Privacy Policy

1) Who we are & scope

Aranax is the provider and data controller/data fiduciary for personal data processed via Gloziia. This Policy applies to all users of the App, including salon partners, staff, and customers.

2) What we collect

We collect information in the following categories:

• Account & Identity Data: name, profile photo, mobile number, email address, password/credentials, gender (optional), date of birth (optional).
• Contact & Address Data: billing/ shipping address, saved locations.
• Booking & Transaction Data:service selections, appointment date/time, salon/staff chosen, order history, payment status, refunds, vouchers/coupons, and communication logs related to orders.
• Payment Data: payment method, partial card details tokenised by the payment gateway, UPI ID or wallet references. We do not store full card numbers, CVV, or net-banking credentials. These are processed by PCI-DSS-compliant payment providers.
• Device & Usage Data: device identifiers (e.g., mobile ad ID), OS/version, app version, IP address, crash logs, diagnostic and performance data, and in-App actions for analytics and fraud prevention.
• Location & Permission Data (with your consent): precise or approximate location for nearby salon discovery and navigation; camera/photos for profile image, invoice uploads, review photos; microphone if you use voice features; push-notification tokens.
• Marketing & Support Data:feedback, ratings/reviews, contest entries, survey responses, support tickets, and preferences.
• Photos for marketing: if you expressly submit photos/content for promotional use, we process them as described in Section 9.

3) How we use your information

We process personal data to: (a) create and manage accounts; (b) deliver core features such as search, booking, reminders, in-App chat/notifications, invoices; (c) process payments/refunds; (d) personalize the App; (e) communicate with you about bookings, policy updates, and, where permitted, marketing; (f) analyze and improve performance; (g) comply with law, enforce our Terms, and protect users and our rights.

Legal bases

Where required by law (e.g., the Digital Personal Data Protection Act, 2023 ("DPDP Act")), we rely on your consent for certain purposes (e.g., marketing, location, push notifications, and processing of children's data), and on other legal bases such as performance of a contract, compliance with legal obligations, and legitimate interests (e.g., service improvement and fraud prevention).

4) Cookies, SDKs & similar technologies

Mobile apps do not use "cookies" in the web sense, but we use software development kits (SDKs), local storage, and similar technologies for authentication, preferences, analytics, advertising (where permitted), and security. You can manage some permissions in your device settings and reset your device's advertising ID.

5) Communications

• Transactional: We send booking confirmations, reminders, critical service alerts, and policy updates. These are essential for your use of the App.
• Marketing: With your consent (where required), we may send offers, newsletters, and promotions by push, SMS, email, or in-App messages. You can opt out at any time via in-App settings or the unsubscribe instructions provided.
• Referrals: If you use referral features, we may send messages to the contacts you nominate. Please ensure you have their permission.

6) Eligibility & children's privacy

You must be at least 18 years old to create an account and use paid Services. Use by anyone under 18 is strictly prohibited. We do not knowingly engage in targeted advertising to children or knowingly collect personal data from children without required consent.

7) Your controls & choices

• Access & correction: View and edit your profile and certain data in the App (e.g., "My Account").
• Consent management: Grant or withdraw consent for optional processing (e.g., marketing, location) in settings or by contacting us.
• Deletion: Request account closure and deletion of personal data, subject to legal/operational retention requirements.
• Opt-out of marketing: Use in-App controls or the unsubscribe link in emails/SMS.
• Permissions: Control device-level permissions (location, camera, notifications) in your OS settings.

To exercise rights, contact the office listed in Section 18.

8) Sharing & disclosures

We do not sell your personal data. We may share information as follows:

• Service Providers/Processors: cloud hosting, analytics, payment gateways, SMS/email providers, customer support tools, fraud prevention, and operational vendors who process data under contracts and only as instructed by Aranax.
• Salon Partners: limited data required to fulfil your booking (e.g., name, contact, service, time, notes).
• Payment Recipients: for transaction fulfilment, dispute handling, refunds, and fraud checks (e.g., partial identifiers, name, contact, and order details).
• Legal & Safety: to comply with law, lawful requests, court orders, or to protect rights, safety, and security of users, partners, the public, or Aranax.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets; your information may be transferred as part of the transaction, subject to this Policy.

9) Photos and user content for marketing

• If you explicitly submit photos, reviews, or stories for marketing/promotion (e.g., contests, testimonials), you grant Aranax a worldwide, royalty-free license to use, reproduce, adapt, publish, and display that content in App/website/social media and promotional materials.
• You may withdraw this license for future use by contacting us. Withdrawal will not require us to remove or recall materials already printed, published, or legally committed.

10) Advertising & analytics

We may use analytics and advertising partners to measure performance and, where permitted, show contextual or interest-based promotions. Controls include device ad-ID settings, in-App preferences, and partner opt-outs where available. We do not permit behavioral advertising to children.

11) Data security

We implement administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit, access controls, logging, and regular security reviews. Despite our efforts, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please keep your login credentials confidential and notify us promptly of any suspected unauthorized access.

12) Data retention

We retain personal data only as long as necessary for the purposes described in this Policy, including legal, accounting, or reporting requirements, dispute resolution, and fraud prevention. After retention periods expire, we will delete or irreversibly anonymize the data.

13) International transfers

If we transfer personal data outside India, we do so in accordance with applicable law and with appropriate safeguards (e.g., contractual protections). By using the App, you understand that your data may be processed in countries that may have different data protection standards.

14) Third-party links & services

The App may link to third-party websites/apps whose privacy practices are independent of ours. Please review their policies. We are not responsible for their content or practices.

15) User responsibilities & acceptable use (privacy-relevant)

You agree not to misuse personal data accessed through the App (e.g., of salons, staff, or other users), not to attempt unauthorized access, and not to upload content that violates privacy, publicity, or IP rights.

16) Changes to this Policy

We may update this Policy from time to time. Material changes will be notified via the App, email, or other reasonable means. The "Last updated" date reflects the latest revision. Continued use of the App after changes means you accept the updated Policy.

17) Governing law & disputes

This Policy is governed by the laws of India, including the Information Technology Act, 2000, applicable rules, and the DPDP Act, 2023 (as notified/implemented). Any disputes are subject to the dispute-resolution terms in our Terms of Use.

18) Contact & grievance redressal

If you have questions, requests, or complaints (including withdrawal of consent, access, correction, or deletion requests), please contact our office: