Privacy Policy

Version 1.11 · effective 10 November 2026 · Barbloon is operated by Dorvo Labs LLP, Kochi, Kerala, India

In short

We collect what a booking needs: your name, mobile number, the shop, the services and the times. Location only with your permission, used at that moment and not stored.
The shop you book sees your name and your booking. It may receive your mobile number when it sends you the bill on WhatsApp and, if you allow calls, when it calls you about a live booking.
The Mirror uses your photo to make one picture and never stores the photo. The picture it makes is kept for 24 hours, or for two years if you save it, and you can delete it sooner.
Before and after photos of a visit are taken only after you say yes in your own account, on your phone or the stylist's. You keep your copy for two years, only you see it, and you can delete any photo at any time. If you also say yes, the salon keeps a copy in which our own software has hidden every face before anyone at the salon sees it; that copy is never unhidden. Only with a third yes may the salon show that face-hidden copy on its page and your stylist's page, without your name (section 4).
If you ask to join Barbloon on this website, we keep your name, your number and what you tell us, to call you back about it and, if you open a shop in the partner app with the same number, to fill in the app for you, and for nothing else, until a year after the last time you sent it or our team last worked on it (section 11).
We never sell personal data.
You can see, correct and delete your data. Delete everything removes your account at once; Delete your account says how, what goes and what stays.

1. Who we are

Barbloon is operated by Dorvo Labs LLP ("Barbloon", "we"). This policy covers the website barbloon.com, the customer app Barbloon on Android and iPhone, the web app at app.barbloon.com, and Barbloon Partner, the app for salons. We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 and its rules. Salons, stylists and other partners who use Barbloon are independent businesses; where they keep records about you for their own purposes, they are responsible for those records, and this policy explains what they can and cannot see.

Most of this policy speaks to customers. Section 2 has a part for people who work at a salon and use Barbloon Partner.

Questions, requests and grievances: hello@barbloon.com, or call customer care on 7 907 707 507 or 7 907 607 507. We reply within 30 days, usually much sooner.

2. What we collect

Data	When	Notes
Name and mobile number	When you book, or sign in	The mobile number is your identity on Barbloon. A first booking from a shop's QR needs only a name and number. When you sign in, a one-time code sent to the number proves it is yours (section 5, Google services).
Bookings and visits	Every booking	Shop, services, the cut you asked for, times, your place in the line, whether you arrived, the reason if you cancel and anything you type with it, and whether the shop may call you about the booking.
Bills	When a shop bills your visit	Written by the shop: the lines, discounts, tax, total, and whether you paid the shop by cash, UPI, card or another way. No card or bank details. Barbloon takes no payment from customers today.
Ratings	When you rate a visit	In the customer app since version 1.1: stars for the visit and for each service, and a few words, which are required under three stars. The stars go into the shop's and each service's average and count, which its page shows; the shop sees those numbers and never your words. A rating is kept with your account and goes with it: your words and the link to you are deleted, and the stars stay in the shop's counts with nothing tying them to you.
Profile	Only if you fill it in	An age band (never a date of birth), a gender tag (men or women, as you tell us; we never guess it), your hair type, how much upkeep you like, your language, and your confirmation that you are 18 or older, which the Mirror needs.
A photo for the Mirror	Only with your consent	One photo of your face, used to make the picture and not stored, and the picture the Mirror makes. See section 4.
Visit photos	At a visit, with your yes, from your phone or the stylist's	The photo, the visit, the shop, the stylist who did the work, and, if you allowed it, a face-hidden copy for the salon. See section 4.
Location	Only with your permission	Read when you ask for nearby shops, while the shop list or the map is open, and used at that moment to show distance and travel time. We do not store it: it is not written to our database, our server log leaves it out, and it is not tied to your account. We keep only the record that you agreed. To show travel times we send a point rounded to about 500 m (never your exact position) and the shop's location to our maps provider, Ola Maps, whose servers are in India; nothing about you goes with it.
Consents	When you agree to something	What you agreed to, when, the wording you saw, your language and app version, and when you withdrew it.
Search	When you search for a stylist	The words you type go to our server to find matches and are not stored. The search of styles runs on your phone.
Device and notifications	While you use the apps	A notification token for your phone, so we can tell you about your booking, with your language and whether the phone is Android or iPhone. The apps do not read your messages, files or advertising ID, and the customer app does not read your contacts. Barbloon Partner reads your contacts' names and numbers only when a shop imports customers, and only the ones picked leave the phone, as the part for salons below says.
Server log	Every request to our server	The network (IP) address the request came from, the address asked for, the time and your browser or app type. Kept 30 days, for security and fault-finding. Location, search words and the secret links to your booking, bill and pictures are left out of it.
Usage	When the Mirror makes or refuses a picture	A short event: the style, how long it took, or why a photo was refused. It carries no account and no device identifier and is kept 90 days. The apps carry no advertising or analytics software of their own; the QR scanner's own diagnostics go to Google, and YouTube's player reports the Help videos you watch to YouTube (section 5).

