Privacy policy
Last updated: 7 November 2026
This policy explains what personal data the Chairo app and the chairo.app website collect, why, how long we keep it, and your rights.
1. Who is responsible for your data
Your personal data is controlled by Chairo, Tešanj, Bosnia and Herzegovina.
Contact for all privacy questions: privacy@chairo.app
2. Who this policy covers
- clients who book appointments,
- barbers and other shop team members,
- shop owners,
- people without an account whom a shop enters for an appointment,
- visitors to chairo.app.
3. What data we collect
Everyone with an account
- Email address and password, if you use one. The password is stored only in a form that cannot be read.
- If you sign in with Google or Apple: Google shares your name, email and profile picture with us, and Apple shares your name and email. Apple may give us a hidden relay address instead of your real email. We keep the Google profile picture as your Chairo profile photo. We never see your Google or Apple password.
- Sign-in details: when the account was created, when you last signed in, and when your email was confirmed.
- First name, last name, username, and the shop code you joined with.
- Phone number, only on older accounts. The app no longer asks for it.
- Profile photo, if you add one.
- Your choices for notifications and analytics (email, push, SMS). All are off until you turn them on. We keep a history of changes so we can prove your consent.
- In-app notifications and the categories you muted.
- If you allow push notifications: your device's push token (the address a notification uses to reach that phone), the device type (Android or iOS), the app language, and when the device was last used.
- Times of failed password attempts, to stop password guessing.
- Privacy requests you send us.
- Bug reports and feedback: the text, report type, your role, shop, app version, operating system, phone model, app language, and the screen it was sent from. Up to 3 screenshots, if you attach them.
- Shop invite codes.
Clients
- The shops you joined, how you joined (code, QR or link), your preferred barber, who invited you, and when you joined and left.
- Appointments: shop, barber, service, price, length, time, booking reference, status, cancellation reason, and no-shows.
- Shop staff can see your name, username, phone (if any), photo, and your no-show count at their shop.
Barbers and team members
- Display name, role, status, whether clients can book you, and who invited you and when.
- Work schedule, time off with an optional note, notes on requests to the owner, services and prices, and saved shifts.
- Please don't put health or other sensitive details in notes.
Shop owners
- Shop profile: name, description, address, phone, time zone, services, prices and booking rules.
- Shop photos (logo, cover and gallery). These are public.
- Subscription: plan, status and end date.
People without an account
If a shop books you without a Chairo account, we keep the name and phone number the shop entered.
Website
- To sign up and sign in: name, email and password. It's the same account as in the app.
- Our host (Cloudflare) records visitors' IP addresses in technical logs.
- If you sign up for early access: your email and the site language.
- We use no analytics, ads or tracking cookies. Your browser keeps only what's needed to stay signed in.
On your phone
- Your sign-in is stored on the phone in encrypted form. Language and display settings are cleared when you sign out.
- The camera is used only to scan a shop's QR code. No images are saved.
- Photos: the app receives only the photos you pick.
- Calendar: the app only opens your phone's screen for adding an event. It doesn't read your calendar.
What we don't do
No analytics, tracking or ads. We don't use your location. We don't sell your data.
4. Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Your account and sign-in | Performance of a contract (terms of use) |
| Booking appointments and running the shop | Performance of a contract |
| In-app notifications about appointments | Performance of a contract |
| Push notifications about your appointments and account (new, moved and cancelled bookings, reminders before them, repeat appointment offers and changes and the answers to them, missed appointments, removal from a team, a shop closing) | Performance of a contract. Notification settings in the app turn groups of messages off, but some messages are still sent because they need an answer or affect an appointment or the account: cancelled appointments and a repeat appointment ending (for clients), a proposed appointment change, missed appointments, removal from a team, and a shop closing. Push can always be turned off entirely in your phone's settings. |
| Preventing abuse and password guessing | Legitimate interest |
| Fixing reported problems | Legitimate interest |
| Keeping past appointment records for the shop | The shop's legitimate interest |
| Email, push or SMS news | Only with your consent |
| Answering privacy requests | Legal obligation |
| Telling you when the app launches (early access) | Your consent |
| Charging shop owners a subscription | Performance of a contract |
5. Who sees your data
The shop and its team see what they need for your appointments, as described in section 3.
Other users see a shop's public profile and its barbers' names and photos.
Service providers process data for us, only for the purposes in this policy:
| Provider | What we use it for |
|---|---|
| Supabase | Database, sign-in and file storage. Data is stored in the European Union. |
| Resend | Sending account emails and the early access welcome email, plus internal alerts to us. Alerts only say that a new bug report or privacy request arrived, with no personal data. |
| Cloudflare | Hosting the website and forwarding email sent to support@ and privacy@ |
| Google (Gmail) | Receiving the emails you send us and our internal alerts |
| Lemon Squeezy | Charging shop owners a subscription. Lemon Squeezy handles card details; we never see them. |
| Apple and Google | App downloads and sign-in with Google or Apple, under their own privacy policies |
| Expo (650 Industries) | Relaying push notifications to your device. It receives the push token and the notification text. |
| Google (Firebase Cloud Messaging) | Delivering push notifications to Android devices |
| Apple (Apple Push Notification service) | Delivering push notifications to iPhones |
We share data with authorities only when the law requires it.
6. Transfers outside Bosnia and Herzegovina
Our database is in the European Union. Some providers (Supabase, Resend, Cloudflare, Google, Apple, Expo and Lemon Squeezy) are US companies and may process data outside BiH and the EU. For these transfers we rely on their contractual safeguards, such as standard contractual clauses.
7. How long we keep data
| Data | How long |
|---|---|
| Your account data | While you have an account. Deleted as soon as you delete the account. |
| Past appointments at a shop | While the shop uses Chairo, without your name or phone (shown as "Deleted user") |
| Team member record and schedule | While the shop uses Chairo, no longer linked to you (shown as "Former team member") |
| Bug reports and screenshots | 12 months after being resolved, or sooner if you delete your account |
| In-app notifications | 60 days |
| Device push token | While you are signed in on that device. Deleted when you sign out, delete your account, or the device stops receiving notifications (for example after uninstalling the app). |
| Privacy requests | 3 years. The message text is erased when you delete your account. |
| Early access email | Until we tell you the app has launched, or until you ask us to delete it |
| Appointments of people without an account | While the shop uses Chairo, or until you ask us to delete them |
| Emails sent to support@ and privacy@ | Kept in our mailbox. We delete them on request. |
8. Deleting your account
You can delete your account in the app, on the website or by email. The steps are on chairo.app/delete-account.
9. Your rights
You have the right to:
- get a copy of your data (data export is available in the app),
- correct inaccurate data,
- delete your data,
- restrict or object to processing,
- withdraw consent for notifications at any time, in the app's settings.
To use these rights, email privacy@chairo.app or send a request in the app. We reply within 30 days. We may ask you to confirm your identity, for example by writing from your account's email address.
If you think your rights have been violated, you can complain to the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba).
10. Security
Data is sent over encrypted connections. Passwords cannot be read. Database rules limit access so each person sees only what they need. If a data breach affects you, we will tell you without delay.
11. Children
Chairo is not intended for children under 13. Users under 16 may use it only with a parent's or guardian's consent.
12. Changes to this policy
If we change this policy, we update the date at the top. We will tell you about important changes in the app or by email.