Privacy Policy

1. Information we collect

• Account information: full name, phone number, email, encrypted password and role (spa owner, staff, customer).
• Spa information: spa name, address, opening hours, services, treatment packages, staff and branches.
• Operational data: appointments, service history, care notes, revenue and usage statistics.
• Technical data: device type, operating system version, device token to send push notifications.

2. How we use it

We use the information to provide and operate the spa management service: managing appointments, customer records, appointment reminders, sending notifications, processing package payments and improving the app experience.

We do not sell your personal data to third parties.

3. Sharing information

Information is only shared to the extent necessary with: server infrastructure providers, payment gateway partners, and when required by Vietnamese law.

Each spa's customer data is isolated per spa; one spa cannot access another spa's data.

4. Storage & security

Data is stored on servers located in Vietnam. Passwords are one-way hashed and traffic is encrypted with TLS.

We retain data for as long as you use the service and for a reasonable period afterwards as required by law, after which it will be deleted or anonymized.

5. Your rights

You have the right to access, edit, request deletion of your personal data and withdraw your consent at any time by contacting us.

Spa owners are responsible for the customer data they enter and confirm that customer consent has been obtained.

6. Push notifications

The app sends appointment reminders and operational updates. You can turn off notifications in your device Settings at any time.

7. Changes to this policy

We may update this policy. Significant changes will be announced in the app and on the website before they take effect.