If you work at a salon

Barbloon Partner is for salon owners and stylists. You sign in with your mobile number, checked by a one-time code (section 5, Google services). A number comes onto the app in one of three ways: the shop's owner gives it to us for the shop's team; a stylist signs up with it and makes a profile of her own; or an owner signs up with it and opens a shop from the app, which Barbloon's team checks before it switches the shop on. About everyone who signs in we hold:

that mobile number and your name, as the shop gave it or as you typed it;
your sign-in on our server, which ends when you tap Sign out while the phone is online, stops working when your number is taken off the team, and lapses after 180 days;
a notification token for your phone, kept with the shop and your role so that a new request can ring and, for an owner setting up a shop, so that Barbloon's replies reach the phone;
your name on each thing you do on a booking or a bill (accept, decline, arrived, done, a call, a bill), which stays in the shop's records.

If you open a shop from the app. About the shop and its application we hold: your name and the number you signed in with, and when you first signed in; the shop's name, what kind of place it is, where it is, its hours and chairs, who it serves and the number it shows customers; its menu with the prices you typed; the pictures you add from the phone, under the line you tick saying you have the right to use them; the application itself, with when it was opened, sent, sent back and switched on, how many times it was sent and the version of this notice you agreed to; the checks Barbloon's team ticks and a note of its own, which the shop never sees; and the thread between the shop and Barbloon, with who at Barbloon wrote each reply and when each side read it. If you had asked to join from this website with the same number (section 11), that enquiry is linked to the shop and its answers fill the app once your number is proved; it is marked joined when the shop goes live.

Who sees it, and what is logged. Barbloon's administrators, in the console, to check the shop, answer you and switch the shop on. Each time an administrator opens the shop's details or reads your number, who did so and when is logged, as is each check ticked, each reply, each send-back and the switch to live. Your team sees under Notices in the app that Barbloon replied, sent the application back or switched the shop on, and never the words of a reply: the thread is read by the owner and the manager alone. Barbloon's replies and its short notices to you (sent back, live) are push notifications, so their title and text pass through Google's push service on the way to your phone (section 5). When a shop is sent for review, and when it writes to Barbloon for the first time since the team last read its thread, the founders' alert names the area and a count, never a name, a number or a word of a message. The WhatsApp button on the waiting screen opens WhatsApp with a line naming the shop and its code, travelling inside the link as the buttons of section 11 do; it never carries your number.

How long. The thread closes thirty days after the shop goes live and its messages are deleted ninety days after. A live shop's application, with the team's note, is kept as long as the shop is on Barbloon and is deleted with it. An application that was never sent, or was sent back and left, is deleted with its shop after a year without a change, unless a booking is still open at the shop or it has had a visit; an administrator may delete it earlier under the same rule. When a shop is deleted this way, the sign-in record Google holds for your number goes with it, unless the same number is on another salon's team or has a customer account.

The app uses the camera to scan a customer's or a stylist's code, which is read on the phone, and, when you set up a shop, to take a picture of it that you choose to add; a picture can also come from the phone's gallery when you pick one. It reads nothing else from the camera or the gallery. When the owner or the manager taps Import from contacts, the phone asks for permission, and the app reads the names and numbers of your contacts, on the phone, to show a list to pick from; only the names and numbers picked leave the phone, up to 500 at a time, and they go to our server as the shop's own customer list, where they are deleted when the shop removes the customer from its list or when the shop is deleted. Nothing else of your contacts is read. It does not read your location, messages or files, and it stores nothing about customers on the phone. What you enter about customers (a walk-in's name, a note, a bill) is the shop's record and is covered by the rest of this policy. To be taken off a team, see Delete your account.

Not in the apps yet

Chat with a shop, the Avatar and paying through Barbloon are planned and are not in the apps today, so nothing is collected for them. This policy will say what each one collects before it is switched on.

