arrow_back

PRIVACY POLICY

YOUR DATA.
OUR COMMITMENT.

We design with intent, code with precision, and protect with absolute certainty.

01

Introduction

NORA operates as a booking platform that connects customers with barbers, salons, beauty professionals, nail services, and grooming service providers. This Privacy Policy explains how we collect, use, protect, and manage personal data for customers and service providers who use the NORA app and related services.

02

Data We Collect

person

For Customers

  • arrow_rightFull name
  • arrow_rightPhone number
  • arrow_rightEmail address
  • arrow_rightProfile information
  • arrow_rightBooking history and appointment details
  • arrow_rightLocation data when location permission is enabled
  • arrow_rightProfile photo, if uploaded
  • arrow_rightDevice identifiers and notification tokens for app functionality, security, and notifications
badge

For Service Providers

  • arrow_rightBusiness or provider name
  • arrow_rightContact number
  • arrow_rightEmail address
  • arrow_rightBusiness address and location
  • arrow_rightService details, prices, availability, and working hours
  • arrow_rightProfile images, business images, and service images
  • arrow_rightBooking and appointment records
  • arrow_rightDevice identifiers and notification tokens for app functionality, security, and notifications
03

How We Use Data

NORA uses collected data to provide and improve the app’s core booking features, including:

  • arrow_rightCreating and managing user accounts
  • arrow_rightVerifying users through phone OTP, email/password, or Google Sign-In
  • arrow_rightShowing customers nearby barbers, salons, and beauty service providers
  • arrow_rightDisplaying business locations on the map
  • arrow_rightCreating, confirming, accepting, rejecting, or managing bookings
  • arrow_rightSending booking updates, reminders, and notifications
  • arrow_rightHelping service providers manage schedules, services, and appointments
  • arrow_rightImproving app performance, reliability, and security
  • arrow_rightPreventing fraud, abuse, unauthorized access, and technical issues

We do not sell users’ personal data to third-party marketing companies.

04

Data Sharing

NORA does not sell personal data.

We may share limited data only when necessary to operate the app, such as:

  • arrow_rightWith Firebase and Google services used for authentication, database, cloud storage, notifications, analytics, crash reporting, App Check, and security
  • arrow_rightBetween customers and service providers when required for booking management, such as appointment details and contact information needed to complete the booking
  • arrow_rightWith legal authorities if required by law, court order, or to protect the safety, rights, and security of users or the platform

We do not share personal data with third-party advertisers for selling user information.

05

User Rights

Account & Data Deletion

Users may request deletion of their NORA account and associated personal data. When an account deletion request is approved, we may delete or anonymize:

  • arrow_rightProfile information
  • arrow_rightPhone number and email address
  • arrow_rightProfile images
  • arrow_rightSaved preferences
  • arrow_rightCustomer account data
  • arrow_rightService provider account data, where applicable

Some records may be retained for a limited period when necessary for legal, security, fraud prevention, dispute resolution, or business record purposes. This may include booking history, transaction-related records, security logs, or records required to protect users and the platform.

Users may also request deletion of specific personal data without deleting their entire account by contacting NORA through the deletion request form or support contact.

Submit Deletion Request
06

Security Measures

NORA uses reasonable technical and organizational measures to help protect user data. Data is transmitted over secure connections, and access to user data is restricted through authentication, Firebase Security Rules, App Check, and role-based permissions where applicable.

However, no digital platform can guarantee complete security. Users are responsible for keeping their login credentials and devices secure.