Privacy Policy

Last updated: 9 October 2026

This privacy policy describes the manner in which TrimSpot (hereinafter: "the app" or "the service") uses information provided by you in the course of your use of the service, or collected in the course of your use of it.

Your privacy is important to us, and we wish to be transparent regarding the manner in which we use the information you provide to us.

Disclosure — Google

TrimSpot's use and transfer of information received from the Google Calendar API comply with the Google API Services User Data Policy, including the Limited Use requirements (Google API Services User Data Policy).

Connecting a Google calendar is entirely voluntary and is relevant to holders of a barber account only. All the other features of the service operate in full without it as well.

• From the calendar we store and use availability data only — start and end times. Google's response also includes the details of the events themselves, but titles, descriptions and attendee lists are not stored in our systems, are not displayed to anyone and are not used for any purpose. In our database, only a date, a start time and an end time are stored for each event.
• In the opposite direction: an appointment booked through TrimSpot with a barber who has connected a calendar is written to that barber's Google calendar, and the event shows the appointment time, the name of the service and the client's username. That is, if the barber with whom you booked an appointment has connected a Google calendar — the details of your appointment reach Google as a result of that barber's own choice.
• We do not transfer information received from Google Calendar to any third party, and we do not use it for advertising, for profiling, for sale or for training models.
• The calendar access tokens are stored encrypted (AES-256-GCM).
• The connection can be disconnected at any time from the account settings in the app, and also through your Google account. Disconnecting deletes the access tokens from our systems.

Provision of details and personal information

In order to use the app, you must register. Booking an appointment, messages, the personal feed, stories, following users, likes and writing comments require an account, as does viewing the lists of followers and following and the list of those who have liked.

However, not all the content in the service is closed to those who are not registered. What businesses publish is also served to those who have no account: the list of businesses and the map, the business profile (the name of the business and the name of its owner, address and location on the map, opening hours and available times, services and prices, and photos), and the posts that the business publishes. This content is to be regarded as public content. A comment you have written on such a post is displayed alongside it, together with your username and your profile picture, to registered users only; a person who is not registered sees the post but not the comments.

Signing in to the service is done in one of three ways: a one-time code sent to your e-mail address, Continue with Google, or Continue with Apple (in the app for iPhone, and on the website when the option is enabled on it).

In order to register you will have to provide an e-mail address and a username; without these two an account cannot be opened. A phone number is requested in the registration form, and the form marks it as a mandatory field, so that the barber with whom you book an appointment has a way of contacting you; the system itself does not make the existence of the account conditional on it. The other profile details — first and last name, profile picture and personal description — are optional, and registration can be completed without them.

You are not required by law to provide the details, and doing so depends on your will and your consent. However, incorrect details, or failure to provide all the required details, may prevent you from using some of the features of the service and impair the ability to contact you if necessary.

The information we collect

• Account details: e-mail, username, first and last name, phone number, profile picture, personal description, interface language and password — which is stored hashed only and cannot be recovered. If you registered by means of Continue with Google, the permanent identifier that Google provided to us for the account is also stored, so that you can sign in even if you change your e-mail address. If you registered or signed in by means of Continue with Apple, we receive from Apple a permanent identifier of the account and an e-mail address — which may be a private relay address that Apple created for you in place of your real address — and, on the first authorisation only, also your name, which is used to pre-fill the registration form. The identifier and the address are stored in your account. An Apple token is also stored, encrypted, the sole purpose of which is to enable us to revoke the link with Apple when the account is deleted.
• Preferences you provided in the onboarding questionnaire (for holders of a client account): haircut frequency, preferred styles, price range and locality. These are used to tailor the results displayed to you, and are not disclosed to anyone.
• Business details for holders of a barber account: the name of the business, its address and coordinates derived from it, opening hours, the list of services and their prices, photos and a portfolio.
• External calendar, to the extent that a barber has chosen to connect one: the calendar feed address (ICS) the barber provided, and the start and end times of busy events in it. Here too, event titles are not stored.
• Activity in the service: appointments that were booked, cancelled or completed, reviews and ratings, waitlists, followers and following, likes, comments and stories, as well as barber–regular client relationships and the username through whose invitation link you registered, to the extent that you registered through such a link.
• Messages sent and received in the service between a barber and a client.
• IP address: recorded for the purpose of limiting the rate of registrations and preventing misuse, deleted automatically within 48 hours, and not associated with your account.
• Authentication and security data: sign-in attempts, one-time verification codes and sign-in tokens. These are kept for a limited time and are used for the prevention of misuse only.
• Push notification subscriptions, to the extent that you have approved the receipt of notifications: the notification identifier of the device or of the browser, and the type of operating system (Android or iOS). The identifier is deleted on signing out of the account, on turning notifications off from within the service, and also when the notification service reports to us that the device is no longer available — for example after the app has been removed.
• Availability data from Google Calendar, to the extent that you have chosen to connect a calendar.
• Reports and blocks that you made or that were made in respect of you, for community management purposes.
• Geographic location, subject to your approval — as detailed in the next chapter.

The service does not use cookies, and does not operate third-party measurement, usage analytics or advertising tools. In the local storage of the browser or the device are stored the sign-in token, the interface preferences (language, appearance and accessibility settings), the draft of the answers in the onboarding questionnaire for as long as it has not been completed, and a marker that your arrival at an appointment has already been reported. All of these remain on your device, are not disclosed to a third party, and can be deleted at any time from the settings of the browser or the device — an action that will sign you out of the account.

We do not collect or store details of means of payment.

Geographic location

The app requests access to the device's location for two separate purposes. The permission is of the "while using the app" (When In Use) type only — we do not collect location when the app is closed or running in the background.

A. Finding businesses near you

Upon registration, and subject to your approval, coordinates and your locality of residence are stored in your profile, in order to show you barbers in your area. At present there is no screen in the app that allows these data to be edited or deleted after registration. They are deleted when the account is deleted, and their deletion alone may be requested by contacting us by e-mail; if your location is not stored, the service continues to operate and the area is selected manually.

In addition, tapping "Use my location" on the search screen sends the current coordinates of the device to the server, as part of the search request, in order to filter and sort businesses by their distance from you. The coordinates are used for this calculation only, and are not stored in your account or in the database.

B. Verifying arrival at an appointment

In a time window close to the time of an appointment you have booked, the app checks whether you are within a range of about 120 metres of the business address. The purpose is to confirm to the business owner that you are on your way and will arrive on time, and to reduce unnecessary waiting and no-shows.

The location permission can be revoked at any time from the settings of the operating system. Revoking the permission will disable these features; the other features of the service will continue to operate as usual.

How we use the information

• Operating and maintaining the service — booking appointments, managing calendars and displaying business profiles.
• Operational communication — appointment confirmations, reminders, changes and cancellations, as well as notifications of activity concerning your account (followers, likes, comments, waitlist and messages).
• Identity verification and account security — verification codes and detection of unusual attempts.
• Calendar synchronisation — preventing the booking of an appointment at a busy time and recording the appointments in the barber's calendar.
• Finding businesses near you and verifying arrival — as detailed above.
• Identifying, preventing and handling technical problems.
• Tailoring the service to your preferences, including the interface language.
• Promoting safety and security, including automatic scanning of images that are uploaded and handling of reports and blocks.
• Protecting our legal rights, preventing fraud and enforcing the Terms of Use.