3. Why we use it

To run your booking: place you in the line, get a person at the shop to confirm, tell you when to leave, and show the stylist what you asked for.
To keep the line honest: the times of each booking (asked, confirmed, arrived, started, done) are what the live line and your turn time are worked out from.
To remember how you cut last time, so the next visit is quicker to book.
To keep your before and after with your history, so your next cut can match the last (your own copy); to let the salon match your cut next time (the salon's face-hidden copy, only if you say yes); and to let the salon show its work on Barbloon without your name (the same face-hidden copy on its page and your stylist's page, only if you say yes to that too). Section 4 says how.
To message you about your booking. These are push notifications from the app. If none reaches you, for example when you booked on the web, three of them come as a text message instead, from the sender DORVOL through our SMS gateway, 2Factor (section 5): the confirmation, with the shop, the time and your turn code; word that a booking was cancelled; and, when your visit is done, the link to your bill. The sign-in code is an SMS sent by Google (section 5), and a shop may send your bill from its own WhatsApp (section 5). Barbloon sends no automatic WhatsApp messages about bookings; if you write to Barbloon care on WhatsApp (section 11), care answers you there. We send no marketing messages; if that changes, it will be only if you opt in, and you can opt out at any time.
To help when something goes wrong: our care team can open your booking to sort out a delay, a no-show or a complaint, and may keep a note on the case. When care opens your booking, the care console does not show your mobile number; an enquiry from this website's join form is the one exception, since care sees its number to call you back (section 11). Care can stop a number from booking, for example after repeated no-shows or abuse, and records the reason.
To improve Barbloon, using the usage events in section 2, which are not tied to you.

We process personal data on the basis of your consent, given when you book or create an account, and for the purposes you would reasonably expect from a booking you asked for. We do not sell personal data and we do not use your photos to train models.

4. Photos, the Mirror and the Avatar

The Mirror

The Mirror shows a hairstyle on a photo of your face that you take or pick in the app. It is for adults only: before anything is sent you confirm that you are 18 or older and agree to the photo being used for this.

Your photo is not stored. It travels to our server over an encrypted connection, is held in memory while the picture is made on our own machines in India, and is dropped when the picture is done. It is not written to a disk, not sent to an outside company and not used to train a model.
The picture the Mirror makes (your face with the new cut, and the working pictures made with it) is kept on our server for 24 hours so that you can look at it and decide, and is then deleted. It opens only through links that expire after ten minutes.
A saved look is kept for two years from the day you save it, unless you delete it sooner. It is private to you. When you book with a saved look, the shop is told which cut you chose; it is not shown your picture.
Withdrawing the Mirror consent (Me, Your consents) deletes every saved look and every Mirror picture of yours at once.
Your phone keeps the photo in its memory while the app is open, and for at most 30 minutes after you leave it, so that you can try a second style without a new photo. The app does not save it to your gallery.
If you turn on "Suggest cuts for my face shape", your phone measures your face on the phone itself. The photo and the measurements do not leave the phone for that; we keep only the record that you agreed.
The picture is made by an AI model and is an approximation, not a promise of the result. If a picture is wrong or offensive, you can report it from the result screen and our team will look at it.

Visit photos

A before and after photo of your visit can be kept with your history, so your next cut can match the last. Nothing is taken unless you say yes, in your own account, in your own app, never on a stylist's phone; and nothing is asked at all if you turn off "Ask me about photos at every visit" under Me, Settings (it is on when you start, and off in one tap; turning it off deletes nothing and changes none of your answers).

Three questions, each answered on its own. First, whether we keep your before and after with your visits: only you see them. Second, only if you said yes, whether the salon may keep a copy in which every face is hidden. Third, only if you said yes to that, whether the salon may show that face-hidden copy on its page and your stylist's page on Barbloon, without your name. A no to any question never leads to the next, nothing is ticked for you, and you can answer differently for one visit on the booking's page.
Whose phone takes it. The before is taken once you have arrived at the salon, on your own phone or on the stylist's, and the after when the cut is done; you can add an after photo from your own phone for seven days. The Barbloon Partner app on a stylist's phone sends the photo to our server and keeps nothing of it; on a few Android phones the camera app itself can keep a copy in the phone's gallery, which the salon is told to check and delete. Take them with only you in the frame. If someone else is in the picture, the salon's copy hides their face too, and your own copy keeps it.
One before and up to three after photos a visit.
Your copy is kept, encrypted on our server in India, for two years from the day it was taken or until you delete it, whichever comes first, and only you see it. A before taken for a visit that did not take place is removed the next day. You can delete any one photo at any time under Me, Your photos; the salon's copy goes with it.
The salon's copy is made by our own software on our server in Bangalore: it finds every face in the photo, blurs it beyond recognition, and checks its own work with a face-matching program that must fail to match you before the salon is given anything. That copy is never unhidden, and nobody at the salon or at Barbloon can undo it. It is kept the same two years and goes the moment you delete your photo or withdraw your yes.
On the salon's pages. With your third yes, the salon's page and your stylist's page on Barbloon show the face-hidden copy of your after photos, without your name or the day. You can take one photo off the pages, or all of them, at any time, and you, or any customer signed in to the Barbloon app who sees a photo there, can report it: a report takes it off the pages at once and our team looks at it.
No photo is taken at a child's visit (section 8). Your photos leave our server only in our encrypted backups, which stay in India (section 6).

The Avatar

Not in the apps yet. It is planned as a drawn likeness, never a photograph of your face, made only with your consent. This policy will set out the rules before it is switched on.

Minors

We do not make Mirror pictures for anyone under 18, and the children's styles in the catalogue cannot be sent to the Mirror. No before and after photo is taken at a visit for a child, and none for an account that has not confirmed it is 18 or older.

The shop you book sees your name, your booking, the cut you asked for, and what was done and billed at that shop. Its customer list shows the last two digits of your mobile number, your visits and what you spent at that shop, and whether you are a regular there. A shop never sees your visits to other shops.
Your mobile number and the shop. The shop's screens do not show your full number. It reaches the shop's own phone in two cases:
- The bill. When the shop sends your bill on WhatsApp, the message opens in WhatsApp on the shop's phone, addressed to your number.
- A call, if you allow it. From the moment you ask for a booking until you arrive, the shop can call you about that booking while the switch "The shop may call me about this booking" is on. The switch starts on. You can turn it off on the booking's page, or for later bookings under Me, Calls from shops. When the shop taps Call, your number opens in the dialer of the shop's phone. Each call is written on the booking and shown to you on its page.
After either, your number is on the shop's phone, in WhatsApp or in its call log, outside Barbloon, where we cannot remove it. The shop is an independent business and answers for how it uses it.
Notes a shop writes about you (for example a colour formula) stay with that shop. They are not shown to you, to other shops, or to a stylist who has left, and they are deleted when you delete your account.
Your visit photos and the salon. The salon and its stylists see only the face-hidden copy, only of visits at that salon, and only if you said yes to it. A stylist who leaves the salon no longer sees them; a new stylist at the salon sees the face-hidden copy of your last visit there. With your third yes, the salon's page and your stylist's page on Barbloon show the face-hidden copy of your after photos, without your name or the day. Nobody at the salon ever sees your own copy.
Your bill and your booking each have a link with a secret code in it. Anyone you pass the link to can open that page.
Other customers see counts and neutral dots on public queue screens, never names or pictures.
Barbloon's own team. The care team can open bookings across shops to help you and the shop; each time it opens a customer's booking or summary, who did so and when is logged. Reads by our administrators, and a shop's reads of its own customer list, are not logged one by one yet. When you ask for help about a visit photo or report one, our team sees the facts of the photo and the salon's face-hidden copy, never your own copy, and every such look is logged.
Service providers who process data for us and may use it only to provide their service: DigitalOcean (our server, in a data centre in Bangalore), Google (sign-in, push notifications and the QR scanner, below, and Barbloon's email at hello@barbloon.com, which Google Workspace keeps for us), Apple (delivers push notifications to an iPhone, below), Ola Maps (maps and travel times, from a rounded point), and Vercel (hosts this website, the web app and the catalogue pictures the apps show; like any web host it sees your device's network address and browser type when a page or picture loads, and may serve it from outside India). 2Factor (2Factor.in, an SMS gateway in India) carries Barbloon's own text messages, from the sender DORVOL: the code that checks a number given on this website's join form (section 11) and, when no push notification reaches a customer, the three booking messages of section 3. For each it receives the mobile number and the text: the code, or the shop's name, the time, the turn code and the link to the bill. No other SMS or WhatsApp provider and no payment gateway is switched on today; this policy will name each before it is.
The law: we disclose data when a court, the Data Protection Board or another authority lawfully requires it.

Personal data is stored in India: on our server in Bangalore, with encrypted backups on our own equipment in Kerala. The Mirror runs on our own machines in India. The exceptions are the Google services, Apple's notification service and the web hosting named in this section, among them Barbloon's email, where an email you send us is kept, and WhatsApp, where a chat with Barbloon care is kept, whoever starts it (section 11). Where a processor operates outside India, we transfer only what the task needs and only to countries not restricted by the Government of India.

Google services. Four Google services help run the apps.

Firebase Authentication sends the one-time code to your phone when you sign in and checks it. For that Google processes your mobile number, your device's network address and its own checks that the request comes from a real device or person, in the United States, and keeps a sign-in record for your number. When your account is deleted, we delete that record as well, unless the same number is on a salon's team in Barbloon Partner, which signs in with it.
Firebase Cloud Messaging carries push notifications. Google holds a token for your device, and the title and text of each notification pass through its service on the way to your phone: for example the shop's name, your turn time, your turn code, and the link to your booking or your bill. A notification to a shop's device about a new request carries the customer's name, the services and the time. On an iPhone, from version 1.4.2 of the apps, Google hands each notification, with the same details, to Apple's Push Notification service, which gives your phone a token of its own, delivers the notification and may hold it until the phone is online. When you sign in on an iPhone, Firebase Authentication may also send a silent notification through that service; it carries only Firebase's own check.
ML Kit is the library behind the QR scanner in the Android apps. The camera picture is read on the phone and is not sent anywhere. The library sends Google its own diagnostics: the device model and system version, the app's version, an identifier for the installation, performance figures and error codes. On iPhone the scanner uses Apple's own frameworks, and nothing goes to Google.
YouTube plays the Help videos in Barbloon and Barbloon Partner, from version 1.4.2 of the apps: Barbloon's own tutorials, from Barbloon's YouTube channel, in YouTube's player inside the app. Nothing goes to YouTube until you open a Help topic with a video. The video then starts at once, and YouTube receives what any YouTube player sends: your device's network address, the phone's model and system version, your language and country, which video played and how much of it you watched. Nothing about your Barbloon account goes with it. YouTube handles this outside India, for its own purposes and not on our instructions. YouTube decides what its player shows, which can include its own ads. The player keeps its own data on the phone, in the app's web storage and possibly as cookies, until you remove the app or, on Android, clear the app's data; Sign out and Delete everything do not clear it. The apps use YouTube API Services, so YouTube's use of this data is covered by the YouTube Terms of Service and the Google Privacy Policy.

