سياسة الخصوصية

This app and website belong to Alaa Beauty & Fashion Clinic (⁧علاء فاشن⁩), a barber shop, and are used to book appointments with us. The shop is responsible for your information ("we", "us"). This policy explains in plain words what we collect, why, who we share it with, and how you can delete it.

• Name and phone number — you give them to us when you sign up; your phone number is how you log in.
• Your bookings — service, barber, date and time, price, status (for example confirmed or cancelled), and any notes the shop adds.
• Account details — account status (pending approval, approved or blocked), the language you use the app in, your loyalty card, how many appointments you missed, and whether you asked us to stop WhatsApp messages.
• WhatsApp messages — a record of the messages we send you (which message, when, and whether it was delivered or read), and the replies you send to the shop's number, such as "Confirm attendance" or STOP.
• Login codes — a record that a code was sent to you (on WhatsApp or by SMS), whether it arrived and whether it was used. We never store the code itself, only a one-way fingerprint (hash) that cannot reveal it, deleted within 24 hours.
• Technical data — your IP address when you request a login code, used to limit requests and prevent abuse; deleted within 24 hours.
• Push notifications — if the app offers notifications and you allow them, the technical address your device gives us for delivering them, and nothing else.

• We don't access your location, contacts, camera or photos.
• There are no payments in the app, so we hold no card or bank details.
• No ads, and no third-party tracking or analytics tools.
• We never sell or rent your information to anyone.

• To create your account and log you in with a code sent on WhatsApp or by SMS, whichever you choose.
• To manage your bookings: record, confirm and cancel them when you ask.
• To send you booking confirmations, updates and reminders on WhatsApp. Send STOP to turn them off — login codes still arrive when you request one.
• To keep your loyalty card.
• To let the shop owner know about a new sign-up, booking request or cancellation — sometimes by a WhatsApp message with your name and phone number.
• To protect the app and accounts from abuse, such as repeated code requests.

• The shop's team — the owner and barbers see your name, phone number and bookings in order to serve you.
• Meta (WhatsApp Cloud API) — our WhatsApp messages and WhatsApp login codes are sent, and your replies received, through Meta as our service provider. Meta processes your phone number and the message content only to deliver it, under its own terms and privacy policy, possibly on servers outside Israel.
• Prelude (SMS delivery) — if you choose to get your login code by SMS, only your phone number and the code go to Prelude, our SMS provider, which sends the text message. Prelude processes your phone number only to deliver the code, under its own terms and privacy policy, possibly on servers outside Israel.
• Our technology and hosting provider — who built the app and runs it for the shop. Your data is stored on its servers and used only to run and maintain the app.
• Authorities — when the law or an authorised authority requires it.

The service providers above (Meta, Prelude and our technology and hosting provider) are bound to protect your information at least as well as described in this policy, and to use it only to provide their service to us.

Links such as Waze, Instagram, TikTok, Facebook and WhatsApp open other services, which have their own privacy policies.

We only use cookies the app needs to work: one keeps you logged in (up to 90 days, or until you log out), a temporary one lasts a few minutes while you sign up, and one remembers your language. No advertising or tracking cookies.

• Your account and bookings — for as long as your account exists, until you delete it.
• Records of the messages we sent you — for as long as your account exists; deleted with it.
• Your replies to the shop's WhatsApp number and login-code records — deleted automatically after 90 days.
• Login-code fingerprints and IP addresses — deleted within 24 hours.
• A blocked account that was deleted — only the phone number and the block, until the shop lifts it.
• After an account is deleted — a one-way code made from the number (not the number itself) is held in the server's memory for 24 hours only, so the account can't be reopened at once.

Connections to the app are encrypted (HTTPS). A login code works for 5 minutes and only once, and the number of attempts is limited. Only the shop's team can sign in to the admin panel, with a password.

• See the information we hold about you and ask us to correct it — just contact us.
• Stop WhatsApp booking messages — send STOP to the number they come from; send START to turn them back on.
• Delete your account at any time — see below.
• If you have a complaint, please contact us first. You can also contact the Privacy Protection Authority.

You can delete your account from inside the app at any time:

1. 1Open "My bookings" (⁧مواعيدي⁩ / ⁧התורים שלי⁩) in the bottom bar.
2. 2Scroll to the bottom and tap "Delete account" (⁧حذف الحساب⁩ / ⁧מחיקת החשבון⁩).
3. 3Confirm. Your account is deleted immediately and you are logged out.

Can't open the app? Log in at https://barber.smiletechsys.com/my from any browser and delete it there, or ask the shop to delete it by phone or WhatsApp at 0509966863, from the phone number on the account. We will delete it as soon as possible, and within 30 days at the latest.

What is deleted

• Your name, phone number, the shop's notes about you, your loyalty card and settings.
• WhatsApp message and login-code records linked to your number, and push notification subscriptions.
• Upcoming bookings are cancelled.

What is kept

• Past appointments stay in the shop's books (date, service, barber and price) without your name or phone number.
• Messages already delivered stay on your phone (in WhatsApp or your text messages), and Meta and Prelude keep their own records under their policies.
• Alerts the shop owner already received on WhatsApp (for example about a booking or a new sign-up) stay on his phone.
• Login-code requests from the last 24 hours (your number, the IP address the request came from and the code's fingerprint, never the code) stay until they are deleted automatically within 24 hours, so request limits can't be bypassed.
• For 24 hours after deletion, a one-way code made from your number (not the number itself) is held in the server's memory, so an account can't be reopened with it at once. It then disappears on its own.
• If the shop had blocked your account, we keep only your phone number and the block (no name, notes or bookings), so the block can't be bypassed. Ask the shop to lift it if you want it gone.

24 hours after deletion you can sign up again with the same number, unless the account was blocked, and your loyalty card starts from zero.

The app is meant for adults. Parents can book for their children from their own account.

If we change this policy we will update the date at the top, and tell you in the app about any important change.

For any question about privacy or your information: