking steps towards the service you ask for), and to check that the assistant reads bookings correctly.

Please don’t send health details by WhatsApp

If you can avoid it, tell your therapist in person. Any message that mentions them is deleted with the others after 30 days.

Who else handles it

Rapatino uses these services, each under its own data protection terms:

• Vercel (hosting) and Neon (database): your details are stored in London.
• Meta: WhatsApp delivers the messages.
• Google: the therapist’s sign-in to their diary.
• Google (Gemini API, paid plan): an AI model that helps read a message. It gets the message text only, never your name or number, and any phone number written in a message is replaced with “[number]” first. Google does not use it to train its models. Google may keep it for up to 55 days to check for abuse, and may process it outside the UK under Google’s data processing terms.

How long

• Messages and conversations: 30 days.
• Visits and their history: 90 days after the visit.
• Your name, number, and visit count: 2 years after your last visit, then deleted.

A daily job deletes anything older.

Your rights

You can ask to see your details, correct them, or have them deleted. Message your therapist “please delete my details” and everything in their diary that carries your number is removed. You can also object to this use. You can write to Rapatino too, at the email above.

Delete your details

If you messaged a therapist: message them “please delete my details”, or email support@rapatlabs.com with your WhatsApp number. Everything in their diary that carries your number is deleted.

If you are a therapist: email support@rapatlabs.com from the address you sign in with and ask us to close your account. If you connected WhatsApp through Facebook, you can also remove Rapatino under Facebook → Settings → Business integrations. We delete your practice’s data within 30 days and confirm by email.

If you are unhappy

If you are unhappy with how your details are handled, you can complain to the ICO: ico.org.uk/make-a-complaint, 0303 123 1113.

If you are a therapist

Rapatino keeps your email, name, and Google account id to sign you in, and your practice address, hours, and booking notes to run your diary. Sign-in sessions are deleted when they expire. Your account details are kept until you ask us to close your account, then deleted within 30 days. Rapatino sets cookies only to sign you in; there are no advertising or analytics cookies.