Legal
App Privacy Policy
Last updated: 2026-06-20
1. Data Controller
OneBeauty ("Company," "we," "us," "our"), operating from Azerbaijan, is the data controller responsible for your personal data. Contact: hello@onebeauty.az
2. Information We Collect
Information you provide directly: • Account information (email address, full name, phone number) • Booking details (service preferences, appointment times, notes) • Profile updates and preferences • Support inquiries and correspondence • Ratings you submit after completed bookings Information collected automatically: • Device information (model, operating system, platform) • IP address • Location data (when you view salon locations on the map) • Usage analytics (anonymized and hashed user identifiers) • Push notification tokens • Booking history • Crash reports and diagnostic data
3. Legal Basis for Processing
We process your personal data based on the following legal grounds: • Contract performance — to provide the booking services you requested (account management, appointment processing, notifications) • Consent — for optional features such as push notifications, location access, and marketing communications. You may withdraw consent at any time through your device settings or by contacting us • Legitimate interest — to improve our services, ensure security, prevent fraud, and analyze anonymized usage patterns
4. How We Use Your Information
We use the information we collect to: • Provide, maintain, and improve our booking services • Process and manage your appointments • Send you booking confirmations, reminders, and cancellations via email • Communicate with you about your account and services • Display salon locations on the map • Analyze usage patterns to improve our app (using anonymized data) • Ensure security, prevent fraud, and diagnose technical issues • Comply with legal obligations
5. Data Sharing and Disclosure
We share your personal data with the following parties: • Salons and service providers — your name, booking details, and contact information are shared with the salon you book with, so they can provide the requested service • Third-party service providers — we use trusted services to operate our platform (see Section 7) • Legal authorities — if required by law, court order, or to protect our rights and safety We do not sell your personal data to third parties.
6. Data Storage and International Transfers
Your data is stored securely using Firebase (Google Cloud Platform): • User account information is stored in Firebase Authentication • Booking and profile data is stored in Cloud Firestore • All data is encrypted in transit (TLS/SSL) and at rest Your data may be transferred to and processed in countries outside Azerbaijan, including the United States and the European Union, where Google and other service providers operate their data centers. These transfers are protected by appropriate safeguards, including Google's data processing terms and standard contractual clauses.
7. Third-Party Services
We use the following third-party services that may process your data: • Firebase Authentication (Google) — account management and login • Cloud Firestore (Google) — database storage • Firebase Cloud Functions (Google) — backend processing • Firebase Analytics (Google) — anonymized usage analytics • Firebase Crashlytics (Google) — crash reporting and diagnostics • Firebase Cloud Messaging (Google) — push notifications • Google Sign-In — account creation and login • Apple Sign-In — account creation and login (iOS/macOS) • Google Maps — displaying salon locations • Resend — email delivery (booking confirmations, OTP codes, reminders) Each service has its own privacy policy. We recommend reviewing them. We only share the minimum data necessary for each service to function.
8. Security Measures
We implement appropriate technical and organizational measures to protect your data: • Secure authentication using Firebase Auth • Encrypted data transmission (TLS/SSL) • Encryption at rest for stored data • Access controls and role-based permissions • Anonymized analytics data (user IDs are hashed with SHA-256) • Rate limiting on sensitive operations (e.g., OTP requests) • Regular security reviews and updates
9. Data Retention
We retain your data for as long as necessary to provide our services: • Active account data — retained while your account is active • Booking history — retained for up to 3 years after completion for record-keeping and dispute resolution • Analytics data — retained in anonymized form indefinitely • Crash reports — retained for up to 90 days • Email delivery logs — retained for up to 30 days When you delete your account, your personal data will be removed within 30 days, except where retention is required by law.
10. Your Rights
You have the right to: • Access — request a copy of the personal data we hold about you • Rectification — correct inaccurate or incomplete data • Erasure — request deletion of your account and associated data • Restriction — request that we limit processing of your data • Data portability — receive your data in a structured, machine-readable format • Object — object to processing based on legitimate interest • Withdraw consent — withdraw consent at any time for consent-based processing, without affecting the lawfulness of prior processing To exercise any of these rights, please contact us at hello@onebeauty.az. We will respond to your request within 30 days. You also have the right to lodge a complaint with a data protection authority if you believe your data has been processed unlawfully.
11. Cookies and Tracking Technologies
Our mobile app does not use browser cookies. However, we use the following tracking technologies: • Firebase Analytics — collects anonymized usage data to help us understand how the app is used • Firebase Crashlytics — collects crash and error data to help us diagnose and fix issues • Push notification tokens — stored to deliver notifications to your device You can disable analytics data collection and push notifications through your device settings.
12. Age Requirements
You must be at least 16 years old to use the Services. We do not knowingly collect personal information from anyone under the age of 16. If we learn that we have collected personal data from a user under 16, we will delete that information promptly. If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us immediately at hello@onebeauty.az.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of changes by: • Updating the "Last updated" date at the top of this page • Sending a notification for significant changes Your continued use of the Services after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or want to file a complaint, please contact us: Email: hello@onebeauty.az Country: Azerbaijan