BookMyBarber

 # Privacy Policy for BookMyBarber

**Last Updated:** April 28, 2026  
**Effective Date:** April 28, 2026

---

## 1. Introduction

Welcome to **BookMyBarber** ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency in how we collect, use, store, and share your personal information. This Privacy Policy explains our data practices in compliance with Google Play Store policies, including the latest updates effective April 15, 2026.

By using BookMyBarber, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our application.

**App Name:** BookMyBarber  
**Package Name:** com.barber.waitinglist (or your actual package name)  
**Developer Contact:** [Your Email Address]  
**Support:** [Your Support Email/Website]

---

## 2. Information We Collect

We collect different types of information to provide and improve our services:

### 2.1 Personal Information You Provide

When you register and use our app, we collect:

- **Account Information:**
  - Full name
  - Email address
  - Phone number
  - Password (encrypted and securely stored)
  - User role (Customer or Barber/Shop Owner)

- **Barber/Shop Owner Additional Information:**
  - Shop name
  - Shop address
  - Shop images/photos
  - Service offerings and pricing
  - Business hours and availability
  - Barber specialties

- **Customer Profile Information:**
  - Booking preferences
  - Service history
  - Ratings and reviews

### 2.2 Location Data

**⚠️ IMPORTANT - Location Permissions Policy Compliance (2026 Update)**

We collect and use location data for the following purposes:

- **Foreground Location Access:**
  - Finding nearby barber shops
  - Displaying shop locations on Google Maps
  - Auto-filling shop address during registration
  - Distance calculation and navigation

- **Location Data Type:**
  - Precise location (GPS and network-based)
  - Approximate location (network-based)

**How We Comply with 2026 Location Policy:**
- We use the **location button** as the recommended minimum scope for precise location access
- We do NOT use geofencing for foreground services
- If geofencing features are implemented, we use the official **Geofence API**
- Location access is requested only when needed for specific features
- You can deny location access, but map-based features will be limited

**User Control:**
- You can enable/disable location services in your device settings
- Location data is only accessed when you actively use location-based features
- Background location access is NOT used for tracking purposes

### 2.3 Photos and Media

**Photo and Video Permissions Policy Compliance:**

We request access to your device's camera and photo gallery for:

- **Shop Owners/Barbers:**
  - Uploading shop images
  - Updating profile pictures
  - Showcasing services and work samples

- **Customers:**
  - Updating profile pictures (if feature is enabled)

**How We Use Photo Picker:**
- We use Android's official **Photo Picker** and **Image Picker** APIs
- We only access images you explicitly select
- We do NOT scan or access your entire photo library
- Images are compressed before upload to minimize data usage

### 2.4 Payment Information

We collect payment-related information through **Razorpay**, our third-party payment processor:

- Payment method details (processed by Razorpay)
- Transaction history
- Payment status and receipts
- Subscription plan information

**Important:** We do NOT store your complete credit/debit card numbers, CVV, or banking credentials. All payment processing is handled securely by Razorpay in compliance with PCI-DSS standards.

### 2.5 Booking and Usage Data

- Booking history and status
- Service preferences
- Appointment dates and times
- Waitlist positions
- Ratings and feedback

### 2.6 Device and Technical Information

- Device model and operating system version
- Unique device identifiers (for push notifications)
- App version and crash logs
- IP address
- Network information

### 2.7 Push Notification Data

We collect and store:
- Firebase Cloud Messaging (FCM) tokens
- Notification preferences
- Notification delivery status

---

## 3. How We Use Your Information

We use the collected information for the following purposes:

### 3.1 Core App Functionality

- **Account Management:** Creating and managing user accounts
- **Booking Services:** Facilitating appointment bookings and waitlist management
- **Location Services:** Helping customers find nearby barber shops
- **Communication:** Sending booking confirmations, reminders, and updates
- **Payment Processing:** Processing subscription payments and booking fees

### 3.2 Service Improvement

- Analyzing app usage to improve features
- Fixing bugs and technical issues
- Developing new features based on user feedback
- Optimizing app performance

### 3.3 Customer Support

- Responding to your inquiries and support requests
- Resolving disputes and troubleshooting issues
- Providing technical assistance

### 3.4 Push Notifications

- Booking confirmations and reminders
- Waitlist status updates
- Promotional offers (with your consent)
- Important app updates and announcements

### 3.5 Legal and Security

- Complying with legal obligations
- Preventing fraud and unauthorized access
- Enforcing our Terms of Service
- Protecting user safety and security

---

## 4. How We Share Your Information

We do NOT sell your personal information to third parties. We only share your information in the following limited circumstances:

### 4.1 With Service Providers

We share data with trusted third-party service providers who assist us in operating our app:

