Privacy Policy

Nextsession is operated by 1608329 B.C. LTD., a company incorporated in British Columbia, Canada, operating as Nextsession. 1608329 B.C. LTD. is the data controller responsible for the information collected through the Nextsession website at nextsessionapp.co and through the Nextsession app. You can reach us at privacy@nextsessionapp.co.

Nextsession has two kinds of information in it. There is your own: your name, your email, your business details. And there is the information you enter about your clients, which is theirs.

The information you enter about your clients belongs to you and to them, not to us. You decide what to record and why, you are the one your clients have a relationship with, and you are responsible for what you put in. We store it and keep it safe on your behalf, we use it only to run Nextsession for you, and we do not use it for anything of our own.

On the website

When you join our early-access list, we collect your name and email address. During onboarding you may also choose to tell us the category of work you do and the subjects or services you offer. When you create an account, we collect your email address and the password you set. We do not ask for sensitive personal information, and we ask that you not enter any in free-text fields.

In the app

The app keeps the records you create as you run your business. That is:

• Your account and business details: your email address, and the business profile you fill in, which can include your display and contact name, email, phone, address, country and region, legal name, website, social handles, your tax or business number, and a tagline.
• Your clients: first and last name, phone number, email address, address, any notes you write about them, and separate billing contact details if you add them.
• Your services and prices, including any price you set for one particular client.
• Your sessions: times, durations, time zones, where they take place, notes, attendance, cancellations and the reasons you record for them.
• Your money records: prepaid sessions and bookings, what each session charged, who owes what, and the payments you record against them.
• Your payment settings: the e-transfer email address or phone number you ask clients to send to, your Venmo handle, and the message you send with a request.
• A history of changes made in the app, so the record of your work can be traced back and a mistake can be found and corrected.
• Records of failures in the app: when something goes wrong, the app sends us which part of it failed, the error that came back, the version you are running and the time. These are tied to your account so we can tell one person’s problem from everyone else’s.

The payment methods the app records are cash, e-transfer and Venmo. Nextsession never touches the money. No payment passes through us and we do not process, hold or move funds. The app records what you tell it you were paid.

We use failure reports only to find and fix what is broken. We do not put your clients, your notes or your money records into them, and there is no field in them for any of it. The one part we cannot promise is the error’s own wording: that is whatever the failing piece of the app produced, and although we cut it to 300 characters before it leaves your phone, a fragment of one of your records can end up inside it.

To run Nextsession for you, to keep it working, and to help you when you write in. On the website, we also use your details to contact you about Nextsession early access and launch, and to understand, in aggregate, the kinds of work independent operators do so we can build and improve the product. We also use analytics to understand how people use the site so we can improve it. We do not sell your personal information and we do not use it for advertising.

We collect and use your information based on the consent you give: on the website when you submit a form, and in the app when you create an account and enter your records. You can withdraw your consent at any time (see Your rights).

If you give the app permission, it writes your Nextsession sessions into your phone’s calendar so they sit alongside everything else you have on, and it reads the events in that period so it can show them next to your sessions. It only ever edits the events it created itself.

None of this reaches us. We do not store your calendar events, and the link between a session and a calendar entry stays on that one phone. You can refuse or withdraw calendar permission at any time in your phone’s settings, and the rest of the app carries on working.

Your information is stored with Supabase, a third-party database host, on servers in Canada. Each account can reach only its own records. The app also keeps a copy on your phone so it works when you have no signal, and backs that copy up to Supabase. Some of the other services listed below may process information outside Canada, including in the United States. It is encrypted in transit and at rest, and we limit who can access it.

Only with the providers that help us run Nextsession:

• Supabase: secure database storage, for both the website and the app
• Google: carries the account emails we send you, such as sign-in and password emails
• Apple: takes payment for subscriptions bought in the app
• RevenueCat: keeps track of whether your subscription is active
• Resend: sends our account and trial emails
• MailerLite: to send our newsletter and product announcements to people who asked for them, and to manage our early-access email list (website only)
• Vercel: website hosting and privacy-friendly, cookieless traffic and performance analytics (website only)
• Microsoft Clarity: website analytics and session replay, so we can see how visitors use the site and improve it (website only)

The app uses none of the analytics services. It contains no analytics, no advertising and no tracking of any kind, and it talks only to Supabase, RevenueCat and our website.

The failure reports described under What we collect are not analytics: they are sent when a specific thing breaks, not as you go about your work, and they say what broke rather than what you were doing.

Each only receives what it needs, and we may disclose information if required by law.

Website early-access details are kept until Nextsession launches and for a reasonable period after, or until you ask us to delete them, whichever comes first.

The records you create in the app are kept for as long as your account is open, so that your history of work stays complete. That is also why a session recorded by mistake is voided rather than deleted: the record stays, marked as void, and counts toward nothing. Canada expects business records to be kept for six years from the end of the year they relate to, in a form that can be read and traced back to what it came from, and the app is built so your records can meet that. What your own business needs to keep, and for how long, is a question for you and your accountant. This is not legal advice.

You can ask to delete your account from within the app. Asking closes it straight away, and you are signed out.

You then have thirty days to change your mind. Email us at privacy@nextsessionapp.co in that time and we will bring it back exactly as it was. After thirty days everything is erased: your clients, services, sessions, money records, settings, business profile and the history of changes.

What survives is a small record that an account existed and was deleted: an account identifier, a one-way hash of the email address, and the dates. The email address itself is not kept. The hash cannot be read back into an address, and its only purpose is to let us recognise you if you write in about your own deleted account.

You can ask us to access, correct, or delete your information, or withdraw your consent, by emailing privacy@nextsessionapp.co. In Canada, you may also contact the Office of the Privacy Commissioner of Canada. Users in the EEA or UK may complain to their local data protection authority.

Your clients' rights

If one of your clients asks you what you hold about them, or asks you to change or remove it, that is yours to answer: the records are in your app and you can read, correct, archive or delete them yourself. Write to us at privacy@nextsessionapp.co if you need help doing it.

Nextsession is for adults (18+) who run a business. It is not directed to children, and we do not knowingly collect information from them directly.

Some of our customers work with children, so a client record may describe someone under 18, or someone other than the person the customer deals with. That information is entered by the customer, not by us, and the customer is responsible for having the right to record it.

This section is about the website. The app sets no cookies and uses no analytics.

The app does send us a report when something in it fails, which is described under What we collect. That is not analytics either: nothing in the app watches how you use it.

We use Microsoft Clarity to understand how people use the site through aggregated analytics, heatmaps, and session replay. Clarity sets cookies and may record how you interact with pages; it masks the text you type by default. We also use Vercel analytics for traffic and performance, which is cookieless. We do not use advertising or cross-site tracking cookies.

Visitors in the EU, the UK, and Quebec are asked to accept before we load Clarity, and we do not load it unless they do. Everywhere else, we honor the Global Privacy Control signal: if your browser sends it, we do not load Clarity. You can also limit this by blocking cookies in your browser, and you can email us with any questions.

We may update this policy and will post the revised version here with a new effective date.