Privacy policy
Who we are
SalonTown and SalonTown Partner are made by Bluerhino ("we", "us"). SalonTown lets you request appointments with hairstylists at participating salons. SalonTown Partner lets salon owners and their hairstylists answer those requests and manage their salon. This policy explains what data the apps collect, why, who can see it, how long we keep it and how you can delete it.
Questions or requests: contact.bluerhino@gmail.com.
What we collect
| Data | Why we need it |
|---|---|
| Mobile phone number | To sign you in with a one-time code and to identify your account. The salon you book with also sees it so they can reach you about your appointment. |
| Name | To show on your profile and on the booking requests you send, so the salon knows who is coming. |
| Email (optional) | If you add one, so we can contact you about your account. It is not shown to salons. |
| Profile photo (optional) | If you add one, it is stored in Firebase Storage and shown on your profile. You can remove it in the app at any time. |
| Favourites | The salons and hairstylists you save, so you can find them again. |
| Bookings | The salon, hairstylist, service, date and time, price, any promo code and discount, the request status and its history. Needed to send your request, show its status and let the salon manage it. |
| Device push token | A token from Firebase Cloud Messaging so we can notify you when a request is accepted, a new time is suggested, a booking is declined or cancelled, and to send appointment reminders. You can turn notification types off in the app. |
| Crash reports | If the app crashes, Firebase Crashlytics records the error, the app version and basic device details (model, operating system version) so we can fix it. |
| Usage analytics | Firebase Analytics records in-app events such as viewing a salon or hairstylist, choosing a slot, requesting a booking, applying a promo code and signing up, along with an app-instance identifier and basic device details. We use this to understand which parts of the app work and to improve them. |
Staff using SalonTown Partner
If a salon owner adds you as staff, we also store your role (owner or hairstylist) and the salon and hairstylist profile you are linked to, so the app can show you the right requests.
Platform fee payments
When you send a booking request, you pay the 10% platform fee online through our payment partner Razorpay; the rest is paid at the salon. Razorpay handles the payment itself. We receive the order and payment reference, the amount, any SalonTown coupon used, and whether the payment succeeded or was refunded. We never see or store your card, UPI or bank details. To fill in the payment screen for you, we share your name, phone number and email (if you added one) with Razorpay.
What we do not collect
Apart from a profile photo you choose to add, we do not collect your contacts, photos, files or messages, and we do not sell your data or use it for advertising. If you allow location access, your location is used to show salons near you and how far they are, and it is not sent to us. It stays on your phone, except that your phone's address lookup (provided by Google on Android) uses it to find the street name shown in the app.
Who can see your data
- The salon you book with. When you send a request, the owner and hairstylists of that salon see your name, phone number and the booking details. They do not see your favourites or your bookings at other salons.
- Our service providers. The apps run on Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Crashlytics, Analytics and Hosting). Google processes this data on our behalf under its Firebase terms. Razorpay processes platform fee payments and refunds.
- When the law requires it. We may disclose data if we are legally required to, for example in response to a valid order from a court or government authority.
We do not sell, rent or trade your personal data.
How long we keep it
- Account, profile (including any email and photo), favourites and push tokens: for as long as your account exists. They are deleted when you delete your account.
- Bookings: kept while your account exists so you can see your history. When you delete your account, any upcoming requests or appointments are cancelled. Records of past appointments stay with the salon as part of its appointment history.
- Crash reports: kept by Firebase Crashlytics for up to 90 days.
- Analytics events: kept by Firebase Analytics for up to 14 months, then deleted automatically.
Deleting your account
In the SalonTown app, go to Profile → Delete account. This cancels your active bookings, deletes your profile, profile photo, favourites and push tokens, and deletes your sign-in account straight away.
If you can no longer use the app, email contact.bluerhino@gmail.com from any address with the phone number on your account. We will confirm it is your number and delete the account within 30 days. Full details are on the account deletion page.
Security
All data is sent over encrypted connections (HTTPS/TLS) and stored in Google Cloud. Access rules limit each person to their own data, and to the bookings of their own salon for salon staff. Booking changes are only made through our server functions, never directly from the app.
Your rights under Indian law
We process your personal data on the basis of your consent, given when you sign up and use the app, in line with India's Digital Personal Data Protection Act, 2023. Under that Act you can:
- ask for a summary of the personal data we hold about you and how we use it;
- ask us to correct, complete or update it (you can change your name, email and photo in the app at any time);
- withdraw consent and ask us to erase your data, which you can do by deleting your account;
- nominate another person to exercise these rights if you die or become unable to;
- raise a grievance with us, and, if you are not satisfied with our response, complain to the Data Protection Board of India.
To use any of these rights, email contact.bluerhino@gmail.com. We aim to reply within 7 days and to resolve requests within 30 days.
Children
The apps are meant for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
If we change this policy we will update the effective date above, and for significant changes we will tell you in the app before they take effect.