Privacy Policy

1. Who we are

TrimBrim is a service that shows people barber shops near them, how many chairs are free right now, and the shop's current offers, and gives barber shops a way to be found. It is operated by TrimBrim (“we”, “us”). You can reach us about anything in this policy at privacy@trimbrim.com.

This policy covers the TrimBrim mobile app (for customers and for shop owners and their staff), the website at trimbrim.com, and the admin tools we use to run the service.

2. What we collect

Your account

• Name, email address and a password. The password is stored only as a hash; we cannot read it. If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.
• Optionally, a phone number, date of birth, gender and a profile photo. None of these are required to use the app.
• Verification codes we email you, stored hashed and deleted once used or expired.

Your location

• Only while the app is open, and only to show shops near you. We never read your location in the background. If you decline, the app still works — you can choose a city from the list of cities that have shops, and the app shows what is listed there.
• Your position is not stored. The app asks your phone each time and sends the coordinates to our server only to answer that search. What we keep on your profile is a city — worked out once from your position when you first allow location, or the one you choose from the list — so the app has somewhere to show when no location is available. It changes when you choose another city and is removed with your account.

What happens at the shop

• A shop may record a visit when you sit down — what you had, and, if the barber types it, your name and phone number. This is the shop's own record of its customers, the way a notebook at the counter is. We match a visit to your account only if the phone number on it is the one on your account, and we tell the shop only whether that person can be reached through TrimBrim, never anything else about your account.
• Reviews you leave, with your name and the rating, are shown publicly on the shop's page. You can only review a shop that recorded a visit from you.
• Shops you save as favourites.

If you run a shop

• The shop's details — name, address, map position, opening hours, services and prices, the number of chairs, offers — all of which are public, because the point is to be found.
• Photos you upload of the shop. These are public. We strip camera metadata (including the GPS position a phone embeds) before storing them.
• Your staff's names and, if you invite them, their accounts.
• Your live counters — how many chairs are occupied and how many people are waiting — which you tap and every customer sees. We keep the history so your dashboard can show you your own day.
• If you buy a boost for an offer, the payment is handled by Razorpay. We receive confirmation that it was paid and a payment reference; we never see your card or bank details.

Bookings

• A booking you ask for — the shop, the services, the day and time, the note you write, and what happened to it: accepted, rejected, cancelled (and by whom), or marked as a no-show.
• How far away you asked from. When you book, the app sends your position once; we keep only the distance to the shop — “3.1 km” — to show the shop, never the position itself. Without location, the booking simply says you did not share it.
• Your count of no-shows and late cancellations from the last 30 days, across TrimBrim. It decides whether booking is paused for you, and a shop sees it on your request.

Crash reports and support

• When the app crashes, it sends a crash report to Sentry: the device model, the app version, what failed, the steps just before it, and your account number — not your name, email, messages or location.
• If you run a shop and ask us for help from the app or the owner website, we keep what you write and any screenshots you attach, to answer it.

Notifications

• A push token for your device, if you allow notifications. Everything we would push is also kept in the app's notification centre, so the app works with notifications off.
• Two switches recording what you are willing to be sent unprompted — a shop you saved opening or closing, and an offer from a shop you have been to. Both are on until you turn them off in the app, under Notifications, and turning one off means nothing is sent and nothing is kept in the notification centre either.

The website

• “List your shop” on trimbrim.com asks for a name, a phone number and a shop name so we can call you. That is all it collects, and it is used for that call.
• The website sets no tracking cookies and runs no advertising or analytics scripts.

Technical

• Server logs — the IP address, time and endpoint of each request, kept for a short period to keep the service running, rate-limit abuse and diagnose faults.
• Device type and app version, so we can tell which build a problem is in.

3. What we use it for

• To run the service: show shops near you, show live chair availability, let a shop keep its counters and its customer list, and let you leave a review.
• To sign you in and keep your account secure — verification codes, session tokens, and telling you when a sign-in looks wrong.
• To send you the two notifications you can control — a shop you saved opening or closing (with how many chairs are free), and an offer from a shop you have actually been to — and messages about your account and anything you asked the app to do. Never marketing from third parties. The first two switch off in the app, under Notifications.
• To let a shop tell its own customers about an offer. A shop can only reach people who have a TrimBrim account and whose phone number it already has from a visit.
• To keep the service honest — approving shops before they are listed, taking down offers or reviews that break the rules, stopping abuse.
• To understand how the service is used, in aggregate, so we can improve it.

4. Who we share it with

We do not sell personal data, and we do not share it with advertisers. The following providers process data on our behalf, each only for the purpose named:

Shops see what you leave with them: the visit they recorded, the name on your review, and whether a phone number they hold belongs to someone reachable through TrimBrim. On a booking you ask them for, they also see your name, phone number, note, how far away you asked from, and your count of no-shows and late cancellations from the last 30 days. They do not see your email, your location or your visits to other shops.

Other customers see your name and rating on a review you post, and nothing else.

We will disclose data if the law requires it, or to protect the rights and safety of our users and the service.

5. How long we keep it

For as long as you have an account. When you delete it (see Delete my account), your name, email, phone, photo and every identifier are removed immediately, and sessions, devices, favourites and notifications are deleted outright.

Some things stay, without you in them: a visit a shop recorded stays as “a haircut that happened” with your name, phone and account removed — a shop's count of its own day does not change because a customer later left; and a review you left stays on the shop's page signed “Deleted user”, so a shop's rating is not rewritten by accounts closing. A booking stays in the shop's diary the same way, with your name, phone and account removed.

Server logs rotate automatically and are never archived. They record each request's path, time and IP address and, when we email you a code, the address it went to — not the contents of what you send. Backups are taken nightly and deleted after 30 days, after which deleted data is gone from them too.

A shop that closes its listing keeps its record so it can relist; an owner who deletes their account must close the shop first.

6. Your choices and rights

• See and change your profile from inside the app at any time.
• Turn location off in your phone's settings; the app falls back to the city on your profile, or one you choose from the list.
• Choose what we send in the app, under Notifications: the saved-shop alert and shop offers each have their own switch, and what you switch off is not sent at all.
• Turn notifications off altogether in your phone's settings; the notification centre keeps working.
• Delete your account from inside the app — Privacy & security → Delete my account — or by emailing us.
• Ask us for a copy of your data, to correct it, or to delete it, at privacy@trimbrim.com. We answer within 30 days.
• If you are in a place whose law gives you further rights (for example the EU, the UK, or under India's DPDP Act), you have them, and the address above is where to exercise them.

7. Security

Everything travels over HTTPS. Passwords are hashed, verification codes are hashed and single-use, and sessions use short-lived tokens that are rotated on every use and revoked on a password reset. Photos are stored in a private bucket and served by direct link only. Access to the admin tools is limited to the people who run the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.

8. Children

TrimBrim is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, write to us and we will remove it.

9. Changes to this policy

When the product starts collecting something new, this page changes and the date at the top moves. For a change that matters to you — a new kind of data, a new purpose — we will tell you in the app before it takes effect.

10. Contact

privacy@trimbrim.com for anything about your data; hello@trimbrim.com for everything else.