Privacy Policy
- We collect what a booking needs: your name, mobile number, the shop, the services and the times. Location only with your permission, and only in the moment.
- Photos are yours. The Mirror deletes your source photo after the session unless you save the look. Visit photos are stored with your consent, shown with your face blurred unless you approve otherwise, and you can withdraw that approval at any time.
- Salons see only what happened at their shop. Your private notes stay private. We never sell personal data.
- You can see, correct and delete your data. "Delete my account" removes everything at once.
1. Who we are
Barbloon (barbloon.com, the Barbloon customer apps and the Barbloon partner app) is operated by Dorvo Labs LLP ("Barbloon", "we"). We are the data fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023 and its rules. Salons, stylists and other partners who use Barbloon are independent businesses; where they keep records about you for their own purposes, they are responsible for those records, and this policy explains what they can and cannot see.
Questions, requests and grievances: hello@barbloon.com. We reply within 30 days, usually much sooner.
2. What we collect
| Data | When | Notes |
|---|---|---|
| Name and mobile number | When you book, or create an account | The mobile number is your identity on Barbloon. A first booking from a shop's QR needs only a name and number. |
| Bookings and visits | Every booking | Shop, services, chosen cut, times, position in the queue, whether you arrived, what was billed. |
| Cut spec and looks | When you or a stylist record them | A structured description of your cut, and looks you choose to save. |
| Photos | Only with your consent | Visit photos taken by the stylist, photos you upload to the Mirror, and your avatar. See section 4. |
| Location | Only with your permission | Used at that moment to show nearby shops, distance and "leave now". We do not store a movement trail. |
| Messages and calls | When you use chat or in-app calling | Chat messages between you and a shop; call times and durations for masked calls. Masked calls never reveal either party's number to the other. |
| Payments | When payments are enabled | Handled by a licensed payment gateway. We receive confirmations and amounts, never your card or bank details. |
| Device and usage | While you use the apps or site | Push notification tokens, app version, language, and which screens and actions you use, so we can fix drop-offs. The website itself sets no tracking cookies. |
| Ratings and notes | When you give them | Your rating of a shop or stylist, the reason for a low rating, and your private feedback note. |
3. Why we use it
- To run your booking: place you in the queue, get a person at the shop to confirm, tell you when to leave, and show the stylist what you asked for.
- To keep the queue honest: measure how long services actually take so turn times stay truthful.
- To remember how you cut last time, so the next visit takes two taps.
- To message you about your booking by push notification, WhatsApp or SMS. Marketing messages are sent only if you opt in, and you can opt out any time.
- To help when something goes wrong: our care team can see your booking to sort out an escalation, a no-show or a complaint. Staff access to your history is logged.
- To improve Barbloon, using usage data that is aggregated wherever possible.
We process personal data on the basis of your consent, given when you book or create an account, and for the purposes you would reasonably expect from a booking you asked for. We do not sell personal data and we do not use your photos to train models.
4. Photos, the Mirror and the Avatar
The Mirror
The Mirror shows a hairstyle, beard or colour on a photo you take or upload in the app. The photo is processed to render the look and is deleted from our systems once the render is complete, unless you choose to save the look. A saved look is private to you, and is shown to a stylist only when you attach it to a booking. The Mirror is available only to adults.
Visit photos
A stylist may take before-and-after photos at the end of a service only after asking you, and the app records that consent. These photos are stored on your visit and appear in the stylist's and the shop's portfolio with your face blurred. A stylist may ask to show your face; that happens only if you approve it in your own account, and it is shown with your name so people know it is a genuine customer. You can withdraw that approval at any time, and the photo is blurred again or removed immediately. You can delete any visit photo from your side, which removes the shop's copy too.
The Avatar
With your consent, we create a stylised avatar of you wearing your cut. It is never a photograph of your face, at any setting, and it is the only likeness we show on queue screens and shared surfaces. The source photo is deleted once the avatar is generated unless you explicitly ask us to keep it. If we derive a face shape to improve suggestions, that is a separate consent you can decline.
Minors
We do not create Mirror renders for children. A child's avatar is created only with a guardian present, recorded by the shop, and is limited to the illustrated setting.
5. Who can see what
- The shop you book sees your name, your booking, your chosen cut, and the record of what was done at that shop. A shop never sees your visits to other shops.
- A stylist sees the work they did for you, at whichever shop they did it.
- Notes a shop writes about you (for example a colour formula) stay with that shop and are not shown to you, to other shops, or to a stylist who has left.
- Your private feedback note is visible to you and to Barbloon only, unless you choose to share it with the shop.
- Other customers see counts and neutral dots on public queue screens, never names or portraits.
- Service providers who process data for us under contract: hosting in an Indian data centre, SMS and WhatsApp delivery, push notifications, the payment gateway, and image processing for the Mirror and the Avatar. They may use the data only to provide the service to us.
- The law: we disclose data when a court, the Data Protection Board or another authority lawfully requires it.
Personal data is stored in India. Where a processor operates outside India, we transfer only what the task needs and only to countries not restricted by the Government of India.
6. How long we keep it
| Data | Kept for |
|---|---|
| Mirror source photos | Deleted when the render completes |
| Saved looks and avatars | Until you delete them or your account |
| Visit photos in your profile | Two years from the visit; we remind you five days before deletion and you can choose to keep them longer |
| Visit photos on the shop's side | Up to four years, or sooner if you delete yours |
| Booking and visit history | Three years from the visit |
| Bills and payment records | As long as tax and accounting law requires, with personal fields removed once no longer needed |
| Everything else | Until you delete your account, or after three years without any activity, whichever comes first |
Delete my account in the app removes your profile, bookings, photos on both sides, looks, avatars, chats and consents at once. We keep only the financial records the law requires, without your personal fields.
7. Your rights
- Access: ask for a summary of the personal data we hold and who we have shared it with.
- Correction: fix anything that is wrong or incomplete.
- Erasure: delete specific items or everything, from the app or by email.
- Withdraw consent: turn off location, photos, face-visible publication, face-shape derivation or marketing at any time in your settings, as easily as you gave it.
- Nominate a person who can exercise these rights for you if you are unable to.
- Complain: write to hello@barbloon.com. If we do not resolve your grievance, you may approach the Data Protection Board of India.
8. Children
Barbloon accounts are for adults. A parent or guardian may book for a child from their own account. We do not knowingly collect a child's personal data beyond what that booking needs, and we apply the photo rules in section 4.
9. Security
Data travels over encrypted connections and is stored in an Indian data centre with access limited to the staff who need it. Sensitive fields are encrypted at rest, media links expire, and staff access to customer history is logged. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Board as the law requires.
10. This website
barbloon.com stores one thing in your browser: your language choice. It sets no tracking cookies and runs no third-party analytics. Fonts are loaded from Google Fonts, which receives your browser's request for the font files. The demos on the home page run entirely in your browser with simulated data and send nothing to us.
11. Changes and contact
When this policy changes in a way that matters, we will say so in the app and update the version and date at the top. Questions and requests: hello@barbloon.com. Dorvo Labs LLP, Kochi, Kerala, India.