Privacy Policy

Overview

Tho ("the app") helps customers discover and book salons and barbers, and helps salon owners manage bookings, staff and services. This policy explains what we collect, why, and the choices you have.

Information we collect

• Account information — your email address, name and, optionally, a phone number you give at sign-up or add to your profile.
• Content you create — bookings, reviews, messages to salons, and photos you upload (profile picture, salon gallery, service images, review photos, and instruction photos attached to a booking).
• Approximate location — with your permission, your device's location is used on your device to show salons near you and sort them by distance. We do not store your location on our servers.
• Camera — used only to scan a salon's walk-in-queue QR code. The image is decoded on your device and is never uploaded or stored.
• Notification token — if you allow notifications, your device's push token is stored so we can send booking reminders and queue updates. It is tied to your account and removed when another account signs in on that device.
• Service activity — the bookings, orders, queue entries and loyalty points needed to operate the service.

We do not knowingly collect data from children, sell your data, or use third-party advertising SDKs.

How we use it

• To create and secure your account and sign you in.
• To provide the service: discovery, booking, rescheduling and cancellation, walk-in queues, messaging, reviews, loyalty, product orders, and — for salon staff — calendar, client and business management.
• To show salons near you (location stays on your device).
• To notify you about your bookings, your place in a queue, and rewards.

How it is stored and shared

• Data is stored with our backend provider, Supabase, and transmitted over encrypted connections (HTTPS).
• Access is enforced by row-level security in the database: you see your own data; a salon's owner and staff see the data for that salon's bookings, orders and queue.
• Salon and stylist gallery photos are public — they are marketing material shown to anyone browsing the app.
• Instruction photos you attach to a booking are held in a private store and are readable only through short-lived signed links, by you and the salon you booked.
• A salon you book with, join the queue at, or order from can see your name, profile photo and contact details, and the history of your visits with that salon.
• We share data only as needed to operate the service or where the law requires it. We do not sell personal data.

Your rights and choices

• Access and update — edit your profile in the app.
• Location — deny or withdraw the permission in your device settings at any time; the map falls back to a default city view.
• Notifications — turn them off in the app's Settings or in your device settings.
• Account and data deletion — email chemsbhai@gmail.com and we will delete your account and personal data within 30 days. Records a salon must keep for its own accounts — for example that a booking took place and what it cost — are kept in a form that no longer identifies you.

Data retention

We keep your data while your account is active and for as long as needed to provide the service or meet a legal obligation, then delete or anonymise it.

Changes

We may update this policy. Material changes will be posted here with a new "Last updated" date.