This policy covers three products: the Elpoir customer app, the Elpoir salon app used by salon owners and their staff, and elpoir.com. Where a practice applies to only one of them, it says so.

It is written to describe what the apps actually do — every permission listed below is one the apps request, and every category of data listed is one they store. If you are looking for a specific answer, the sections most people want are device permissions, chat and deleting your data.

1. Information You Give Us

Account and sign-in. You can create an account with a phone number (verified by SMS one-time password), a Google account, an Apple account, or an email address and password. We store your name, phone number, email address where you provide one, and which sign-in methods your account uses. We never receive or store your Google or Apple password.

Profile. A display name and, if you upload one, a profile photograph.

Address and location you enter. For home-service bookings and for salon listings we store the address in parts — line, city, state, PIN code — together with map coordinates so a salon can be found nearby and directions can be opened.

Bookings. The salon, the services or package chosen, staff member where you pick one, date and time, price, status, and any note you add. Walk-in and phone bookings entered by a salon are stored the same way.

Reviews and ratings. Your star rating, your written review, and the salon's reply. These are shown publicly next to the salon with your display name.

Messages. See section 4, which describes chat in full.

Salon and business information (salon app only). Business name, description, address, opening hours and holidays, photographs of the premises and of services, the service and package menu with prices, staff records, and business verification (KYC) documents where these are required before payouts can be enabled.

Support requests. What you write to us, so we can answer it.

2. Information Collected Automatically

Device and push token. To deliver notifications we store a Firebase Cloud Messaging token for your installation. It identifies the app installation, not you personally, and it changes when you reinstall.

Crash and stability reports. The apps use Firebase Crashlytics. When something crashes, we receive the technical details of the failure — device model, operating system version, and where in the code it happened. This is what tells us an app is broken for a group of users.

Configuration. The apps read Firebase Remote Config on launch to pick up settings such as the latest published version. This is a read; nothing about you is sent to it.

App activity. Points earned and spent, offers viewed and redeemed, and impressions of promoted placements, so that promoted listings can be counted and paid for correctly.

3. Device Permissions — What We Ask For and Why

Each permission below is requested at the moment the feature needs it, and each can be refused or revoked later in your device settings. Refusing one disables that feature and nothing else.

This is the complete list. Neither app asks for the microphone, and neither records audio or video.

Permission	When it is asked	What leaves your device
Location (precise and approximate)	When you search for salons near you, set a service address, or tap “Share location” in a chat. The salon app can also use location in the background while a job is being tracked.	Coordinates. For nearby search these are used to run the query. For a shared location, the coordinates are stored in that one message.
Contacts	Only when you tap “From my contacts” in a chat, to pick a number to send.	Nothing is uploaded when the list is read — the app reads names and phone numbers on the device only, and asks for no other field, so emails, addresses and birthdays are never read. Only the single contact you choose is sent, and only into that conversation.
Camera	When you take a photograph for a profile picture, a salon or service image, a KYC document, or a chat message.	The photograph you take.
Photo library	When you choose an existing image for any of the same purposes.	The image you choose. Images are resized before upload; the app does not browse or index your library.
Notifications	On first launch, to send booking confirmations, reminders, cancellations and chat messages.	Nothing. This permission only allows delivery.

4. Chat, and What Can Be Sent In It

The apps include one-to-one conversations — customer with salon, salon with staff, and either with Elpoir support. Chat is available once your phone number is verified.

Conversations and their messages are stored in our database so that both sides see the same history across devices, along with whether a message has been sent, delivered and read. A message can carry any of the following:

What you can send	What is stored	Who can see it
Text	The message text.	The two participants in that conversation.
An image	The image file, resized to at most 1600 pixels on its longest side and capped at 10 MB, stored under a path reserved for that conversation. The message carries a link to it.	The two participants. Access is restricted to accounts that are members of the conversation, and a message can only display an image hosted by us — it cannot be made to load an image from elsewhere.
A location	The coordinates you chose and an optional label. Tapping it opens your usual maps app.	The two participants.
A contact	A name and a phone number — either your own verified number or one you picked from your contacts.	The two participants. Sending someone else’s number shares their personal data; only do it if you have a reason to.

