Privacy Policy

• Account — your email, display name, phone number (if you sign in by phone, or as a provider’s contact), and (for providers) salon details.
• Bookings — the services, dates and amounts you book.
• Content — photos, videos, captions, reviews and messages you post.
• Payments — card details are entered with our payment processor (Stripe); we never see or store your full card number, only the result (amount, status).
• Approximate location — estimated from your IP address to show salons near you. To do this your IP is sent to a third-party geolocation provider; we don’t store the IP used for this lookup (the separate sign-up record below is the one case where we do keep one).
• Sign-up origin — when you create an account we record the IP address you signed up from and the country it resolves to. We use this only to detect fraud and abuse (fake accounts, booking spam) and keep the platform safe. It is deleted with your account.
• Precise location — only if you grant location permission (the map’s “use my location”); used to find salons near you and never stored.
• Usage & device data — basic logs to keep the service secure and working.
• Session recordings — we use Microsoft Clarity to record how pages are used (mouse movement, clicks, scrolling and the screens you see) so we can find what’s broken or confusing. See Cookies & local storage below.

To provide the service — show salons, take and manage bookings, process payments and payouts, send booking notifications, detect fraud and abuse, keep the platform safe, and improve the product.

The salon/provider you book with sees your booking details. We use service providers to run Glowzi: our own self-hosted infrastructure (database, auth and storage), Stripe (payments), Twilio (SMS verification), OpenFreeMap and Photon/OpenStreetMap (maps & address search), Cloudflare (media delivery), Meta (advertising measurement — see Cookies & local storage below), Microsoft Clarity (session replay and click heatmaps), PostHog (product analytics, EU-hosted), and an IP-geolocation provider (to estimate your approximate location and to resolve the country your sign-up IP belongs to). These providers process data only to provide their service to us, except Meta, which also uses what the Pixel sends for its own purposes. We do not sell your personal data.

You can access, correct, or delete your data. You can delete your account at any time from your account screen — this removes your profile, bookings, likes, reviews and messages. Under GDPR you may also object to or restrict processing; contact us to exercise these rights.

We keep your data while your account is active and as needed to provide the service or meet legal obligations. When you delete your account, your personal data is removed. The IP address recorded when you sign up is kept for 12 months and then deleted; we keep the country it resolved to, which no longer identifies you.

We use a session cookie to keep you signed in and local storage to remember your language preference. We also run the Meta (Facebook) Pixel on every page: it sets its own cookies (_fbp, _fbc) and reports page views and key actions — viewing a salon, starting a booking, confirming a booking, creating an account, and submitting the salon sign-up form — to Meta so we can measure our advertising. Some of those actions (not page views) are also sent a second time from our server to Meta’s Conversions API — including, for providers, a signal when a salon profile is created — and where you are signed in they include a hashed (irreversible) form of your email or phone number, along with your IP address and browser details, so Meta can match the event to you. We also run Microsoft Clarity, which records session replays and click heatmaps of how the site is used, and PostHog, which counts which pages and features are used so we can see where people get stuck. PostHog stores its data in the EU; we don't send it your email, phone number or name, and links that contain a one-time code have that code removed before the event leaves your browser. Both load automatically; you can stop them with your browser’s tracking protection or an ad blocker.

Glowzi is not intended for anyone under 16. We don’t knowingly collect data from children.

We may update this policy; we’ll change the date above and, for material changes, notify you in the app.