None of these services receives your photos.

Shop pages may show pictures of a salon from Google Maps, exactly as Google serves them and with the photographer's name beside them. Those pictures are fetched from Google by our server when you open the page and are not stored by us; by viewing them you are also bound by the Google Terms of Service and the Google Privacy Policy. A picture marked "Impression, not a photo" is drawn by us and shows no real place.

6. How long we keep it

Data	Kept for
The photo you give the Mirror	Not stored. Held in memory until the picture is made.
Mirror pictures you do not save	24 hours on our server.
Saved looks	Two years from the day you save the look, or until you delete it, withdraw the Mirror consent or delete your account, whichever comes first.
Your before and after photos	Two years from the day each was taken, or until you delete them, withdraw the visit photos consent or delete your account, whichever comes first. A before taken for a visit that did not take place is removed the next day.
The salon's face-hidden copy	The same two years, and it goes the moment you delete yours, withdraw the salon's consent, or turn the salon's copy off for a visit or a photo.
Bookings and visits	While you have an account. When you delete your account they stay in the shop's records without your name, your number or your account.
Bills	As long as tax and accounting law requires, without your name and number once you delete your account.
Your name, number, profile, consents and a shop's notes about you	Until you delete your account.
Sign-ins	A sign-in stops working after 90 days for a customer and 180 days for salon staff. Sign out deletes it from our server when the phone or the browser is online: in Barbloon Partner, in the customer app from version 1.3.1, and in the web app since the afternoon of 21 October 2026. In every version of the customer app, Sign out also removes the sign-in from the phone together with the phone's notification token, which our server forgets too when the phone is online; from version 1.3.1 it also signs the phone out of Firebase Authentication. Before version 1.3.1, Sign out does not end the sign-in on our server, where it stops working when its 90 days end. In Barbloon Partner, a sign-in left on our server by switching shops or roles stops working when its 180 days end. A sign-in that Sign out did not end stays on our server after it has stopped working, its token kept only as a one-way digest that can no longer be used, with the name it was opened under and, for salon staff, the number, the shop and the role, until your account is deleted (for salon staff, until Barbloon removes the number's sign-ins when asked, once the number is off every team or when its phone is lost, or deletes a shop opened from the app, whose sign-ins go with it).
Server log	30 days.
Usage events	90 days.
Care cases and the log of care's access	Kept with the booking. No end date is set yet.
An enquiry from this website's join form	A year after the last time you sent it or our team last worked on it, or 90 days after it is closed or your salon joins, whichever comes first. A code that is never used is deleted from our database, with the number it was sent to, within about seventy minutes; our server's memory can hold them for longer (section 11, and the row on messages below). A spreadsheet of enquiries that our team downloads to make the calls is deleted once the calls are done (section 11).
A chat with Barbloon care on WhatsApp	Kept in care's WhatsApp, under WhatsApp's own terms. No end date is set yet.
Email between you and Barbloon, such as the one the join form writes for you	Kept in Barbloon's mailbox, which Google Workspace keeps for us. No end date is set yet.
Messages our server sends (push notifications and texts, the join form's code among them)	The last 500, each with the number it went to, in the server's memory alone, until newer ones replace them or the server restarts.
Backups	Encrypted copies of the database, of the Mirror pictures on the server at that hour (saved or not), and of visit photos (encrypted on the server before the backup is made), are made every night. A copy made before something was deleted can hold it for up to thirteen months, and is then itself deleted. Backups are opened only to restore the service after a failure.

We do not yet delete bookings or accounts on our own after a period without activity. If we set such a period, this table will say so first.

