Politique de confidentialité

Who we are

BarberplanX ("we", "us") operates the BarberplanX booking platform for barbershops in Morocco. Contact: hello@barberplanx.com.

BarberplanX is the data controller for the personal data described in this notice: we decide why and how your personal data is processed.

Data we collect and why

Account data (name, e-mail address, phone number, preferred language): to create and manage your account and to let a barbershop identify you. Legal basis: performance of our contract with you.

Booking data (barbershop, barber, services, date, time, price): to make, confirm and administer your appointments. Legal basis: performance of our contract with you.

Content you create (reviews, favorites): to display your reviews and saved shops. Legal basis: performance of our contract and our legitimate interest in a useful platform.

Barbershop and membership data (shop details, subscription status, billing contact): to provide and bill the barbershop membership. Legal basis: performance of our contract and compliance with legal and tax obligations.

Technical data (device type, error logs, IP address): to keep the app working, secure and free of abuse. Legal basis: our legitimate interest in security and service quality.

Sign in with Apple data: when you choose Sign in with Apple we receive the e-mail address Apple releases to us (which may be an Apple private relay address) and, the first time only, the name you agree to share. We use it solely to create and identify your account. Legal basis: performance of our contract with you.

Authentication and session data (a session token stored on your device, sign-in timestamps): to keep you signed in securely. Legal basis: performance of our contract with you.

Push notification tokens: stored per device when you allow notifications, so we can send you booking updates. You can revoke this in your device settings. Legal basis: your consent.

Marketing messages, if any, are sent only with your consent, which you can withdraw at any time.

Location

With your permission the app uses your device location to show barbershops near you and to calculate distances. Legal basis: your consent.

Your precise GPS position is stored only on your device and is used in-memory to sort nearby results. We do not keep a history of your location on our servers.

You can refuse location access and pick a city manually instead. You can change this at any time in your device settings.

Payments and Paddle

Customers pay their haircut in cash at the barbershop. The app never processes customer card payments and does not store customer payment card data.

Barbershops pay a monthly membership to BarberplanX. Card payments for that membership are processed by our reseller and Merchant of Record, Paddle.com Market Limited ("Paddle"), which acts as an independent controller for the payment transaction.

When a barbershop pays by card, Paddle receives the data needed to take payment, issue invoices, handle tax compliance, manage the subscription and handle refunds. We receive back only the subscription status, the amount, the renewal date and a transaction reference. Legal basis: performance of our contract and compliance with legal obligations.

Who we share data with

The barbershop you book with, so it can serve you (your name, phone number and booking details).

Service providers acting on our instructions: hosting and database, e-mail delivery, push notifications, maps and address lookup.

Paddle, as Merchant of Record for barbershop membership payments, subscription management, invoicing and tax compliance.

Professional advisers (legal, accounting) and public authorities where we are legally required to disclose data.

What we do not do

We do not sell your personal data.

We do not track you across other companies' apps or websites, and the app contains no advertising or third-party advertising SDK, so no App Tracking Transparency permission is requested.

We do not profile you for advertising purposes.

Service providers we actually use

Supabase — authentication, database and file storage (hosting of your account, bookings, reviews and photos).

Apple — Sign in with Apple authentication and Apple Push Notification service for notifications on iOS.

Google Firebase Cloud Messaging — push notification delivery on Android.

Paddle.com Market Limited — reseller and Merchant of Record for barbershop membership card payments.

Resend — delivery of transactional e-mails such as booking confirmations.

OpenStreetMap and OpenStreetMap Nominatim — map tiles and address lookup; Google Maps is opened only when you tap "Directions".

We do not use an advertising network, an analytics SDK or a third-party crash-reporting SDK in the released app.

International transfers

Some of our providers process data outside Morocco. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision.

Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS), encryption at rest for our database and file storage, row-level access rules so each account can only reach its own data, role-based access for staff, hashed credentials, and logging of administrative actions.

No system is perfectly secure, but we review access and act promptly on any suspected incident.

Retention

Account and booking records are kept while your account exists. Booking and invoicing records linked to memberships are kept for as long as required by accounting and tax law, then deleted or anonymised.

Data we no longer need is deleted or anonymised.

Your rights

You can request access to your data, correction, erasure, restriction of processing, portability, and you can object to processing based on our legitimate interests. Where processing is based on consent you can withdraw it at any time.

You can download a copy of your data at any time: Profile, Account, "Download my data".

You can delete your account inside the app: Profile, Account, "Delete my account". Deletion is permanent. It removes your profile, favorites, notifications, device notification tokens and upcoming appointments; past appointments and published reviews stay with the barbershop as its business record, without your personal details.

If you signed in with Apple, deleting your account also revokes the Apple credential you granted to BarberplanX.

To exercise your rights, contact hello@barberplanx.com. We reply within one month. You may also complain to your local data protection authority.

Children

The app is not intended for children under 13 without a parent or guardian.