BossCorp Barber

This Privacy Policy explains how the BossCorp Barber app (the "App") collects, uses, stores and protects your personal data. Please read it carefully. By using the App you accept the practices described here.

1. Data controller

2. Data we collect

• Account data: full name, phone number, e-mail address and password (stored only in a cryptographically hashed form).
• Booking data: appointments you make, selected services, date and time, status and your notes.
• Reviews: ratings and comments you voluntarily leave.
• Push notifications: a unique device token needed to deliver notifications (appointment confirmations, offers).
• Caller identification (staff only): on staff Android devices the App may, with your permission, read the incoming caller's number to recognize a calling client. This data is used only locally on the staff device and is not shared with third parties.
• Gallery (staff only): photos and videos of work that staff voluntarily upload.
• Technical data: basic device and app-version information required for correct operation.

The App does not collect payment data and does not process cards — payment is made at the salon.

3. Purpose and legal basis

• Creating and maintaining your account — performance of a contract.
• Booking, confirming and managing appointments — performance of a contract.
• Sending notifications about your appointments and offers — consent / legitimate interest.
• Displaying and publishing reviews — consent.
• Improving service quality and system security — legitimate interest.

4. Sharing and third parties

We do not sell or rent your data. We share data only with the following service providers, to the extent necessary to operate the App:

• Google Firebase (Cloud Messaging & phone verification) — delivery of push notifications and SMS phone verification. Firebase receives the device token and notification content, and (for password reset) verifies your phone number. More: firebase.google.com/support/privacy.

Data is stored on the server under bb.boss-corp.net, protected by encryption in transit (HTTPS/TLS).

5. Data retention

We keep your data while your account is active, i.e. as long as necessary for the purposes stated here or as required by law. Upon your request to delete your account, we remove your personal data within a reasonable time, except data we are legally required to retain.

6. Your rights

• Right to access your data;
• Right to rectification of inaccurate data;
• Right to delete your account and data;
• Right to withdraw consent at any time;
• Right to object to processing.

To exercise any right, contact us at mirzet@gmail.ba. You may also request account deletion directly in the App.

7. Security

We apply reasonable technical and organizational measures: encrypted data transfer (HTTPS/TLS), passwords stored only as hashes, and restricted access to data. No system is perfectly secure, but we continuously work to protect your data.

8. Children

The App is not intended for children under 13. We do not knowingly collect their data. Minors may use the App with parental or guardian consent.

9. Changes

We may update this Policy from time to time. Changes are published on this page with an updated date. Significant changes may also be announced in the App.

10. Contact

BossCorp Barber
Tuzla, Bosnia and Herzegovina
Email: mirzet@gmail.ba