Privacy Policy

Last updated: July 10, 2026

KneadBack ("KneadBack," "we," "us") is a product of Green Grove Holdings LLC, a Florida limited liability company. KneadBack helps massage therapists and similar appointment-based practitioners ("Practitioners") communicate with their clients by text message. This policy explains what information we collect, how we use it, and the choices available to you. It applies to our website, application, and messaging services (together, the "Service").

1. Who we serve, and whose data we handle

We handle information about two groups of people:

Practitioners — the massage therapists who create KneadBack accounts.
Clients — the Practitioners' clients, whose contact details a Practitioner provides to us so that we can send messages on the Practitioner's behalf.

For Client information, we act as a service provider to the Practitioner: we process Client data only to provide the Service to that Practitioner, and never for our own marketing.

2. Information we collect

Practitioner account information: name, business name, email address, phone number, booking-page link, and payment details (processed by our payment provider, Stripe — we do not store full card numbers).
Client roster information: names, phone numbers, and (optionally) email addresses that a Practitioner uploads or enters, typically exported from their booking software.
Calendar information: with the Practitioner's permission, we read appointment events from their Google Calendar (see Section 3).
Message data: the content, delivery status, and timestamps of text messages sent and received through the Service, so Practitioners can see their conversations and we can operate the Service reliably.
Usage and technical data: log data, device and browser information, and analytics about how the Service is used, to keep it secure and improve it.

3. Google Calendar data

KneadBack connects to a Practitioner's Google Calendar with read-only access, using Google's OAuth consent process. We use this access solely to identify appointment events (dates, times, and event titles) so that reminders and related messages can be scheduled correctly. KneadBack never creates, edits, or deletes calendar events.

KneadBack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we only use Google Calendar data to provide user-facing features of the Service; we do not transfer it to third parties except as necessary to provide those features, comply with law, or as part of a merger or acquisition with notice; we do not use it for advertising; and we do not allow humans to read it except with the Practitioner's consent, for security purposes, to comply with law, or when aggregated and anonymized. A Practitioner can revoke this access at any time from their Google account settings or within KneadBack.

4. Text messaging

Messages are sent on behalf of a Practitioner, from a dedicated phone number assigned to that Practitioner, to that Practitioner's own clients — for appointment reminders, scheduling, rebooking and win-back invitations, and review requests.
Message frequency varies based on appointment activity. Message and data rates may apply.
Any recipient can reply STOP to opt out of all further messages, or HELP for assistance. Opt-outs are honored immediately and permanently unless the recipient re-subscribes (e.g., by replying START).
No sharing of consent: phone numbers and opt-in consent collected for text messaging are used only to send the messages described here. They are not shared with, sold to, or transferred to third parties or affiliates for their marketing purposes.

5. How we use information

To provide, operate, and improve the Service;
To send messages a Practitioner has configured, and to relay Client replies to the Practitioner;
To process payments and manage accounts;
To communicate with Practitioners about the Service;
To protect the security and integrity of the Service and comply with legal obligations.

We do not sell personal information. We do not use Client information to market anything to Clients.

6. How we share information

We share information only with service providers who help us operate — for example, our messaging carrier partners (such as Twilio) to deliver texts, our payment processor (Stripe), and our cloud hosting providers — and only as needed to provide the Service. We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer, in which case this policy will continue to apply or notice will be given.

7. Data retention and deletion

We keep information for as long as a Practitioner's account is active and as needed to provide the Service, resolve disputes, and meet legal obligations (including records of messaging consent and opt-outs). When a Practitioner closes their account, we delete or anonymize their data and their Clients' data within a reasonable period, except where retention is required by law. Practitioners may also request deletion of specific Client records at any time.

8. Security

We use industry-standard safeguards — encryption in transit, access controls, and least-privilege practices — to protect the information we handle. No method of transmission or storage is perfectly secure, but we work to protect your information and will notify affected users of any breach as required by law.

9. Your choices and rights

Clients: reply STOP to any message to stop receiving texts. For questions about how your information is handled, you may contact us or the Practitioner you work with; we will assist promptly.
Practitioners: you can access, update, or delete your account information and your Client roster within the Service, revoke calendar access at any time, and close your account by contacting us.
Depending on where you live, you may have additional rights under applicable law (such as rights to access, correct, or delete personal information). Contact us to exercise them.

10. Children

The Service is intended for business use by adults. We do not knowingly collect information from children under 13. If you believe a child's information has been provided to us, contact us and we will delete it.

11. Changes to this policy

If we make material changes, we will update the date above and notify Practitioners by email or within the Service before the changes take effect.

12. Contact us

Green Grove Holdings LLC (d/b/a KneadBack)
Bradenton, Florida
kneadback@gmail.com