Privacy Policy

• Account data — name, email, avatar, account type (client / barber), preferred language, notification preferences.
• Barbershop data — shop name, slug, logo, services, prices, team members, working hours.
• Booking data — appointment date, service, price, notes, cancellation reasons.
• VIP & finance data — points, tier, discounts, revenue records visible to the shop that owns them.
• Uploaded media — portfolio photos, review photos, style analysis photos.
• Technical data — device type, browser, IP address (for security and error logging), push-notification device tokens.

• To operate the booking, VIP and finance features you use.
• To send transactional messages: confirmations, cancellations, 24h reminders.
• To improve the service, fix bugs, and monitor security.
• To power AI style analysis on photos you explicitly upload for that purpose.
• To meet legal obligations (tax, fraud prevention, lawful requests).

Your visibility is scoped by strict access-control policies. A client's history, contact info and photos are only visible to the client themselves and to shops they have booked with. Team members only see data for the shop they belong to. We never sell your data.

When you use AI style analysis, the photo and the derived analysis are processed by our AI provider to generate the result. We do not use your photos to train models. You can delete uploaded photos at any time from your profile.

• Cloud backend — database, authentication, storage.
• AI provider — AI style analysis and style matching.
• OneSignal — push notifications.

We keep account and booking data for as long as your account exists. When you delete your account, we remove your personal data within 30 days, except where we must keep it longer for legal reasons (e.g. tax records for shops).

Depending on where you live, you have the right to access, correct, export or delete your personal data, and to object to certain processing. Contact us and we will respond within a reasonable timeframe.

We use industry-standard measures: TLS everywhere, encrypted storage, row-level access control enforced at the database, principle of least privilege for our staff, and regular security scanning. No system is perfectly secure — we will notify affected users of any breach that impacts them.

We use only essential cookies and local storage required to keep you signed in and to remember your language and theme. We do not use tracking or advertising cookies.

We will notify you of material changes to this policy in-app before they take effect.

Privacy questions or requests: privacy@barberyhub.app.