Privacy policy

Salone by Zenocta Solutions · Last updated 20 October 2026

This policy explains what Salone (the “app”) collects, why, who can see it, and how you can delete it. Salone is developed by Zenocta Solutions (“we”) [legal entity name and registered address to be added]. Contact: contact@zenocta.com.

1. Who is responsible for what

A salon, barber shop or spa that uses Salone decides what client and business information to enter and is responsible for having the right to hold it (for example, telling its clients how their details are used). We process that information on the salon’s behalf, only to run the app. We do not use it for our own purposes. For the sign-in details of salon owners and staff, we decide why they are held (to run your account). [How these roles are described under India’s Digital Personal Data Protection Act, 2023 is to be confirmed by counsel.]

2. What we collect

• Account: the email address of each owner or staff member and the sign-in identifiers kept by Firebase Authentication. Your password is handled by Firebase Authentication; we never see it. Firebase Authentication emails you a link to confirm your address and a reset link if you ask for one.
• App integrity check: to stop abuse, the app asks Google (Firebase App Check, which uses Play Integrity on Android, App Attest or DeviceCheck on iPhone, and reCAPTCHA on the web) to confirm that a request comes from the genuine Salone app. This is a security check, not tracking or advertising. [Exactly which device signals Google receives for this check is to be confirmed against Google’s documentation.]
• Salon details you enter: salon name, address, working hours, holidays, tax settings (such as a GSTIN, if you enter one), a UPI ID if you choose to enter one, and booking rules. A UPI ID is used to show a payment QR; the app records payments you tell it about but does not process or verify them.
• Showing in the customer app, if you opt in: if the owner turns on “Show in the customer app”, the salon’s name, area, services, prices and opening hours are shown to customers who use the app. It is off until the owner turns it on.
• Services and staff: your service list and prices, and your staff’s names, schedules, time off and commission settings.
• Your clients’ details, if you enter them: name, mobile number, birthday, notes, tags, visit history and whether they agreed to be contacted.
• Appointment and billing records: bookings (who, which service and staff, when, status), invoices, payments, credit notes and the totals in reports.
• Your team, if you add one: the email address and role (manager, receptionist, stylist or accountant) of each person the owner invites. People on a team can see the salon’s records according to their role; the owner can remove them at any time.
• An activity log: [to be confirmed against the shipped app: for the main record-changing actions, one line saying what it was, which signed-in email did it and when].

Clients who book through your public booking page: the client enters their name and mobile number and confirms the number with a one-time code (OTP) sent by SMS through Firebase Authentication. The booking, name and number are then stored with the salon’s records and are visible to that salon’s staff according to their role. The salon, not Salone, is the one that holds the relationship with its client. A client can ask the salon to correct or delete their details (see section 7). [SMS delivery of the code is by Google and its carriers; whether any third-party SMS provider is involved is to be confirmed.]

Customers who use the Salone app to find a salon and book: the customer signs in with a mobile number, confirmed with a one-time code (OTP) sent by SMS through Firebase Authentication. We store that number, a record that they confirmed they are 18 or older and agreed to this policy (date and version), the name they give when they book, any note they type, and their bookings (salon, services, staff, time, status, price). Booking shares the customer’s name and number with that salon after they tick a box agreeing to it; the salon sees only its own bookings with that customer and cannot tell that they booked elsewhere, because each salon holds a separate reference and not the customer’s Salone account. To find a salon the customer types an area or a name: the app does not use their location. [How these roles are described under India’s Digital Personal Data Protection Act, 2023 for customers is to be confirmed by counsel.]

We do not collect: your location, contacts, photos, microphone, camera images, payment card or bank account details, or an advertising ID. At the time of writing the app has no analytics, crash-reporting or advertising tools and sends no push notifications.

Reminders and invoices: when you tap a WhatsApp button, Salone opens WhatsApp on your phone with a message already typed in (for example a booking confirmation or an invoice summary). It leaves your device only when you press Send in WhatsApp; Salone sends no messages itself and no server of ours is in that path.

On-device preferences: the app remembers a few things on your own device only, such as your look choice (light or dark) and an optional app-lock PIN, which is stored in a hashed form on that device and is never sent anywhere. Clearing the app’s data or your browser’s site data removes them. [Confirm against the shipped app.]

3. How we use it

• To provide the app: sign-in, calendar and booking, billing, clients, staff, reports and exports.
• To check that a booking is made from a real phone number, and to stop abuse of the public booking page.
• To answer your support emails.

4. Where it is stored and who else handles it

Your data is stored with Google Firebase and Google Cloud (Authentication, Cloud Firestore and Cloud Functions), which act as our service providers. The data region is intended to be Mumbai, India (asia-south1). [Data region to be confirmed by the owner once the project exists; do not rely on this until then.] Data is encrypted in transit (HTTPS). We do not sell your data and we do not share it for advertising.

5. How long we keep it, and deleting it

We keep your data while your account exists. You can delete your account at any time in the app (see how to delete your account). This permanently deletes your sign-in and the salon you own, with its services, staff, clients, appointments and billing records.

Customers delete their account in the app (Account tab, Delete my account, type DELETE). That cancels their upcoming bookings (if one is too close to its start time to cancel, deletion waits), erases their name and number from the salon client records created when they booked in the app, and deletes their customer account and booking list. A salon keeps the appointment and invoice records it already holds, with the name and number as they were at the time, because they are business and tax records. If the same person also runs a salon, only the customer side is deleted.

Copies in backups and logs are removed within [number of days to be confirmed]. The law may require a business to keep some records (for example tax invoices). [Counsel or a chartered accountant to confirm which records and for how long.] Export what you must keep before you delete. Deletion cannot be undone.

6. Security

Access to each salon’s data is limited to its own signed-in team by database security rules, and appointment times are written only by our server functions. No system is perfectly secure; please use a strong, unique password.

7. Your choices and rights

• See and correct your data in the app at any time.
• Delete your account in the app, or ask us by email.
• If you are a salon’s client and want your details corrected or deleted, ask the salon first; you can also write to us at contact@zenocta.com and we will pass the request to the salon or act on it where we hold the data. [Response time to be confirmed.]
• Questions or complaints about your data: contact@zenocta.com. [Grievance officer name and contact to be added.]

8. Children

Salone is for business use by adults. It is not directed at anyone under 18, and customer accounts are for people aged 18 or older (confirmed when they sign up). [How a salon records a client who is a child is to be reviewed by counsel.]

9. Changes

If we change this policy we will update the date above and, for material changes, tell you in the app.

10. Contact

Zenocta Solutions · contact@zenocta.com · [registered address to be added]