1. Who is responsible
Vlossom Protocol ("Vlossom", "we", "us") operates the service and is responsible for the personal information described here. Privacy questions and data-subject requests can be sent to privacy@vlossom.app.
2. Information we collect
- Account data: name, email address, phone number, profile photo, roles, and authentication records.
- Marketplace data: bookings, services, availability, reviews, messages, favourites, disputes, and support requests.
- Payment and wallet data: wallet address, transaction references, balances, payment status, and fiat-ramp records. We do not store full bank-card details; approved payment providers process those details.
- Hair profile data: information and photos you choose to add to hair-health and service records.
- Location data: approximate or precise foreground location when you choose nearby search, plus addresses and appointment locations you provide.
- Device and usage data: app version, device type, operating system, language, timezone, crash diagnostics, security signals, and product events.
- Safety data: blocked accounts, reports, moderation decisions, and evidence supplied to protect users and the marketplace.
3. How we use information
We use information to provide and secure accounts; match customers, stylists, and spaces; manage bookings and payments; deliver messages and notifications; prevent fraud and abuse; respond to support; improve product reliability; comply with law; and establish or defend legal claims.
4. Legal grounds
Depending on the activity and applicable law, we process information to perform our contract with you, with your consent, to comply with legal obligations, and for legitimate interests such as platform security, service improvement, fraud prevention, and dispute resolution. You may withdraw consent where processing relies on consent.
5. When information is shared
We share only what is necessary with the customer, stylist, or property owner involved in a service; infrastructure, communications, maps, analytics, error-monitoring, identity, payment, and compliance providers acting for us; professional advisers; and authorities where legally required. We do not sell personal information or use it for third-party behavioural advertising.
6. International processing
Some service providers may process information outside South Africa. Where required, we use contractual and organisational safeguards intended to provide an appropriate level of protection.
7. Retention
We keep personal information only as long as needed for the purposes above. Account data is retained while an account is active. After deletion, we remove or de-identify account information unless a limited record must be retained for fraud prevention, payment reconciliation, tax, legal, safety, or dispute obligations. Backups expire on a controlled schedule.
8. Your choices and rights
You can update profile and notification settings in the app. You may request access, correction, export, objection, restriction, or deletion where applicable. Authenticated users can export or delete their account under Settings > Privacy. See the public account deletion guide if you cannot access the app.
9. Security
We use access controls, encryption in transit and at rest, rate limits, security logging, secret management, and tested account-revocation controls. No system is completely secure; contact us immediately if you believe your account has been compromised.
10. Children
Vlossom is not directed to children under 18 and they may not create an account. Contact us if you believe a child has provided personal information.
11. Changes and complaints
We may update this policy and will publish the effective date. Contact privacy@vlossom.app first so we can investigate. You may also complain to the South African Information Regulator or another competent privacy authority.