Delete everything, in the app (Me, Your data), removes your account at once: your name, number and profile, your consents, your saved looks and Mirror pictures, your visit photos on both sides (your own copies and the salon's face-hidden copies), every shop's notes about you, your sign-ins and notification tokens, and the sign-in record Google holds for your number, unless the same number is on a salon's team in Barbloon Partner, which signs in with it. A live booking is cancelled. Your past bookings, visits and bills stay in the shops' records with your name and number removed. You can also ask us by email, without the app. Delete your account gives the steps and lists everything that goes and everything that stays.

7. Your rights

Access: ask for a summary of the personal data we hold and who we have shared it with.
Correction: change your name and profile in the app, or ask us to fix anything else that is wrong or incomplete.
Erasure: delete a saved look, any one visit photo at any time from the app (Me, Your photos; the salon's copy goes with it), or everything, in the app or by email. See Delete your account.
Withdraw consent: under Me, Your consents you can withdraw location, the Mirror, face-shape suggestions, visit photos, the salon's face-hidden copy and its showing on the salon's pages at any time, as easily as you gave them, and you can turn off calls from shops. Withdrawing stops the use from then on.
Nominate a person who can exercise these rights for you if you are unable to, by writing to us.
Complain: write to hello@barbloon.com, or call customer care on 7 907 707 507 or 7 907 607 507. If we do not resolve your grievance, you may approach the Data Protection Board of India.

8. Children

Barbloon accounts are for adults. A parent or guardian may book for a child from their own account. We do not ask for a date of birth; the Mirror asks you to confirm that you are 18 or older. We do not knowingly collect a child's personal data beyond what that booking needs, and we apply the rule for minors in section 4. No before and after photo is taken at a child's visit: a service the salon marks as a child's, your own word on the booking's page or the salon's word at the chair each means no photo is asked for or accepted. If you say so on the booking's page, or the salon says so at the chair, any photo already taken at that visit is deleted.

9. Security

Data travels over encrypted connections between the apps, this website and our server, and the Mirror photo reaches our rendering machine through an encrypted tunnel. Our database is on a server in an Indian data centre, with access limited to the people who run the service. A sign-in is kept on our server only as a one-way digest of its token; the phone apps keep the token in the phone's secure storage, and the web app in your browser's storage (section 10). Links to Mirror pictures are signed and expire after ten minutes. Backups are encrypted before they are stored. Your visit photos are encrypted on our server with a key that only Barbloon holds, kept apart from the backups. The care team's access to customers' bookings is logged. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.

10. This website

barbloon.com stores your language choice in your browser and, while you fill in the join form, a draft of your answers in that tab alone (the browser's session storage), so that closing the form loses nothing; the draft goes once your enquiry is saved, when you press Start over, or when you close the tab. It sets no tracking cookies and runs no third-party analytics. Fonts are loaded from Google Fonts, which receives your browser's request for the font files. The demos on the home page run entirely in your browser with simulated data and send nothing to us. When a join button comes into view or you open the join form, the page asks our server whether the form can send a code now, and, when you type a shop's name, for the public list of shops and areas that the apps show anyone; neither request carries anything about you. The join form and the WhatsApp chat are in section 11.

The web app at app.barbloon.com keeps in your browser's storage your sign-in, which goes when you sign out (section 6, Sign-ins); for each booking you made there without signing in, its secret link with the shop's name and code and the booking's time and state, which goes once you have read there how the booking ended, a day after the web app first showed that it had ended, or when you sign out or delete everything; the secret links of up to 24 ended bookings whose ending you read there, signed in or not, so that it stops leading you back to them, which go when you sign out or delete everything; while you book, a draft of your choices and the name you typed, in that tab alone (the browser's session storage), which goes once the booking is made or when you close the tab; and your chosen area, your language, the model face you chose for the styles and whether you allowed location, which stay until you change them or clear the browser's data. If you signed in there on or before 21 October 2026, the browser may also hold Google's sign-in for your number until you sign out or sign in again. When you sign in there, Google's check that a person is signing in (reCAPTCHA) runs in the page, under Google's own terms, and Google's sign-in library keeps in the browser a note of the days it was used, which Sign out does not remove.

11. Joining from this website, and the WhatsApp chat

The buttons "Put your salon on Barbloon", "Become a founding shop" and "Join as a stylist" open a short form for asking to join Barbloon, as a salon, as a stylist, or about something else. An enquiry is not an account: it never signs you in and never creates a Barbloon account.

What we keep

Your name and your mobile number, and your email if you give one.
What you tell us: for a salon, its name, where it is, how many chairs it has, how customers book with you now and a good time to call; for a stylist, where you work and how long you have been cutting hair; otherwise, your note.
The language of the page, the button you came from, the moment you agreed to be contacted and the version of this notice you saw.
Our team's progress on it: whether we have called you, and a short note of their own.