- **Firebase (Google):** Cloud messaging, analytics, and crash reporting
- **Razorpay:** Payment processing
- **Google Maps Platform:** Location and mapping services
- **Backend API Server:** Storing and managing app data

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

### 4.2 Between Users

- **Customers can see:** Barber shop names, addresses, services, ratings, and availability
- **Barbers can see:** Customer names, booking details, and contact information (only for confirmed bookings)

### 4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to:
- Comply with legal processes
- Protect our rights and property
- Prevent fraud or security threats
- Protect user safety

### 4.4 Business Transfers

If BookMyBarber is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

---

## 5. Data Storage and Security

### 5.1 Where We Store Your Data

Your data is stored on secure servers located in [Your Server Location/Region]. We use industry-standard security measures including:

- **Encryption:** All sensitive data is encrypted in transit (TLS/SSL) and at rest
- **Secure Storage:** Passwords are hashed using bcrypt or similar algorithms
- **Authentication Tokens:** Stored securely using Flutter Secure Storage
- **Access Controls:** Limited access to personal data by authorized personnel only

### 5.2 Data Retention

We retain your personal information for as long as necessary to:
- Provide our services
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements

**Retention Periods:**
- **Active Accounts:** Data retained while your account is active
- **Inactive Accounts:** Data may be deleted after [X months/years] of inactivity
- **Deleted Accounts:** Data permanently deleted within 30-90 days of account deletion request
- **Transaction Records:** Retained for [X years] for legal and accounting purposes

### 5.3 Data Security Measures

While we implement robust security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we continuously work to protect your information.

---

## 6. Your Rights and Choices

### 6.1 Access and Update

You can access and update your personal information through:
- In-app profile settings
- Contacting our support team at [Your Support Email]

### 6.2 Account Deletion

You have the right to delete your account and personal data:
- Use the "Delete Account" option in app settings
- Contact us at [Your Support Email] to request account deletion
- Upon deletion, your data will be permanently removed within 30-90 days

### 6.3 Data Portability

You can request a copy of your personal data in a machine-readable format by contacting us at [Your Support Email].

### 6.4 Opt-Out Options

- **Push Notifications:** Disable in app settings or device settings
- **Location Services:** Disable in device settings (may limit app functionality)
- **Marketing Communications:** Unsubscribe using the link in emails or contact us

### 6.5 Withdraw Consent

You can withdraw consent for data collection at any time by:
- Adjusting app permissions in device settings
- Deleting your account
- Contacting us directly

---

## 7. Consent Requirements (2026 Policy Compliance)

**⚠️ IMPORTANT - Consent Dialog Compliance**

In accordance with Google Play's 2026 consent requirements, we ensure:

✅ **Unambiguous Consent Dialogs:** All data collection requires clear, explicit consent  
✅ **Affirmative User Action:** You must actively tap "Accept" or check a checkbox  
✅ **No Assumed Consent:** Navigating away does NOT count as consent  
✅ **No Auto-Dismiss:** Consent dialogs do not auto-dismiss or expire  
✅ **Granular Permissions:** You can grant or deny specific permissions individually

**What This Means for You:**
- You will see clear permission requests before we access sensitive data
- You must actively agree to each permission
- You can change your mind and revoke permissions at any time
- Dismissing a permission dialog means "No" - we will not assume consent

---

## 8. Third-Party Services and SDKs

Our app integrates the following third-party services, each with their own privacy policies:

### 8.1 Google Services

- **Firebase Cloud Messaging:** Push notifications ([Firebase Privacy Policy](https://firebase.google.com/support/privacy))
- **Google Maps Platform:** Location and mapping ([Google Privacy Policy](https://policies.google.com/privacy))

### 8.2 Payment Services

- **Razorpay:** Payment processing ([Razorpay Privacy Policy](https://razorpay.com/privacy/))

### 8.3 Other SDKs

- **Flutter Framework:** Open-source UI framework by Google
- **Dio HTTP Client:** Network requests (no data collection)
- **Image Picker:** Local image selection (no data transmission)

**Transparency Commitment:**
We regularly review all third-party SDKs to ensure they comply with our privacy standards and Google Play policies.

---

## 9. Children's Privacy

BookMyBarber is NOT intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction).

- We do NOT knowingly collect personal information from children
- If we discover that a child has provided us with personal information, we will delete it immediately
- Parents/guardians who believe their child has provided information should contact us at [Your Support Email]

**Age-Restricted Content Compliance:**
If our app includes any dating/matchmaking features in the future, we will implement effective age-gating mechanisms to prevent minors from accessing such features, in compliance with Google Play's 2026 policy clarifications.

---

## 10. International Data Transfers

If you are located outside [Your Country/Region], please note that your information may be transferred to and processed in countries where our servers are located. These countries may have different data protection laws than your country.

By using BookMyBarber, you consent to the transfer of your information to our facilities and service providers as described in this policy.

---

## 11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

- **Right to Know:** Request information about data we collect and how we use it
- **Right to Delete:** Request deletion of your personal information
- **Right to Opt-Out:** Opt-out of the sale of personal information (Note: We do NOT sell personal information)
- **Right to Non-Discrimination:** We will not discriminate against you for exercising your rights

To exercise these rights, contact us at [Your Support Email].

---

## 12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

- **Right of Access:** Obtain confirmation of data processing and access to your data
- **Right to Rectification:** Correct inaccurate personal data
- **Right to Erasure:** Request deletion of your personal data ("right to be forgotten")
- **Right to Restriction:** Restrict processing of your personal data
- **Right to Data Portability:** Receive your data in a structured, machine-readable format
- **Right to Object:** Object to processing of your personal data
- **Right to Withdraw Consent:** Withdraw consent at any time

**Legal Basis for Processing:**
- **Consent:** You have given explicit consent for specific purposes
- **Contract:** Processing is necessary to fulfill our contract with you
- **Legal Obligation:** Processing is required by law
- **Legitimate Interest:** Processing is necessary for our legitimate business interests

To exercise these rights, contact us at [Your Support Email].

---

## 13. Data Safety Section (Google Play Compliance)

In accordance with Google Play's Data Safety requirements, we declare:

### 13.1 Data Collection Summary

| Data Type | Collected | Purpose | Shared |
|-----------|-----------|---------|--------|
| Name | Yes | Account creation, bookings | With barbers (for bookings) |
| Email | Yes | Account creation, communication | No |
| Phone Number | Yes | Account creation, communication | With barbers (for bookings) |
| Location | Yes | Finding nearby shops, navigation | Google Maps |
| Photos | Yes | Profile pictures, shop images | Stored on our servers |
| Payment Info | Yes | Processing payments | Razorpay (payment processor) |
| Device ID | Yes | Push notifications | Firebase |
| App Activity | Yes | Service improvement | No |

### 13.2 Security Practices

✅ Data is encrypted in transit using TLS/SSL  
✅ Data is encrypted at rest  
✅ You can request data deletion  
✅ We follow industry-standard security practices  
✅ We do NOT sell your data to third parties

### 13.3 Data Accuracy Commitment

We commit to keeping our Data Safety section accurate and up-to-date. Any changes to our data practices will be reflected in both this Privacy Policy and our Google Play Data Safety declaration.

---

## 14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:
- Changes in our data practices
- New features or services
- Legal or regulatory requirements
- Google Play policy updates

**How We Notify You:**
- **Material Changes:** We will notify you via email or in-app notification at least 30 days before changes take effect
- **Minor Changes:** We will update the "Last Updated" date at the top of this policy
- **Your Responsibility:** Please review this policy periodically

**Continued Use:** Your continued use of BookMyBarber after changes take effect constitutes acceptance of the updated policy.

---

## 15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Developer/Company Name:** [Your Company Name]  
**Email:** [Your Support Email]  
**Address:** [Your Business Address]  
**Phone:** [Your Contact Number]  
**Support Portal:** [Your Website/Support URL]

**Response Time:** We aim to respond to all privacy-related inquiries within 7-14 business days.

---

## 16. Google Play Policy Compliance Statement

This Privacy Policy has been prepared in compliance with:

✅ Google Play Store Privacy Policy (Updated April 15, 2026)  
✅ Contacts Permissions Policy (2026)  
✅ Location Permissions Policy (2026 Update)  
✅ Photo and Video Permissions Policy  
✅ User Data and Sensitive Permissions Requirements  
✅ Data Safety Section Requirements  
✅ Consent Requirements (2026 Update)  
✅ General Data Protection Regulation (GDPR)  
✅ California Consumer Privacy Act (CCPA)  

**Policy Review Date:** April 28, 2026  
**Next Review Date:** October 28, 2026 (or as required by policy updates)

---

## 17. Acknowledgment and Consent

By clicking "I Agree" during registration or by continuing to use BookMyBarber, you acknowledge that:

1. You have read and understood this Privacy Policy
2. You consent to the collection, use, and sharing of your information as described
3. You are at least 13 years of age (or the applicable age of digital consent)
4. You understand your rights and how to exercise them
5. You agree to receive necessary communications related to your use of the app

---

**Thank you for trusting BookMyBarber with your information. We are committed to protecting your privacy and providing a safe, transparent experience.**

---

*This Privacy Policy is effective as of April 28, 2026 and supersedes all previous versions.*