Privacy Policy

1. Data collected

We may collect the following data when you use the Application:

• Personal information: first name, last name, phone number, email address.
• Booking-related data: date, time, service booked, chosen salon.
• Technical data: account identifiers, connection logs, device information (model, operating system, advertising identifier).
• Location data (only if you enable proximity search).

2. Collection purposes

Your data is used for:

• Creating and managing your user account.
• Allowing booking and tracking of services.
• Sending notifications related to your bookings.
• Improving the Application's operation.
• Ensuring security and preventing fraud.

3. Data sharing

We do not sell or rent your data.

It may only be shared with:

• The service providers/salons with which you book.
• Our technical providers (hosting, notification sending, analytics tools).
• Authorities if required by law.

4. Data security

We use security protocols (TLS encryption, access control) to protect your data.

5. Retention

Your data is retained as long as your account is active. You may request deletion of your account and related data directly via the Application settings or by contacting support@balaan-app.com (see section 7 for more details about your rights).

6. Cookies and similar technologies

We may use Firebase Analytics or similar tools to analyze Application usage. Analytics data is collected in a pseudonymized form. You can opt out of analytics collection at any time through your device or application settings.

7. Your rights

In accordance with GDPR, you have the following rights:

• Access to your data.
• Rectification.
• Deletion.
• Opposition and limitation of processing.

To exercise your rights, contact us at: support@balaan-app.com

8. Data related to the SOS feature

As part of the emergency alert feature ("SOS"), Balaan collects and processes the following data:

• Emergency contact name and phone — purpose: send an alert SMS upon SOS trigger. Legal basis: explicit consent (checkbox in the application). Retention: as long as the User keeps their account or has not deleted the contact.
• Consent timestamp (consent_at) — purpose: GDPR-compliant opt-in proof. Retention: identical to the contact.
• GPS position at SOS trigger time — purpose: transmission to the emergency contact and the support team for assistance. Legal basis: vital interest of the User. Retention: 90 days in the events history (sos_events).
• Reservation and salon identifiers — purpose: contextualizing the alert. Retention: 90 days.

Recipients: only the emergency contact designated by the User (via SMS) and the Balaan support team (via internal email). No commercial third parties.

Technical subprocessors: Twilio Inc. (SMS sending), Google Firebase (data hosting and Cloud Functions execution, europe-west1 region), Resend (support email sending).

Your specific rights: you may at any time delete your emergency contact directly from the application profile; request the export or deletion of the sos_events history by writing to support@balaan-app.com. Deleting the contact equals withdrawing consent.

Official emergency numbers: the SOS feature does not replace a call to emergency services. In case of immediate danger, dial 17 (Djibouti National Police).