Privacy Policy

Effective: 11 July 2026

Who we are

Hayrli is a marketplace for booking barbers and beauty professionals. The service is developed by Flek LLC (referred to below as "we", "us", "our"). Hayrli Pro is a separate app for professionals — managing schedules, clients and portfolios. This policy explains how we collect, use and protect your data when you use either app or the website hayrli.app.

What data we collect

When you register and use the service, we may collect the following information:

  • Phone number — for sign-in and SMS verification.
  • First and last name — for your profile and bookings.
  • City — so we can show you nearby professionals.
  • Profile photo and portfolio images (for professionals) — uploaded voluntarily.
  • Booking history — date, professional, service, visit status.
  • Reviews — the text and rating you leave for professionals.
  • Selfie (AI Stylist feature only) — sent to an AI provider for style analysis, cached for up to 24 hours then deleted.
  • FCM token — required to send you push notifications about bookings and reminders.

We do not collect bank card details. Online payments will be supported in a future version through certified payment providers.

Why we collect data and how we use it

We use your data only to operate the service:

  • Processing and managing bookings — you see your calendar, the professional sees the booking in theirs.
  • Push notifications about upcoming visits, reminders and system messages.
  • Publishing reviews under your name — you consent to this when you submit a review.
  • Processing AI Stylist requests — your selfie and request are sent to an AI provider to generate style recommendations.
  • Security and fraud prevention — detecting suspicious activity.

Who we share data with

We do not sell your data. We share it only with parties the service cannot work without:

  • GitHub Models (OpenAI GPT-4o) — for AI features: selfie style analysis, post caption generation. Data is not retained by the provider per their policy.
  • Groq (Whisper Large v3) — for voice search recognition. Audio is not retained.
  • Anthropic Claude — for AI-generated replies and recommendations inside Hayrli Pro. Data is not retained.
  • Firebase (Google) — for delivering push notifications and analytics.

We do not share data with advertising networks. The iOS Advertising Identifier (IDFA) is not collected.

How we store and protect data

Data is stored on servers in a secured environment. All traffic is encrypted using TLS 1.2+. The database is encrypted at rest. JWT access tokens expire in 60 minutes; refresh tokens expire in 30 days. We regularly audit access controls and patch vulnerabilities. In the event of a data breach we will notify affected users within 72 hours.

Your rights

You have the right to:

  • Request a copy of your data — email us at support@hayrli.app.
  • Delete your account and all data — via the app settings or on request. Deletion is carried out within 30 days.
  • Receive an export of your data in a machine-readable format.
  • Withdraw your consent to data processing — in which case access to the service will end.

Deletion is available directly in the app under Settings → Delete account, or via the API endpoint DELETE /users/me.

How to contact us

For privacy questions, reach us at:

Changes to this policy

If we make significant changes, we will notify you through the app at least 14 days before the changes take effect. Continuing to use the service means you accept the updated policy.