Privacy Policy
1. What we collect
An account holds your name, your email address if you signed in with one, your mobile number, a photo if you set one, and the city you chose.
We verify your mobile number by sending a one-time password to it. That is the only text message Salonhop sends you today.
Your account is created with app reminders and email reminders switched on, and Account → Settings is where you change that. App reminders reach your handset as notifications; email reminders go to the address on your profile and are sent only when an email provider is configured for your operator — §4 names the company that carries them. There is no reminder by text message — the one-time password above is the only text message we send.
Beyond the account itself: your bookings and the services on them, the messages you send a salon, and the reviews you write.
If you ask us to tell you when Salonhop opens, we keep your email address and the city you gave. If you register a salon, we keep the salon’s name, your name, the phone number or email address you chose, and the city.
2. Your device
If you allow it, the app reads your device location to sort salons by distance and to suggest your city. It is read only while the app is on screen: the Android app does not ask for background location at all, so nothing reads a position while the app is not in front of you. Refusing the permission costs you the distance sort and nothing else.
If you allow notifications, the app registers a notification token with Google so a booking update can reach that handset. The token identifies that installation of the app.
3. What the salon sees
Each salon you visit keeps its own client record for you: your name and mobile number, the services you booked, and figures our servers compute from your visits — how many times you came, how many bookings you cancelled, how many you did not turn up for, what you have spent there, and who usually does your hair. The salon can also add its own notes and labels. That record belongs to that salon and is not shared with other salons.
Your messages to a salon are read by that salon’s team, not by one person there. While a conversation is open, each side can see whether the other is online and when they were last seen.
A review you post is public. Posted without your name it shows as “A verified client”, but it stays attached to your account and to the booking that earned it — so it is hidden from other readers, not from the salon and not from us.
4. Where it is stored
Your bookings, messages and reviews are stored in Google’s Mumbai region (asia-south1), and the functions that process them run there. Signing in is different: your phone number, your email address and the one-time password are handled by Google’s global identity service, and app notifications go through Google’s global messaging service.
We send your data to two companies. Google — sign-in, the database, our server functions, notifications, hosting and Maps. And Mailgun, a Sinch company, in the United States, which delivers our email: it receives the address a message goes to and the text of that message — a team invitation, a booking reminder, or the notice that a data export you asked for is ready. The export itself is never attached to an email; it comes back to you in the app. There is no payment processor and no text-message gateway connected to Salonhop, because there is nothing yet for them to do.
One thing your device does reach on its own: a salon’s photographs are served from wherever that salon’s images are hosted, so opening a salon in the app contacts that image host. We send it nothing about you; it sees the request, as any web server sees a request.
5. This website
The pages you can read without booking — the home page, For salons, Help, Terms, Privacy, Licenses — run no analytics, no trackers and no third-party scripts, and set no cookies. The booking pages, and the pages a booking link opens, are different — and this section says how.
The home page and For salons each carry one form that sends what you type. It is sent only to Salonhop’s own servers, in asia-south1 (Mumbai), and is used for one thing: on the home page, one email when the Salonhop app opens; on For salons, someone from Salonhop contacting you about getting your salon on Salonhop. It is not used for advertising and is not shared with salons. We keep it for 12 months and then delete it.
On a booking page, two of Google’s services load and one thing is stored in your browser. Firebase Auth, for the one-time password that verifies your phone. reCAPTCHA, Google’s, to stop automated sign-in attempts — it is the checkbox on the confirm step. And a sign-in token, so a refresh does not lose your booking.
Your booking draft — the services and time you picked, the name and any note you typed — is kept in that browser tab only, and is cleared when you close it. Your phone number and the one-time code are not kept there.
A booking link sets one cookie, on that booking’s pages only. It holds the link’s own key, so the address bar does not have to — a web address is written down in server logs and in your browser history, and a key should not be. Your browser will not let any script on the page read it, it is discarded after two hours, and no other page on this site sets a cookie at all.
The typeface is served from this site itself — the font files are fetched once when the site is built — so on the pages above your browser makes no request to any other host at all. Our hosting provider keeps ordinary web-server request logs, as every web server does.
6. Your choices
You can edit your profile, and change or delete a review you wrote, in the app.
To get a copy of your data, or to have your account deleted, ask us in the app — a message to any salon you have booked with reaches a person — or write to support@salonhop.com. Doing either yourself, from a screen, is being built.
To have what you sent through either form deleted, write to support@salonhop.com from the address or about the number you used, and we delete it.
7. If you work at a salon
A Salonhop Partner account holds your name, your work email address and your role in the salon.
The partner app can re-lock behind your device’s own biometric check. That check happens on the device and returns a yes or a no; no fingerprint or face data reaches Salonhop.
Your presence — whether you are online, and when you were last seen — is shown to a client while a conversation with them is open.
Everyone on your team can read the client records your salon holds: names, mobile numbers and visit history.