Privacy Policy
Effective date: October 8, 2026
BarberLocate (“BarberLocate”, “we”, “us”) is operated by Shavon-Lee George White and Rashad White, 5 Julia Street, Hagersville, Ontario, Canada N0A 1H0. This policy explains what we collect when you use the BarberLocate iOS app and barberlocate.app (together, the “Service”), why, who we share it with, and your choices. We do not sell your personal information and we do not use it for targeted advertising.
1. Information we collect
Account information
When you sign in with Apple we receive your name and an email address (which may be an Apple private relay address if you choose “Hide My Email”). You may add a phone number and, if you are a barber, a display name, photo, bio, specialty, shop name and address, services and prices, opening hours and payout details.
Location
- Precise or approximate location (with your permission) is used on your device to find and sort barbers near you. We send coordinates to our server only to run a search and do not keep a history of your movements.
- Home area: we may store a coarse location (rounded to about 1 km) so we can show nearby barbers when you open the app. You can change or clear it in the app.
- Barbers’ shop addresses and map positions are public by design.
Bookings and payments
We keep booking details (barber, service, date, time, status, deposit, fees, cancellations, credits and refunds). Card payments are processed by Stripe. We never receive or store your full card number or CVC; Stripe gives us a token, the card brand, last four digits and payment status.
Messages
Messages you exchange with a barber or client in the app are stored so both parties can see them. We may review them when investigating a report or abuse, or when required by law.
Reviews
Ratings and reviews you post are public and shown with your first name or display name.
Walk-in queue
When you join a walk-in line (in the app or at barberlocate.app/walkin) we store the barber, service, time you joined and held time. A phone number is optional. If you provide one and tick the consent box, we use it to send SMS updates about that day’s visit through Twilio. Reply STOP to opt out. Other people viewing the queue see only anonymous busy blocks, never names or numbers. The web page stores your queue entry ID in your browser’s local storage so you can return to it.
Notifications
If you allow notifications we store a push token issued by Apple (APNs) via Expo push services so we can send booking, message and queue notifications. You can turn them off in iOS Settings.
Subscriptions
Premium is purchased through Apple’s App Store. Apple handles payment; we receive only the subscription status, product and renewal/expiry dates needed to unlock features.
Analytics and crash reporting
We currently do not use any third-party analytics, advertising or crash-reporting SDKs, and our website uses no cookies or trackers. We keep aggregated counts (for example, how many bookings came from a barber’s shared link) to show barbers their stats. If this changes we will update this policy first.
Technical data
Our hosting and database providers automatically process IP addresses and request logs to operate and secure the Service.
2. How we use information
- To provide the Service: search, bookings, deposits, refunds, walk-in queues, messaging, reviews and notifications.
- To process payments, prevent fraud and enforce our Terms.
- To provide support and respond to reports.
- To comply with legal, tax and accounting obligations.
- To improve reliability and safety of the Service.
Legal bases (GDPR/UK GDPR): performance of a contract; legitimate interests (security, fraud prevention, improving the Service); consent (location, notifications, SMS); legal obligation.
3. How we share information
- Between users: when you book, the barber sees your name, phone (if provided), booking details and messages. Clients see barbers’ public profiles.
- Service providers acting on our instructions: Supabase (database, authentication, hosting), Stripe (payments), Twilio (SMS), Expo and Apple (push notifications), Apple (sign-in and subscriptions), and our website host.
- Legal: when required by law, or to protect the rights, safety or property of users, the public or us.
- Business transfers: in a merger, acquisition or sale of assets, subject to this policy.
We do not sell or rent personal information, and we do not “share” it for cross-context behavioural advertising.
4. International transfers
Our providers may store or process data outside your province or country, including in the United States. Where required we use appropriate safeguards (such as Standard Contractual Clauses). Data held abroad may be accessible to authorities there under local law.
5. Retention
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Bookings, payments, refunds | Up to 7 years after the transaction (tax and accounting) |
| Messages | Until account deletion; may be kept longer if part of an open report or dispute |
| Reviews | Until you delete them or your account (then removed or anonymised) |
| Walk-in entries and phone numbers | Phone numbers removed within 30 days; anonymised entries kept for barber statistics |
| Push tokens | Until you sign out, disable notifications or delete your account |
| Server logs | Up to 90 days |
6. Deleting your account
You can delete your account at any time in the app: Profile → Settings → Delete account. This removes your profile and personal data from active systems, cancels upcoming bookings (refund rules in the Terms apply), and removes backups on their normal cycle (within about 30 days). We keep only what the law requires (for example payment records). Deleting your account does not cancel an Apple subscription; cancel it in your Apple ID settings. You can also email privacy@barberlocate.app.
7. Security
We use encryption in transit, access controls and database row-level security so users can only access their own data. No system is perfectly secure; if a breach creates a real risk of significant harm we will notify you and regulators as the law requires.
8. Your rights
Canada (PIPEDA and provincial laws)
You may access and correct your personal information, withdraw consent (subject to legal or contractual limits), and complain about our practices. If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial commissioner. Quebec residents have additional rights under Law 25, including data portability.
EEA, UK and Switzerland (GDPR)
You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You may lodge a complaint with your local supervisory authority.
California (CCPA/CPRA)
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to not be discriminated against for exercising these rights. We do not sell or share personal information and do not use sensitive personal information for purposes that require an opt-out. Categories collected: identifiers, commercial information (bookings), geolocation, and communications content, used for the purposes in section 2. You may use an authorised agent.
To exercise any right, email privacy@barberlocate.app. We will verify your request (usually by confirming control of your account email) and respond within 30 days (45 days for California, extendable as permitted by law).
9. Children
The Service is not intended for children under 13, and in the EEA/UK not for anyone under 16 (or the local age of digital consent). We do not knowingly collect their information; if you believe a child has provided us data, contact us and we will delete it.
10. Changes
We will post changes here and update the effective date. For material changes we will notify you in the app or by email before they take effect.
11. Contact
Privacy questions or requests: privacy@barberlocate.app
Shavon-Lee George White and Rashad White, 5 Julia Street, Hagersville, Ontario, Canada N0A 1H0
Privacy Officer: Shavon-Lee George White