Privacy Policy

Effective Date: January 1, 2026
Version: 1.0

Scope and Acceptance

By registering or using the App, you consent to this Privacy Policy. Our services are intended for users located in India and are governed by Indian law.

Legal Basis for Processing

We process personal data based on user consent and legitimate business interests necessary to operate and improve our services in accordance with the Digital Personal Data Protection Act, 2023.

Information We Collect

• Full name
• Phone number (OTP authentication via Firebase Authentication)
• Age range (optional)
• Gender (optional)
• Booking history and selected services
• Loyalty and referral records
• Push notification device token (Firebase Cloud Messaging)
• Technical data such as device type, app version, and system logs for security purposes

Personal data such as phone number, booking history, loyalty records, and device tokens are linked to your user account to enable core app functionality.

We do not collect financial information, biometric identifiers, precise location data, contacts, or passwords.

How We Use Information

• Secure authentication and account management
• Processing salon bookings
• Managing loyalty rewards
• Sending booking confirmations and reminders
• Fraud detection and misuse prevention
• Maintaining system performance and security

Advertising and Analytics

The App does not display third-party advertisements. We do not sell personal data to any third party. The App does not use analytics tools for tracking user behavior.

Third-Party Services

• Google Firebase (Google LLC) – Phone authentication and push notifications.
• Amazon Web Services (AWS) – Cloud hosting, database storage, serverless processing, and monitoring.

These providers process data solely on our behalf under strict security safeguards. Some data may be processed or stored on secure servers located outside India. By using the App, you consent to such cross-border data processing.

Data Sharing

We do not sell, rent, or trade personal data. Information is shared only with service providers strictly for authentication, cloud hosting, notification delivery, and security monitoring.

Security Measures

All data is transmitted over encrypted HTTPS connections. Cloud databases use encryption at rest. Administrative access is protected using secure authentication and role-based controls. While we implement reasonable safeguards, no system can guarantee absolute security.

Permissions

The App does not request access to contacts, camera, microphone, external storage, or precise location.

Data Retention

We retain personal data only while your account remains active or as required for legitimate operational or legal purposes.

Account Deletion

Users may permanently delete their account directly within the App under Profile → Delete Account.

• Personal profile data is permanently removed.
• Booking and loyalty data linked to the account are deleted.
• Limited system logs may be retained temporarily for compliance and security purposes.

Users may also request deletion via email at madhubeautystudio@gmail.com.

Children’s Privacy

The App is not intended for individuals under 13 years of age. If we become aware that data of a child under 13 has been collected, we will delete such data promptly.

Your Rights

• Request access to your personal data
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent for processing

Data Breach Notification

In the event of a confirmed data breach affecting personal data, we will notify affected users and relevant authorities as required by law.

Policy Availability

This Privacy Policy is publicly accessible via the Google Play Store listing and within the App.

Changes to This Policy

We may update this Privacy Policy periodically. Continued use of the App after updates constitutes acceptance of the revised policy.

Contact Information

Data Controller:
Madhu’s Beauty Studio
Hyderabad, Telangana, India
Email: madhubeautystudio@gmail.com