How we share information

We do not share information that identifies you with third parties, except in the following cases and to the extent required for the operation of the service:

• Other users — when you write a comment, like or follow a user, your username, your display name (your first name and last name, if you provided them; for a barber — the name of the business) and your profile picture are displayed alongside the action.
• Between a barber and a client — when an appointment is booked, your username, profile picture, phone number and the appointment details are disclosed to the business owner, for the purpose of providing the service. In the barber's client list the barber also sees your first name and last name, if you provided them; this list includes those who have booked an appointment with that barber and those who registered for the service through that barber's invitation link. Your e-mail address is not disclosed to the barber.
  A barber with whom you have booked an appointment also sees your attendance record with that barber: how many appointments you have booked with that barber and since when, how many of them took place, in how many of them you confirmed arrival, how many you cancelled, how many of the cancellations were made at short notice (within the cancellation window set by the barber) and how many you did not attend, as well as how many reviews you have written in the service. The count concerns appointments with that barber only — the barber does not see how you behaved with other barbers — and it is presented as numbers, not as a score. Your own record, which summarises all your appointments in the service, you can see for yourself on the Profile screen.
  In addition, a barber can write, for the barber's own use, private notes about a client. These notes are visible to that barber only and are not displayed to you.
• Infrastructure providers — the server hosting provider, and Google's outgoing mail service (Gmail), through which the sign-in codes and the e-mail messages from the service are sent.
• Google, in relation to accounts that have chosen to connect a calendar, and to the extent detailed in the Disclosure chapter above — including the writing of appointments to the barber's calendar, which includes the client's username.
• Firebase Cloud Messaging (a Google service) — when you have approved push notifications, the notification itself is sent through Google's servers to your device. The notification identifier of the device is transferred to them, as well as the title and body of the message, which may include a business name, a service name or a username. On iPhone devices the notification passes from Firebase to Apple's notification service (APNs), which delivers it to the device, and therefore the same details also reach Apple. Notifications in the browser are sent through the notification service of the browser you are using.
• Google and Apple, in relation to sign-in — if you have chosen to sign in by means of Google or Apple, your identity is verified with the company you chose, and it provides us with the details set out in the chapter "The information we collect". For an account that signed in by means of Apple, we also contact Apple when the account is deleted, in order to revoke the link.
• Address lookup services — a business address saved in the service is sent to the Nominatim service (of the OpenStreetMap Foundation) and the Photon service (of Komoot) in order to convert it into coordinates for the map. Only the address is sent, without a name, without contact details and without an account identifier.
• CARTO / OpenStreetMap — the map screen loads the map background from CARTO's servers. The request goes out from your device, and therefore your IP address and the area of the map you are viewing are disclosed to them. We do not send them any account details whatsoever, and we do not receive from them information about you.
• Google Cloud Vision — every image uploaded to the service is scanned automatically to detect offensive content before it is published: the image is sent to Google's Vision service, which returns a classification only. The scan is carried out after the EXIF data has been removed from the image, so that location data that was in it is not sent. The images are not kept by us for this purpose beyond their ordinary storage, and are not used to identify people.
  The scan applies to every image — a post, a story, a profile picture, a business photo and an image sent in chat. Videos are not scanned, nor is an especially large image (over 10MB), which is not sent for scanning.
  The result of the scan: an image classified with a high level of certainty as offensive is rejected and is not stored; an image whose classification is borderline, in a post or in a message, is published hidden and a report is opened on it, and a person on our behalf views it in order to decide whether to remove it or release it. For a profile picture, a business photo and a story there is nowhere to hold such an image, and it is therefore rejected.

Notwithstanding the foregoing, we may disclose information if we believe that this is required by law, or in order to enforce or protect our rights or the rights of the users, or to enforce this policy and the Terms of Use. In the event of a merger, an acquisition or a sale of assets, we may transfer the information to the receiving entity.

Disposal of information

A considerable part of the information can be deleted in the course of using the features built into the service. You may contact us with a request to delete information that identifies you, to the extent that it can be located in our systems. We may keep information for as long as there is a legitimate need, including for the purpose of complying with reporting and archiving obligations, and delete it or render it anonymous at our discretion at any time.