The code. Before anything is kept, the form checks that the number is yours with a six-digit code by SMS, from the sender DORVOL, sent through 2Factor (section 5). The code works for ten minutes. A number for which a code is never used is deleted from our database with its code within about seventy minutes. Our server's memory can hold the number for longer: in its count of the codes each number was sent today, which it clears when the first code of a later day is issued, and, with its code, among the last 500 messages the server sent (section 6); a restart of the server clears both. If the form cannot send a code, no enquiry is saved: it offers WhatsApp, a call or an email instead. What you send by WhatsApp or by email is kept as the two parts below say, and your draft stays in the tab as section 10 says.

Why, where, and who sees it

We use an enquiry for one thing: to call or message you back about joining Barbloon. For that our team may call the number you gave, email you if you gave an email, or start a WhatsApp chat with that number, greeting you by name. It is never used for marketing, never sold, and never shown on this website or in an app, except to you: if you open a shop in the partner app with the same number, the enquiry is linked to the shop and its answers fill the app once your number is proved (section 2). It is kept in Barbloon's database on our server in India (section 5). Only Barbloon's own team sees it, through our administrators' and care accounts, and each time one of them opens an enquiry, who did and when is logged. To plan the calls, an administrator may download enquiries as a spreadsheet: it holds what each enquiry keeps, with whether its number already has a Barbloon account or is on a salon's team. The file stays on our team's own computers, off shared drives, and is deleted once the calls are done; a download is logged once, as a whole. If you send the form again with the same number and the same choice (a salon, a stylist, or something else), we update the enquiry you sent before rather than keep two; with a different choice, the new one is kept as a separate enquiry.

How long, and how to have it deleted

An enquiry is deleted a year after the last time you sent it or our team last worked on it, or 90 days after it is closed or your salon joins, whichever comes first. The nightly backups in section 6 can hold a copy for longer, up to thirteen months, and are then deleted. A deletion, on your request or when the time is up, takes the enquiry out of our database at once; a copy in a spreadsheet downloaded earlier goes only when that file is deleted, once the calls are done. To have your enquiry deleted sooner, write to hello@barbloon.com or call care on 7 907 707 507 or 7 907 607 507, from or about the number you gave.

Chat on WhatsApp

The WhatsApp buttons open WhatsApp, a service of Meta Platforms, on your phone or computer, with a message to Barbloon care's number, 7 907 707 507 or 7 907 607 507, already written for you. That message travels to WhatsApp inside the button's link the moment you tap it (on a computer, through WhatsApp's website); it reaches Barbloon care only when you press send, and you can change it first. It carries only what you told the page (your answers, or after an enquiry your first name and, for a salon, its name and place), never your number or your email: WhatsApp shows your number to our team with the chat. What you send there, with your WhatsApp name and number, reaches Barbloon care through WhatsApp, under WhatsApp's own terms and privacy policy. A chat our team starts with you about an enquiry also goes through WhatsApp: it is addressed to your number, and its first message carries your name. We use a chat only for what it is about; it stays in care's WhatsApp, whoever started it, and no end date is set for it yet.

An email

When the form cannot send a code, its button "Email it to us" opens your own email with a message to hello@barbloon.com already written: your answers, your name, your mobile number and your email. You can change it first, and it reaches Barbloon only when you send it; if your email opens in the browser, your email provider receives the message as it opens. Sent, it lands in Barbloon's mailbox, which Google Workspace keeps for us (section 5). Our team reads it to call you back, as it would an enquiry, and keeps it, with any reply, until the team deletes it: no end date is set yet. To have it deleted sooner, write or call as for an enquiry (above).

12. Changes and contact

When this policy changes in a way that matters, we will say so in the app and update the version and date at the top. Questions and requests: hello@barbloon.com, or call customer care on 7 907 707 507 or 7 907 607 507. Dorvo Labs LLP, Kochi, Kerala, India.

What changed in version 1.11 (10 November 2026)

Adds visit photos, which the apps can take with your yes: what we collect (section 2), why (section 3), and the rules (section 4): the three questions you answer in your own account and never on a stylist's phone, the "Ask me about photos at every visit" switch, whose phone takes the photo, one before and up to three afters, your copy kept two years and seen by you alone, the salon's face-hidden copy that is never unhidden and the face-matching check behind it, the salon's pages with your third yes, and no photo at a child's visit. The earlier sentence that your face would be blurred "unless you approve otherwise" is gone: a face is never unhidden. Visit photos are no longer listed among the things not in the apps yet (section 2).
Says who sees a visit photo: the salon only the face-hidden copy and only of its own visits, a new stylist the copy of your last visit, and Barbloon's team the facts and the face-hidden copy when you ask for help or report one, each look logged (section 5).
Adds the rows for your photos and for the salon's copy to how long we keep things, says that the nightly backups hold visit photos encrypted on the server before the backup is made, and that Delete everything takes your photos on both sides (section 6).
Adds visit photos, the salon's copy and its showing to what you can withdraw, and any one photo to what you can erase from the app (section 7).
Says how a child's visit is kept out of the photos and that a photo already taken is deleted when you say on the booking's page, or the salon at the chair, that the visit is a child's (section 8), and that your visit photos are encrypted with a key that only Barbloon holds, kept apart from the backups (section 9).