We do not use the content of your messages for advertising or profiling. We access message content only where we are required to by law, or where you report a conversation and we need to read it to act on your report.

5. Payments

Payments are processed by Razorpay. When you pay, the app opens Razorpay's checkout and passes it the amount, the currency, an order reference, and your name, phone number and email so you do not have to retype them.

Elpoir never receives or stores your card number, CVV, UPI PIN or bank credentials. Those are entered inside Razorpay's checkout and handled by Razorpay under its own privacy policy. What we store is the outcome: amount, status, timestamp and a payment reference, which is what appears in your booking history and in the salon's transaction records.

6. How We Use Your Information

To create and secure your account, and to verify your phone number.
To take, confirm, reschedule and cancel bookings, and to show both sides the same appointment.
To show salons near you and give directions to them.
To carry your messages between you and the salon, staff member or support agent you are talking to.
To take payment, issue receipts, and settle payouts to salons.
To send booking confirmations, reminders, cancellations and chat alerts — by push notification, and where you have given a number or address, by WhatsApp and email.
To operate points, offers and promoted placements.
To publish reviews and salon replies.
To verify a business before enabling payouts, and to meet tax and accounting obligations.
To find and fix crashes, and to answer support requests.

7. Who We Share It With

The salon you book with. A booking necessarily discloses your name, phone number, the services chosen, the time, and — for a home service — the address you gave. A salon sees this only for its own bookings.

Other users, where you choose. Reviews are public. Anything you send in a chat is visible to the person you sent it to.

Service providers who run parts of the product for us: Google (Firebase — authentication, database, file storage, notifications, crash reporting, and Cloud Functions), Razorpay (payments), and the providers that deliver our WhatsApp and email notifications. They may process your data only to provide those services to us.

Where the law requires it, or to establish, exercise or defend a legal claim, or to investigate fraud or a safety risk.

We do not sell your personal information, and we do not share it with advertising networks or data brokers.

8. Storage and Security

Data is held in Google Firebase projects operated for Elpoir. Access is enforced by security rules at the database and file-storage layer rather than by the app alone: a customer record is readable only by its owner, a salon's records only by that salon and its staff, and a conversation's messages and images only by the accounts in that conversation.

Transport is encrypted. Sign-in with Apple and Google is bound to a single-use value so that an identity token from one sign-in cannot be replayed into another. Deleting your account requires you to sign in again first, so that a device left unlocked cannot be used to delete it.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects you, we will notify you as required by law.

9. How Long We Keep It

Account and profile data is kept while your account exists. Bookings, reviews and messages are kept while they remain relevant to you or to the salon.

Records of completed transactions — amounts, dates, references and invoices — are retained after deletion where we are required to keep them for tax, accounting and anti-fraud purposes. Crash reports are retained on a rolling basis by Firebase Crashlytics.

10. Your Rights and Choices

Access and correction. Most of your data is editable in the app — profile, address, salon details, service menu. For anything else, write to us.
Deletion. Both apps delete accounts from inside the app. See the Account Deletion page for exactly what is removed and what is retained.
Permissions. Location, contacts, camera, photos and notifications can each be revoked in your device settings at any time.
Notifications. Push notifications can be turned off in your device settings.
Sign-in methods. You can add a phone number to an account created with Google or Apple, which is what lets you sign in on a device where that method is not available.

11. Children

The apps are not directed at children under 13, and we do not knowingly collect their data. A minor should use Elpoir only with a parent or guardian. If you believe a child has given us personal information, write to us and we will delete it.

12. Changes to This Policy

We will update this page when the apps change, and the effective date above will move. Where a change materially affects how we use your data, we will tell you in the app.

13. Contact Us

Elpoir Salon & Beauty Hub Private Limited
Email: support@elpoir.com

Privacy Policy