Privacy Policy

1. Information We Collect

To facilitate a localized marketplace between Customers and Providers, GlowSync collects the following categories of information:

• Account Parameters: Real names, verified active phone numbers (dial code and number), and profile emails.
• Precise Geolocation Data (Sensitive Personal Information): With your explicit operating system consent, we access real-time GPS coordinates via Flutter frameworks to compute physical distances between users and local salon storefronts. This data is processed in the foreground to provide proximity matching and is not used to build historical location profiles.
• Billing & Subscription Data: As a SaaS platform, subscriptions are managed via the Google Play Billing system. We process transaction identifiers, purchase tokens, and subscription status to manage your access to business features. We do not store full payment card details on our servers.
• System & Notification Identifiers:
  • Secure tokens stored via flutter_secure_storage for session management.
  • Device tokens for Push Notifications (via Firebase Messaging) to deliver booking updates and reminders.
  • Local caching via Hive and SharedPreferences to improve app performance and offline accessibility.

2. Legal Basis for Processing & Data Retention

If you reside within the European Economic Area (EEA) or United Kingdom, our legal grounds for processing your data depend on the context:

• Performance of a Contract: Processing account data and billing status is mandatory to deliver the marketplace coordination, subscription management, and booking calendar systems you request.
• Consent: Accessing your device's precise live location and delivering push notifications relies entirely on your explicit permission granted via system popup parameters. You can revoke these anytime in your device settings.
• Legitimate Interests: To detect app fraud, prevent malicious spam bookings, and monitor server health.

Data Retention Window: We retain your personal data only for as long as your user account remains active or as required to fulfill the business purposes outlined in this policy. Deleted account data is purged completely within 72 hours, except where retention is legally mandated (e.g., financial records related to subscriptions).

3. Data Integrity & Service Providers

We do not sell, rent, or trade your personal data. GlowSync does not disclose your information to third parties for their independent marketing purposes. We utilize the following necessary service providers to operate the application:

• Google Firebase: Used for infrastructure, including secure authentication and delivery of push notifications.
• Google Play Billing: Used to process secure payments and subscription lifecycle management.
• Mapping Services: We use flutter_map and geocoding to render local service availability. Interaction with these components may involve sharing anonymized coordinates to fetch address details.

4. Your Global Privacy Rights

Regardless of your residency, Synkn honors comprehensive consumer rights regarding digital data:

• The Right to Erasure (Deletion): You have the absolute right to clear your entire cloud identity profile from our database.
• The Right to Access & Portability: You may request a plain copy of the profile telemetry variables associated with your mobile identity.

6. Children's Privacy (COPPA/GDPR Compliance)

GlowSync does not knowingly solicit, target, or collect structural telemetry identifiers from individuals under the age of 13 (or 16 within the EEA). If we discover that an underage individual has generated an account, we will purge those specific database rows immediately.

7. Changes to This Global Policy

We may refresh our privacy architecture from time to time to match global regulatory shifts or updated Flutter SDK versions. We will indicate structural changes by updating the "Last Updated" date at the absolute header of this document.