PRIVACY POLICY AND DATA PROCESSING
Version 1.4 – Last updated: 31 July 2026
Welcome to BarbApp. Your privacy is our priority. This Policy describes how we collect, use, protect, and manage the personal information you share with us when using our appointment management platform for barbershops and barbers.
1. DATA CONTROLLER
The processing of personal data collected through this application is the responsibility of the BarbApp Administrative Team, domiciled in Colombia.
For any inquiries or to exercise your data rights, you may contact us at:
2. INFORMATION WE COLLECT
For the proper functioning of the platform, we collect the following data:
- Registration Data: Full name, phone number, and email address.
- Date of Birth: Collected optionally to personalise recurring appointment reminders.
- Profile Images: Avatar and cover photos voluntarily uploaded to personalise your profile.
- Location: GPS coordinates obtained only while the application is actively in use, for the purpose of locating nearby barbershops. We do not track your location in the background.
- Appointment History: Records of appointments booked, completed, cancelled, or rated through the platform.
- Ratings and Reviews: Service quality and punctuality ratings submitted after appointments.
- Social Networks (Barbers only): Barbers may optionally include their Instagram username in their public profile.
- Push Notification Tokens: Device tokens generated by Firebase Cloud Messaging (FCM) to send appointment confirmations, reminders, and alerts.
- Support Tickets: Messages and descriptions submitted through the in-app support form.
- Subscription Status: Plan type, subscription status, and renewal information managed by RevenueCat and the official app stores.
3. USE OF INFORMATION
Your data is used strictly for:
- Managing and confirming appointments between Clients and Barbers.
- Enabling geolocation of nearby barbershops.
- Sending push notifications related to appointments (confirmations, reminders, cancellations, ratings).
- Personalising your experience based on appointment history and preferences.
- Processing and managing subscriptions for Barber accounts.
- Responding to support requests.
- Improving platform security and preventing abusive behaviour.
4. STORAGE AND SECURITY
We use Google Firebase infrastructure (Cloud Firestore, Firebase Storage, Firebase Authentication) for data and image storage. Firebase operates under Google's enterprise-grade security standards, including data encryption at rest and in transit, to protect your information against unauthorised access.
Images are stored in Firebase Storage. Support tickets are stored in Cloud Firestore and processed via Resend for email delivery.
5. TRANSFER TO THIRD PARTIES
BarbApp does not sell or rent your personal data. We share information only with technical providers essential for operation:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Google Firebase | Database, authentication, push notifications, storage | google.com/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Google Maps | Geolocation services | google.com/privacy |
| Resend | Email delivery (account verification, password reset and support) | resend.com/legal/privacy-policy |
| Google Play Store | Payment processing (Android) | google.com/privacy |
| Apple App Store | Payment processing (iOS) | apple.com/legal/privacy |
Payment data for subscriptions is processed exclusively by Apple App Store and Google Play Store. BarbApp never accesses or stores credit card or financial payment details.
6. DATA RETENTION
We retain your personal data for as long as your account remains active. If you request deletion of your account:
- Your profile, images, and personal data will be permanently deleted within 30 days.
- Anonymised appointment statistics may be retained for operational purposes.
- Data required for legal compliance may be retained for the period required by applicable law.
7. YOUR RIGHTS
Depending on your country of residence, you may have the following rights:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate or incomplete data.
- Erasure (Right to be Forgotten): Request deletion of your personal data.
- Portability: Receive your data in a machine-readable format.
- Objection: Object to certain types of data processing.
You can exercise most of these rights directly from the app settings menu. For additional requests, contact us at support@barbapp.co.
Colombia (Ley 1581 de 2012 – Habeas Data): Colombian users have the right to know, update, rectify, and request deletion of their personal data at any time.
European Union (GDPR): EU residents have all the rights listed above and may lodge a complaint with their national data protection authority.
Brazil (LGPD – Lei 13.709/2018): Brazilian users have equivalent rights under the Lei Geral de Proteção de Dados.
California (CCPA/CPRA): California residents have the right to know, delete, and opt-out of the sale of personal information. BarbApp does not sell personal information.
8. CHILDREN'S PRIVACY
BarbApp is not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us at support@barbapp.co and we will delete it promptly.
9. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. When we do, we will update the version number and date at the top of this document and notify users through the app. Continued use of BarbApp after changes are published constitutes acceptance of the updated policy.
10. CONTACT
For any questions or concerns regarding this Privacy Policy or your personal data:
support@barbapp.co BarbApp Administrative Team — Colombia