Privacy Policy

Last updated: February 6, 2026

At Spressify, we respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Spressify mobile application and website (collectively, the "Service").

By using Spressify, you agree to the practices described in this Policy.

1. Information We Collect

Information You Provide Directly

We collect information you provide when you:

• Create an account (name, email address, phone number)
• Sign in using third-party authentication providers (such as Google or Apple)
• Book or request appointments (booking details and preferences)
• Make payments (processed securely by third-party payment providers)
• Contact customer support
• Update your profile or preferences

Spressify does not store full payment card numbers.

Information Collected Automatically

When you use the Service, we may automatically collect:

• Device information (device type, operating system, app version)
• Usage data (features used, interactions, crash data)
• Precise location, with your permission, to display nearby salons
• Log and diagnostic data to maintain app stability and security

2. How We Use Your Information

We use your information to:

• Provide and operate the Service
• Manage bookings and appointments
• Send confirmations, reminders, and account notifications
• Enable secure authentication and fraud prevention
• Provide customer support
• Improve app performance, reliability, and features
• Comply with legal obligations

3. SMS / Text Message Communications

By creating an account and booking appointments through Spressify, you consent to receive transactional SMS messages at the phone number you provide.

Opting Out

You may opt out of SMS messages at any time by replying STOP to any message.

Reply HELP for assistance or contact support@spressify.com.

Spressify does not send promotional or marketing text messages.

4. Transactional Email Communications

We send transactional emails related to your account activity, including:

• Account deletion confirmations
• Security notifications

These are one-time, event-triggered emails. We do not send marketing emails. Transactional emails are sent from a @spressify.com domain address only.

5. Information Sharing

We share personal information only as necessary:

With Service Providers

We share information with trusted vendors that help operate the Service, including:

• Firebase (Google) — Authentication, database, hosting, analytics, crash reporting (Crashlytics), and push notifications (Cloud Messaging)
• Stripe — Payment processing
• Twilio — SMS communications
• Google Maps Platform — Location services and salon discovery

These providers are contractually obligated to protect your information and process it only for the purposes we specify.

With Salons and Service Providers

When you book an appointment, relevant booking details are shared with the selected salon or provider so they can deliver the service.

Legal Requirements

We may disclose information if required by law, legal process, or to protect the safety, rights, or integrity of Spressify and its users.

6. International Data Transfers

Your information may be transferred to and processed in the United States, where our service providers (including Firebase, Stripe, and Twilio) operate data centers. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our providers operate.

We ensure that appropriate safeguards are in place to protect your data in compliance with applicable privacy laws.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards, including:

• Encryption in transit and at rest
• Secure authentication systems
• Restricted access to sensitive data
• Continuous monitoring and security reviews

No system is 100% secure, but we work to protect your data responsibly.

8. Your Rights and Choices

You have the right to:

• Access your personal information
• Update or correct your information
• Request deletion of your account and data
• Opt out of SMS communications
• Manage permissions (such as location access)

9. Account Deletion

You can permanently delete your account at any time directly from the Spressify app. When you delete your account:

• Your personal data is permanently removed from our systems
• A confirmation email is sent to your registered email address
• Deletion is processed immediately and cannot be undone

Certain records may be retained for a limited period as required by applicable law (tax, fraud prevention, or legal obligations). System backups may take up to 30 days to fully clear.

If you are unable to delete your account through the app, you may request deletion by emailing account-deletion@spressify.com.

For more information, visit our Account Deletion page.

10. Data Retention

We retain personal information:

• While your account is active
• As necessary to provide the Service
• As required by law, dispute resolution, or legitimate business needs

When no longer required, data is securely deleted or anonymized.

11. Children's Privacy

Spressify is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user under 18 has provided us with personal data, we immediately take steps to remove such information.

12. California Privacy Rights (CCPA / CPRA)

Your Rights

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Request correction of inaccurate information
• Opt out of the sale or sharing of personal information
• Be free from discrimination for exercising your rights

Categories of Information Collected (Past 12 Months)

• Identifiers: Name, email, phone number, account ID
• Commercial Information: Bookings and services
• Geolocation Data: Precise location (with consent)
• Internet Activity: App usage and device data
• Inferences: Preferences based on booking activity

How to Exercise Your Rights

To submit a request:

• Email support@spressify.com with the subject line "California Privacy Request"
• Or use the Delete My Account feature in the app

We may verify your identity before responding. We respond to verified requests within 45 days.

Authorized Agents

You may designate an authorized agent to submit a request on your behalf. Proof of authorization may be required.

Do Not Track

Spressify does not track users across third-party websites. We do not respond to Do Not Track (DNT) browser signals, as there is no industry-standard interpretation of DNT signals for mobile applications.

13. Additional State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA) have similar rights to access, correct, delete, and opt out of certain processing of personal data. To exercise your rights under these or any applicable state privacy law, contact us at support@spressify.com.

14. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a revised "Last updated" date.

15. Contact Us