In practice, these are the retention periods that the system applies:

• Account deletion — the records and the files you uploaded are deleted immediately, at the time of the action. Full details on the Account deletion page.
• Database backups — kept for up to 15 days and deleted automatically. Information that has been deleted from the active database may remain in a backup until it is deleted in this cycle.
• One-time verification codes — valid for 10 minutes, stored hashed only and deleted within an hour of the time of their expiry.
• Records of sign-in and registration attempts (including the IP address) — deleted within 48 hours.
• Stories — deleted automatically, both they and the file, about 24 hours after publication.

Right of inspection and correction

You have the right to request to inspect and/or correct information collected about you, in accordance with the provisions of the law. We will correct information in accordance with a request received at the address steld410@gmail.com, within a reasonable time of its receipt.

Most of the profile details can be inspected and corrected directly in the app, under Settings → Edit profile. First name, last name and phone number can be changed there, but cannot be left empty — for that purpose, and for any broader request for inspection or deletion, contact us by e-mail.

Mailings and notifications

We do not send marketing or advertising messages. The notifications that the service sends concern your activity in it, and they are of two types:

• Notifications about appointments — an appointment request, its approval or rejection, a reminder before the appointment, a change of time, a delay in the barber's calendar, a cancellation, a notice to the barber that the client has arrived, and a request to rate the barber after an appointment that has been completed.
• Notifications about activity of other users that concerns you — a new follower, a like or a comment on your content, a new review received, a place that has become free on a day for which you registered on the waitlist, a new message in chat, and an invitation to join the team of a business (which is sent as a message in chat).

These are an integral part of the service and are not advertising mailings.

No consent to receive marketing mailings has been collected from you, and the service has no mechanism for removal from a mailing list — because there is no mailing list. If we wish in the future to send marketing content, we will request your consent for that purpose in advance, separately and expressly.

Push notifications are sent only if you have approved them. The permission can be revoked at any time from the settings of the browser or from the operating system on your device, and revoking it stops them being sent.

Storage and security of information

The information is kept in the service's database, which is hosted with a server hosting provider. As at the date on which this policy was updated, the database is hosted on servers located in Israel.

However, the service makes use of providers that operate outside Israel, and information reaches them to the extent set out in the chapter "How we share information":

• Google — sign-in by means of Google; push notifications (Firebase Cloud Messaging); scanning of the images uploaded to the service (Cloud Vision); sending of the sign-in codes and the e-mail messages (Gmail); and Google Calendar, for a barber who has chosen to connect it.
• Apple — sign-in by means of Apple, and delivery of push notifications to iPhone devices.
• CARTO — the map background; it receives your IP address and the area of the map you are viewing.
• Nominatim (of the OpenStreetMap Foundation) and Photon (of Komoot) — looking up the address of a business.

Your consent to this policy also constitutes consent to the storage of the information and its transfer outside the borders of Israel to the extent necessary, subject to the provisions of the law.

We implement the security mechanisms required by law. Among other things: the traffic to and from the service is encrypted (TLS); passwords are stored hashed and cannot be recovered; the access tokens to Google Calendar are stored encrypted (AES-256-GCM); location data (EXIF) is removed from every image before it is stored; and access to the database is restricted and controlled.

Files uploaded to the service (profile pictures, posts, stories and images sent in chat) are stored on the server and served from a long, random address, which cannot be guessed and does not appear anywhere outside the service. Anyone who has received from you the full address of a file can open it even without an account, as happens with any sharing of a link to an image.

It is clarified that absolute protection does not exist, and a malicious party may break into the system despite the measures that have been implemented. By the very use of the service you are aware of and consent to this limitation.

Changes to the policy

We may change the provisions of this policy from time to time. If material changes are made, a notice of this will be published in the app interface. The link placed in the service will always link to the current version. Your continued use after the publication of an updated policy indicates your consent to it.

Miscellaneous

Nothing in these provisions derogates from our rights to collect, use or disclose information under any law, and they are in addition to the provisions of any law.

Use of the service is restricted to persons aged 18 and over.