Legal
Privacy Policy
How the BookBara mobile application collects, uses, and protects your personal data.
Last updated 20 August 2026
Adease LTD ("we", "our", "us"), a company registered in England and Wales (company number 14743980), registered office 124 City Road, London, EC1V 2NX, United Kingdom, is the data controller for personal data processed through the BookBara app.
Contact for privacy matters: support@adease.io
1. Summary
- We collect what is needed to run an account, show you nearby salons, and pass a booking request to the salon you chose.
- We never take payment for appointments. You pay the salon directly, so we never receive or store your card or bank details for a booking.
- Location is used to sort and map salons near you. It is optional — decline it and you can still search by area.
- When you book, the salon receives the details it needs to honour the appointment. That salon is a separate business with its own obligations for the data it then holds.
- We do not sell your data, and we do not use it to train AI models.
2. Data we collect
Account data. Email address, display name, profile photo if you set one, phone number if you provide one, and the identifier returned by Sign in with Apple or Google Sign-In. We never receive your Apple or Google password.
Booking data. The salon, service, date and time you request; the status of the request; and any note you add for the salon.
Location data. If you grant permission, your device's location, used to sort salons by distance and place them on a map. See section 4.
Salon business data. For salon accounts: business name, address, contact details, opening hours, services and prices, staff names shown on the listing, and the photographs and videos uploaded to the listing.
Subscription data. For salon accounts: subscription status, entitlements, and transaction identifiers received from Apple, Google, and RevenueCat. We never receive or store payment card details — subscription payment is handled entirely by Apple or Google.
Device and usage data. Device model, operating system version, app version, language and region, crash diagnostics, feature usage events, and IP address, collected through Firebase.
Push notification tokens. A Firebase Cloud Messaging token, if you enable notifications, used to tell you about booking requests, confirmations, and reminders.
Support correspondence. Anything you send us by email.
3. Why we process it, and our lawful basis (UK/EU GDPR)
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Passing your booking request to the salon you chose | Performance of a contract |
| Showing salons near you and placing them on a map | Your consent (device location permission) |
| Publishing a salon listing | Performance of a contract |
| Managing salon subscriptions and billing reminders | Performance of a contract; legal obligation |
| Sending booking and reminder notifications | Performance of a contract, or consent where required |
| Fraud prevention, abuse detection, and security | Legitimate interests |
| Diagnostics, crash reporting, and product improvement | Legitimate interests |
| Content moderation and enforcing our Terms | Legitimate interests; legal obligation |
| Retaining transaction records | Legal obligation |
4. Location data — detail
What we collect. If you grant the location permission, your device's approximate or precise location at the moment you use a feature that needs it.
How we use it. To sort salons by distance from you and to centre the map. Location is used at the time you use the feature; we do not track your location in the background, and we do not build a location history or movement profile.
What we never do. We do not use location for advertising, do not sell it, and do not share it with salons. A salon sees the bookings you make, not where you are.
Your control. Location is optional. You can decline it, or revoke it later in your device settings, and continue to browse and book by searching an area instead. Maps are provided by Google Maps Platform, and loading a map sends the map request to Google under its own privacy policy.
5. What the salon receives
When you request an appointment, we pass the salon the information it needs to honour it: your name, the service, the requested date and time, any note you added, and a means of contacting you where you have provided one.
Once a salon receives your booking, that salon decides how it uses the details in its own records. Salons are independent businesses and are separately responsible for the personal data they hold about their customers, including anything they write down outside the App. If you want a salon to delete what it holds about you, contact the salon. We can delete what is in BookBara, but we cannot reach into a salon's own books.
6. Who we share data with
We share personal data only with service providers acting on our instructions, with the salon you choose to book with, and with the parties below:
- Google (Firebase) — authentication, database, storage, cloud functions, messaging, analytics, crash reporting. https://firebase.google.com/support/privacy
- Google Maps Platform — maps and place display. https://policies.google.com/privacy
- RevenueCat — salon subscription and entitlement management. https://www.revenuecat.com/privacy
- Apple and Google — payment processing for subscriptions, authentication, and app distribution, as independent controllers under their own policies.
We disclose data to law enforcement or regulators where legally required, and to professional advisers or an acquirer in connection with a corporate transaction, subject to equivalent protections.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
7. International transfers
Adease LTD is established in the United Kingdom, and BookBara is used in Cambodia and other countries. Data is processed on Google Cloud infrastructure and by the providers listed above, which may process it in the United States and elsewhere. Where personal data leaves the UK or EEA, we rely on the UK International Data Transfer Addendum, the European Commission's Standard Contractual Clauses, or an applicable adequacy decision. Where local law in your country gives you additional rights, those rights are unaffected.
8. Retention
| Data | Retention |
|---|---|
| Account data | Until you delete your account |
| Booking records | Up to 24 months after the appointment, then deleted or anonymised |
| Location | Used at the moment of the request; not stored as a history |
| Salon listing content | Until removed by the salon or the listing is closed |
| Subscription and transaction records | Up to 7 years, as required by UK tax and accounting law |
| Push notification tokens | Until you disable notifications or delete your account |
| Analytics and crash data | Per Firebase defaults, up to 14 months |
9. Your rights
If you are in the UK or EEA, you have the right to access your data; to have inaccurate data corrected; to erasure; to restrict or object to processing; to data portability; and to withdraw consent at any time. You also have the right not to be subject to solely automated decisions producing legal or similarly significant effects — we do not make such decisions.
Exercise these rights in the App (Settings → Account) or by emailing support@adease.io. We respond within one month. You may complain to the Information Commissioner's Office (https://ico.org.uk, 0303 123 1113) or to your local supervisory authority. We extend the same request process to users outside the UK and EEA.
California residents. You may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and are entitled not to receive discriminatory treatment for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
10. Deleting your account
You can delete your account from within the App. Deletion removes your profile, your booking history in BookBara, and any listing content you published, except records we are required to retain by law (for example, subscription transaction records). Deleting your account does not cancel an active subscription — cancel that through the App Store or Google Play. It also does not remove details a salon has already recorded in its own systems; contact the salon for that.
11. Children
BookBara is not directed at children under 16, and we do not knowingly collect personal data from them. Where local law sets a different age of digital consent, that age applies. If you believe a child has provided us with personal data, email support@adease.io and we will delete it.
12. Security
We use TLS in transit and encryption at rest, Firebase Authentication for identity, database security rules restricting each account to its own data, and least-privilege access controls for staff. No system is perfectly secure; where a breach is likely to result in a risk to your rights, we will notify the ICO and, where required, you.
13. Permissions the App requests
Location — to sort salons by distance and centre the map. Camera and photo library — so you can set a profile photo, and so salons can upload listing images. Notifications — so we can tell you about booking requests, confirmations, and reminders. Network access — required for the App to function. All are optional, and the App will ask before using them.
14. Changes to this policy
We may update this policy. The current version is always at https://adease.io/bookbara_privacy, with the date at the top. Material changes will be notified in the App or by email.
15. Contact
Adease LTD
124 City Road, London, EC1V 2NX, United Kingdom
Registered in England and Wales, company number 14743980
Email: support@adease.io