Consent forms

In Consent forms you choose the type of work, then the artist. The app immediately shows a QR code, an “Open on tablet” button and the link, ready to copy.

The QR code is for a client who is at the studio: they scan it and fill it in on their own phone.
The tablet is for when the client doesn't have their phone to hand, or you prefer them to fill it in at the desk.
The link you send on WhatsApp before they come, so they don't lose time at the studio.

All three lead to the same form. The link is tied to a single session and can be used only once — after it has been signed it can't be reopened or overwritten.

Each has its own fields; it isn't the same form with a different title.

Tattoo — identification details, the area and a description of the work.
Piercing — in addition: the jewellery material and where it comes from, if the client brings their own.
Piercing for a minor — signed twice: by the minor and by the parent or legal guardian, each with their own signature.
Laser — includes a medical questionnaire: sun exposure, pregnancy, photosensitising medication, acid creams, plus consent to photograph the area.

You can add your own fields to any of them, from Settings.

No app, no account, no password. The form opens in the phone's browser, the client fills it in, signs with a finger on the screen, and that's it.

It works on any phone, and on a tablet.

Consent forms are translated into 7 languages: Romanian, English, Italian, German, French, Russian and Spanish. Not just the interface — the text the client accepts too.

The language is chosen automatically from their phone, and there is a selector at the top of the page if they want another.

The PDF comes out in two languages: the studio's language and the language the client read. So you have a document you understand, which still shows exactly what they read.

When the client signs, the text they read is saved in the document, word for word — the title, the conditions, the agreements, the field labels, the legal basis. In both languages.

The PDF is printed from that saved text, not from today's template. So you can change the template at any time without touching the old documents.

It matters the other way round too: if someone asks for their consent form years later, you produce exactly what they signed then, not a version rewritten since.

At signing, the server calculates a SHA-256 fingerprint over everything that matters: the client's details, the signature, and the text they accepted. The fingerprint is printed on the PDF, together with the IP address it was signed from and the exact time set by the server — not by the client's phone.

If anyone then changes anything — a letter in the details, the signature, or the text of the conditions — the fingerprint no longer matches, and the PDF prints the warning “CONTENT MODIFIED”.

The fingerprint is calculated on the server, not on the client's phone, and cannot be sent in from outside.

A consent form exists precisely as proof. The question asked at an inspection or in a dispute is not “does the paper exist?” but “is it the same paper the person signed?”.

Without a fingerprint, the answer depends on trusting the system that produced it. With a fingerprint, anyone can recalculate it — years later, on another computer, without an account with us and without asking us.

That is the difference between “take our word for it” and “check for yourself”.

Worth knowing, so you don't expect the wrong thing: a finger signature on a screen is a simple electronic signature. It is valid and admissible for consents — its value can't be denied just because it is electronic. The seal doesn't turn it into a qualified signature; it makes it hard to dispute.

The check runs by itself every time you print. You don't have to press anything or know what SHA-256 is.

The PDF shows the seal line with the fingerprint, the IP and the time. If something has changed in the meantime, a red warning appears in its place.

Consent forms signed before October 2026 have a fingerprint that covers the details and the signature, but not the text. They are still checked by their own rule — we didn't invalidate them retroactively.

The “Piercing — minor” type has two separate signature pads, not one signed by the parent on the child's behalf.

Both signatures are part of the document's fingerprint. If one is missing, the form can't be sent.

In Settings → Consent forms you build your template: add fields, group them into sections, add Yes/No questions, remove what you don't need.

You can also change the text of the conditions and the agreements.

The labels you write appear in all 7 languages, and the signed text is frozen at signing, like any other.

There are two ways:

Saved signature — you draw it once, in Settings → Artists, and it is applied to the PDFs automatically.
Signing on the spot — if you tick “live signature” for the artist, a sign button with a pad appears in the archive. The time and the IP address you signed from are recorded.

The artist's signature is a separate layer: it is added after the client has signed and doesn't change their fingerprint.

The consent form is written to the database only at signing, in one go. A form started and abandoned leaves nothing behind.

If the client closes the page, they can reopen the same link and start again.

As soon as the client signs, the consent form appears in Consent forms → Archive and gets a registration number for the current year, in order.

It also appears on the client's record, linked to them by phone number.

From the archive you can print the PDF, sign as the artist, renew the consent form for a new session, archive what is no longer current, or delete.

Consent forms don't expire. A consent form stays there until you delete it. The only things that disappear on their own, after a few months, are the pages behind the links sent to clients (confirmation, reminder, aftercare, deposit, booking form) — consent forms, appointments and client records stay.

How long it must be kept is a matter of law, and it differs from country to country. You set the period with your adviser — you'll also find it in the retention policy in the GDPR file, which is filled in with your studio's details. The app doesn't limit you in any way.

In the archive, the “All” button creates one PDF with every consent form in the list shown at that moment — so you can filter by type or period first, then print only what you need.

Separately, from Settings → Data you download all of the studio's data in one file.

The “Delete the client's data (GDPR)” option removes the person everywhere they appear in the studio:

· their consent forms are deleted;
· their appointments stay in the calendar, but without the name, phone, e-mail and reference photos;
· their client file (notes and allergies) is deleted;
· their waiting list entries are deleted;
· work in Accounting keeps the amounts, but without their name and phone.

Before you confirm, the window shows how many entries are affected in each place.

The person is identified by phone number, not by name — so two clients with the same name aren't deleted together. If there are namesakes with a different phone number, the confirmation window tells you how many consent forms will not be touched.

The deletion is final and can't be undone. It is recorded in the activity log: who deleted and when — without the person's name.