BonitraWho we are
Bonitra is a business platform for salons and beauty suppliers. This policy covers the following apps and the services behind them (together, "Bonitra", "we", "us"):
- Bonitra: the salon app. Salon clients use it to book appointments, manage visits and collect loyalty rewards. Salon staff use it to clock in and out and to see their appointments, timesheets, leave, salary and advances.
- Bonitra Store: the shopping app customers use to order products from a supplier, with cash on delivery.
- Bonitra Vendors: the app suppliers use to run their store, including products, orders, stock and their team.
- The Bonitra web dashboards and the Bonitra API that power these apps.
Businesses and Bonitra. Salons and suppliers ("Businesses") use Bonitra to serve their own clients, customers and staff. Your account in these apps is usually created by the Business you deal with. That Business decides what information it records about you, such as your bookings, orders or employment records, and is responsible for it. Bonitra processes that information on the Business's behalf to provide the service. Where we decide how information is used, for example to secure the platform, we are responsible for it.
Summary
No ads, no tracking
The apps contain no advertising or analytics SDKs. We do not track you across other companies' apps or websites.
We never sell data
We do not sell or rent personal information, and we do not use it for advertising.
No card numbers
Bonitra Store orders are paid in cash on delivery. The apps do not collect payment card details.
You stay in control
Location, photos and notifications are optional. You can request deletion of your account at any time.
Information we collect
Information you or your Business provide
| Category | Examples | Apps |
|---|---|---|
| Account details | Name, phone number, email address, password (stored only as a secure hash) | All apps |
| Profile | Profile photo, and optionally date of birth and gender | All apps (date of birth and gender: Bonitra, client accounts) |
| Bookings | Services booked, chosen specialist, date and time, notes you add for the salon, booking history, reschedules and cancellations | Bonitra |
| Loyalty and offers | Points balance, tier, points history, promo codes used, referral code and referrals | Bonitra |
| Orders and delivery | Products ordered, order history, delivery addresses, delivery slot, returns | Bonitra Store, Bonitra Vendors |
| Staff and employment records | Clock-in and clock-out times, breaks, attendance corrections, timesheets, leave requests and balances, salary slips, advances and their repayment | Bonitra, staff accounts |
| Business information | Business name and logo, products, prices, stock, banners, promotions, team members and their roles | Bonitra Vendors |
| Support messages | What you tell us when you contact support | All apps |
Information collected automatically
- Notification token: if you allow notifications, the app registers a push token so we can send booking, order and account alerts.
- Technical and security data: device type, operating system, app version, IP address, request times and error details. Our servers record these to keep the service secure, prevent abuse and fix problems.
- Precise location (Bonitra Store only, optional): only when you tap to use your current location to pin a delivery address. It is used while the app is open and is never collected in the background.
What we do not collect
We do not access your contacts, microphone, health data or browsing history, and we do not collect location in the background or payment card numbers.
How we use information
- To provide the apps: sign you in, show your bookings, orders, loyalty and staff records, and let you make changes.
- To connect you with your Business so it can confirm, prepare and fulfil your booking or order, and manage its team.
- To send service messages such as booking confirmations, reminders and changes, order updates and password help. These come by push notification, email or WhatsApp, depending on your settings and the Business's setup.
- To run loyalty programmes, promotions and referrals offered by your Business.
- To calculate attendance, timesheets, leave and pay for staff of a Business.
- To keep the platform secure, detect and prevent fraud and abuse, and troubleshoot errors.
- To meet legal, tax and accounting obligations.
Where the law requires a legal basis, we rely on performance of a contract (providing the service you or your Business signed up for), our legitimate interests (security and improving reliability), legal obligations, and your consent (for example notifications, location and photos), which you can withdraw at any time.
Device permissions
| Permission | Why it is used | If you decline |
|---|---|---|
| Notifications | Booking, order, shift and account alerts | The app works normally without alerts |
| Photos (and camera, if you choose it) | Choosing a profile picture, a business logo or product images | You can keep using the app without a photo |
| Location while using the app (Bonitra Store) | Pinning a delivery address on the map | You can type your address instead |
You can change these permissions at any time in your device settings.
How long we keep information
- We keep account information while your account is active.
- When an account is deleted, we delete or anonymise its personal information within 30 days. The exceptions are records a Business or Bonitra must keep by law, such as invoices, tax records and payroll, which are kept only for as long as that law requires.
- Security and error logs are kept for a short period, currently about 31 days, unless they are needed to investigate an incident.
- Backups are overwritten on a rolling schedule.
Security
We protect information with encryption in transit (HTTPS), passwords stored only as salted hashes, role-based access controls for Businesses and staff, and secure on-device storage for sign-in tokens. No system is perfectly secure. If we learn of a breach that affects you, we will notify you and the relevant authorities as the law requires.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, and to object to or restrict certain processing.
- Correct your details: update your name, email and photo in the app's profile screen.
- Notifications: turn them off in the app's settings or in your device settings.
- Access, export or delete: email us at support@bonitra.app. If your request is about records a Business keeps about you, we may forward it to that Business.
We respond within 30 days. We may need to verify your identity first, for example by confirming a code sent to your registered phone number or email.
Deleting your account
You can ask us to delete your account and associated data at any time. The steps, and what is kept for legal reasons, are on our account deletion page.
Children
The Bonitra apps are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
International transfers
Our service providers may process information in countries other than yours, including the European Union and the United States. Where required, we use appropriate safeguards, such as contractual protections, for these transfers.
Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above, and if the changes are significant we will tell you in the app or by email before they take effect.
Contact us
Bonitra
Baghdad, Iraq
Email: support@bonitra.app