What changed in version 1.9 (7 November 2026)

Says that the Help videos in both apps play in YouTube's player inside the app from version 1.4.2, what YouTube receives when you watch one, that its player keeps its own data on the phone, and links the YouTube Terms of Service and the Google Privacy Policy (section 5 and the Usage row in section 2).
Says that on an iPhone, from version 1.4.2, push notifications and the silent check at sign-in also pass through Apple's Push Notification service, and names Apple among our service providers and outside the data stored in India (section 5).
Says that Barbloon Partner reads the names and numbers of your contacts, on the phone, when a shop's owner or manager imports customers, that only the ones picked leave the phone, and what becomes of them; the earlier sentences that the apps do not read contacts are corrected (section 2, the table and If you work at a salon).
Says that ratings are in the customer app since version 1.1: what a rating is, that the shop sees the stars and never the words, and that a rating is kept with your account and goes with it. Ratings are no longer listed among the things not in the apps yet (section 2).
Says that ML Kit is the QR scanner's library in the Android apps alone, and that on iPhone the scanner uses Apple's own frameworks, so nothing goes to Google (section 5).

What changed in version 1.8 (22 October 2026)

Says that Sign out deletes your sign-in from our server, not only from the phone or the browser, in the customer app from version 1.3.1 and in the web app since the afternoon of 21 October 2026, as it already did in Barbloon Partner; that from version 1.3.1 the customer app's Sign out also signs the phone out of Firebase Authentication; that a sign-in Barbloon Partner leaves by switching shops or roles stops working after 180 days; and that a sign-in Sign out did not end stays on our server after it stops working, as an unusable digest of its token with the name it was opened under and, for salon staff, the number, the shop and the role, until the account is deleted or, for salon staff, Barbloon removes it on request (section 6, Sign-ins).
Says what the web app keeps in your browser, where it keeps the sign-in's token, and what its Sign out removes (sections 9 and 10).

What changed in version 1.7 (18 October 2026)

Rewrites "If you work at a salon" (section 2) for the two sign-ups the partner app now has, a stylist's own profile and a shop opened from the app by its owner: what Barbloon holds about the shop and its application, who sees it and what is logged, how Barbloon's replies reach the phone, what the founders' alert carries, what the WhatsApp button's link carries, and how long each thing is kept. The earlier sentence that the app has no sign-up of its own is gone.
Says that an enquiry from this website is also used to fill in the partner app for the person who opens a shop with the same number, and is marked joined when the shop goes live (sections 1, 2 and 11).
Says that the partner app's camera also takes a picture of a shop being set up, and that a picture may come from the phone's gallery, each only when chosen (section 2).

What changed in version 1.6 (13 October 2026)

Adds section 11, joining from this website and the WhatsApp chat: what an enquiry keeps, why, where, for how long, who sees it, the spreadsheet our team may download to make the calls, and how to have it deleted; the code by SMS that checks the number; that a WhatsApp button's message travels to WhatsApp inside its link, and that a chat stays in care's WhatsApp.
Names 2Factor, our SMS gateway, and everything it carries: the join form's code and, when no push notification reaches a customer, a booking's confirmation with the turn code, word that it was cancelled, and the link to the bill (sections 3 and 5).
Says that care sees the number of an enquiry, the one exception to the care console not showing a number, and that this website keeps a draft of the join form in the tab until the enquiry is saved (section 10).
Says where an email to hello@barbloon.com is kept (Barbloon's mailbox at Google Workspace, with no end date set), that our team may start a WhatsApp chat about an enquiry, and what our server's memory holds of a number and of the messages it sends, and for how long (sections 3, 5, 6 and 11).

What changed in version 1.5 (2 October 2026)

Says that the shop you book may receive your mobile number, with the bill on WhatsApp and with a call you allow. The earlier sentence about masked calls is gone: Barbloon has no masked calling.
Says what passes through Google: the sign-in record, the text of push notifications, and the QR scanner's diagnostics.
Lists the profile fields, the 30-day server log, the web host, and what we hold about salon staff.
Corrects how long things are kept: a Mirror picture for 24 hours, a saved look for two years, and no automatic deletion after three years, which was never built.
Says what stays after Delete everything, that the sign-in record at Google now goes with the account unless the number is on a salon's team, and links the new page Delete your account.
Says what protects your data in place of a general sentence about encryption at rest, and that a Mirror picture can be reported.
Marks chat, visit photos, the Avatar, ratings and payments as not in the apps yet.