OnTable privacy policy
Last updated: 11 November 2026
This policy explains how personal data is handled when you use the OnTable app and this website. We keep it plain on purpose.
1. Who is responsible
The controller of your account data is Nikolaos Arapatsanis, Volou 116, Larissa, 41336. Contact: support@nimblecompanions.com.
2. What you put in OnTable, and your role
OnTable lets groups share notes, goals, tasks and calendar events. What you enter in shared spaces is your content. If you enter personal data about other people, such as clients, you are normally the controller of that data and we act as your processor, handling it only to run the app. Write to us if you need a data processing agreement.
OnTable is not a clinical record system. Please do not enter clinical notes or health records. Use initials or pseudonyms for clients wherever possible.
3. Data we handle
| Category | Examples | Why |
|---|---|---|
| Account | First name, last name, email, optional phone, optional photo, and a professional role if you choose one | To create your account and show colleagues who you are |
| Your content | Spaces (clients), goals, tasks, events, availability and their descriptions | To provide the shared calendar, goals and tasks |
| Groups and sharing | Groups, invitations, memberships and permissions | To decide who sees what |
| Subscription | Trial and subscription status, store product and expiry date. Card details stay with Google Play (or Apple later). We never see them | To unlock paid features |
| Technical | Push notification token, app version, device model and system version, and security signals from Google Play Integrity (App Check) | To deliver notifications and protect the service from abuse |
| Optional diagnostics | Crash reports and usage analytics, only if you agree | To fix problems and improve the app |
4. Voice dictation
The microphone button uses the speech recognition provided by your device. Depending on your device and settings, audio may be processed by Google's speech service. OnTable receives only the resulting text. It does not record or store audio.
5. Why we may use your data
- To provide the app (account, content, groups, subscription). This is necessary to perform our contract with you.
- To keep the service secure and working (abuse prevention, fixing faults). This is our legitimate interest.
- For optional analytics and crash reports. Only with your consent, which you can withdraw in the app at any time.
- To meet legal duties, such as keeping accounting records.
6. Who can see your data
Other members of your group see your data as your sharing settings allow. By default, colleagues see only a Busy block for your events, and your availability. Event details are visible only to members of the space the event belongs to, or to the whole group if you choose that visibility.
We use these service providers to run OnTable:
- Google (Firebase and Google Cloud) for sign-in, the database, file storage, server functions, push messages, app integrity checks, and, if you agree, crash reports and analytics.
- Google Play, which handles purchases and billing.
We do not sell personal data and OnTable shows no ads. We disclose data to authorities only when the law requires it.
7. Where your data is stored
The database, file storage and server functions run in Google's EU region. Some Firebase services, such as sign-in, push messaging and diagnostics, may process limited data outside the EU. Google relies on safeguards such as standard contractual clauses for these transfers.
8. How long we keep it
We keep your data while your account is active. If a subscription lapses we never delete your data: you move to a limited participant mode and can still export your data.
When you delete your account, we delete your profile, your photos and your group memberships. Items you created in shared spaces stay for the other members, but your name is removed from them and they show as created by a former member. Backups may keep deleted data for up to 30 days before they expire. We keep invoices and accounting records for as long as the law requires.
9. Your rights
You have the right to access, correct, delete and export your data, to restrict or object to its use, and to withdraw consent. In the app you can export your data (JSON and calendar ICS) and delete your account. For anything else, write to support@nimblecompanions.com. We answer within one month.
You can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority in your own country.
10. Children
OnTable is not directed at children and is not intended for anyone under 16.
11. Security
We protect data with encryption in transit and at rest provided by Google Cloud, access rules that check group and space membership on every request, app integrity checks, and no passwords stored on your device. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.
12. This website
This website sets no cookies and uses no analytics. Our hosting provider may keep standard server logs, such as IP address and time of request, for security and operation.
13. Changes
If we make material changes, we will update the date above and tell you in the app.
14. Contact
Nikolaos Arapatsanis
Volou 116, Larissa, 41336
+306945415619
support@nimblecompanions.com