Privacy Policy

The short version

Barber Stats stores the information you enter about your shop so it can show you how the shop is performing. We do not sell it, we do not use it for advertising, and nobody outside your team can see it. The owner of a shop can download a copy of everything in it at any time, on any plan, and can delete the shop or their account themselves, whenever they like.

What we collect

Your account

Your name, your email address and either a password (stored only as a hash) or, if you sign in with Google, the stable account id Google gives us. We never see your Google password.

Your shop

The shop name, location, currency and time zone; the barbers, services and prices you set up; the visits you record, including the client name if you enter one, the service, the price and whether it was paid by cash or card; clock-in and clock-out times; appointments; and what each barber is paid, if you choose to enter it, which only the shop's owner can see.

Billing

Your plan and subscription status. Card details never touch our servers. Payment is handled by Stripe, and we store only the identifiers Stripe gives us. When an introductory discount is taken off a first payment, we keep a scrambled code for the card and for the address the account was made and paid from, which cannot be turned back into either, so the same discount cannot be claimed again with a new account.

Technical

Your IP address, held briefly to limit repeated sign-in attempts; the browser type on each sign-in, so you can recognise your own sessions; and an activity log of changes made inside your shop, so an owner can see who changed what.

Why we use it

To run the service you signed up for: showing your dashboard, calculating the figures, sending you a link to confirm your email address, a password-reset link when you ask for one, a summary of the day if you have left that switched on, and notice that a trial or a payment needs your attention; taking payment for your plan; and keeping your account secure. We use it for nothing else. If we ever want to use your data for a new purpose, we will ask first.

Who it is shared with

Only the providers needed to run the service, and only the data they need to do their part:

Stripe

Processes subscription payments. Receives your email and plan; never your shop's records.

Google

Only if you choose to sign in with Google. We receive your name, email and account id from Google; Google receives nothing about your shop.

Email provider

Delivers the emails described above. Receives your email address and the message.

Hosting and database

Store and serve the application and its data.

We do not sell personal data and we do not share it with advertisers. We will disclose data if the law requires it, and we will tell you when we are allowed to.

Your team and your clients

You decide what goes into Barber Stats about your barbers and your clients, and you are responsible for having the right to record it. Barbers with a login see their own figures only. Managers see what you allow in Settings → Permissions. If a client asks you what you hold about them, everything is visible on their record and exportable.

How long we keep it

For as long as your account exists. If your trial ends or your subscription lapses, your workspace becomes read-only. Nothing is deleted, so you can come back, or download a copy first. When you delete a shop or your account, in Settings → Security, it is removed from the service straight away. Copies held in backups are overwritten within 30 days, and we keep the billing records the law requires us to keep.

Cookies

Session

Keeps you signed in. Deleted when you sign out; expires after 30 days.

Active shop

Remembers which of your locations you last looked at. A preference, never a permission.

Sign-in handshake

A ten-minute cookie used only while Google sign-in is in progress, to protect the process from forgery.

Plan choice

If you pick a plan before signing up, this remembers it until you reach the billing page.

Theme

Light or dark mode, kept in your browser's local storage rather than a cookie.

There are no advertising or cross-site tracking cookies.

Security

Passwords are hashed, never stored. Session tokens are stored only as a hash, so a copy of our database cannot be used to sign in. Every record is tied to your shop, and every query checks your membership before it runs. Connections are encrypted in transit.

Your rights

You can see and correct your data inside the app, change the email address you sign in with, download a copy of everything in your shop, and delete your shop or your account, all without asking us. For anything else, or any question about this policy, email barberstats.support@gmail.com. Depending on where you live you may have further rights under local law, and we will honour them.

Children

Barber Stats is a business tool and is not intended for anyone under 16.

Changes

If this policy changes in a way that matters, we will email account owners before the change takes effect. The date at the top always shows the current version.