This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use ProBeauty Connect. By creating an account or using the App, you agree to the practices described below.
Information we collect
Information you provide directly.
| Category | Examples | Why |
|---|---|---|
| Account & identity | Name, email, hashed password, role (professional / owner / admin) | Authentication, account creation |
| License verification | License number, issuing state, license photo | Verifying professional credentials before applications can be submitted |
| Profile | Bio, specialty (hair, nails, lash, esthetics, etc.), years of experience, profile photo, portfolio photos | Display on profile, listing applications |
| Listings (owners) | Business name, description, address, photos, compensation type, salary range | Marketplace functionality — these are public-facing posts |
| Applications | Application message, listing the application is for | Routing applications to the right owner |
| Messages | Sender, recipient, message content, timestamp, read status | In-app chat feature |
| Payments | Transaction ID and product purchased (for Listing Boosts and Verified Pro subscriptions) | Granting purchased entitlements + receipt audit trail. Card numbers are never seen by us — handled entirely by Apple In-App Purchase / Google Play Billing. |
Information collected automatically.
| Category | Examples | Why |
|---|---|---|
| Device push token | Expo / Apple Push Notification Service / Firebase Cloud Messaging device token | Deliver push notifications (new applications, messages, license decisions, etc.) |
| Precise & coarse location | Latitude/longitude (only when you tap “Use my location”), city, state, postal code | Map-based radius search and showing nearby listings. We do not collect background location. |
| Server logs | API endpoint hit, HTTP status, request timing, IP address (truncated) | Operational debugging and abuse prevention. Logs are retained 30 days then rotated. |
What we do not collect.
- We do not collect health, fitness, sensitive (racial / ethnic / religious / political), biometric, contacts, browsing history, advertising identifiers, or audio data.
- We do not use third-party analytics SDKs (no Mixpanel, Amplitude, Segment, Firebase Analytics, etc.).
- We do not have ad networks embedded in the App.
- We do not track you across other apps or websites (no IDFA / advertising-ID collection).
How we use your information
- To provide the service — authenticate you, deliver messages, route applications, render listings, verify licenses, process IAP purchases, send push notifications.
- To personalize your experience — greet you by first name, surface nearby listings, show your unread badge, display the Verified Pro / Boosted indicators based on your purchase history.
- To prevent fraud and abuse — verify professional licenses; verify IAP receipts with Apple/Google; rate-limit suspicious activity.
- To comply with law — respond to lawful requests, enforce our Terms of Service.
We do not use your data for advertising or sell it to data brokers.
Data retention
- Account & profile data: retained while your account is active.
- Messages: retained for the lifetime of the conversation, deletable on request.
- Server logs: 30 days.
- IAP transaction records: retained for 7 years for tax/audit compliance.
- License verification photos: deleted within 30 days of verification or rejection.
When you delete your account, all personal data is permanently removed within 30 days, except records we are legally required to keep (e.g., financial transactions for tax purposes, which are anonymized).
Security
- Passwords are stored using bcrypt hashing — we never see your password in plaintext.
- All API traffic is encrypted via HTTPS/TLS 1.2+.
- Authentication uses signed JWT bearer tokens stored in the device's secure storage (iOS Keychain via expo-secure-store).
- Database encryption at rest.
- Role-based access control on every API endpoint.
Your rights
Depending on where you live, you may have rights under the GDPR (EU/UK), CCPA/CPRA (California), or other laws. These include:
- Right to access — request a copy of the data we hold about you.
- Right to deletion — request permanent removal of your account.
- Right to correction — fix inaccurate information via Edit Profile or by contacting us.
- Right to data portability — receive a machine-readable export of your data.
- Right to opt out of sale/sharing — we don't sell or share your data for advertising, so there's nothing to opt out of, but the right is preserved.
To exercise any of these, visit Your Privacy Choices or email privacy@probeauty.app. We respond within 30 days.
Children
ProBeauty Connect is not directed to children under 16. We do not knowingly collect data from children under 16. If you become aware that a child has provided data, please contact us at privacy@probeauty.app and we will delete it promptly.
International transfers
Data is processed in the United States. If you're accessing from outside the US, your data will be transferred to and stored in the US under standard contractual protections.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via in-app notification and an updated “Effective Date” at the top of this page.
Contact us
Privacy Team
Email: privacy@probeauty.app
Postal: ProBeauty Connect Privacy Office · United States