Privacy Policy

Effective 11 August 2026

Zaplon is a salon booking platform operating in Pakistan. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and how you can get it deleted.

It covers two mobile applications:

• Zaplon — the customer app, used to find and book salons.
• Zaplon Owner — the salon app, used by salon owners to manage their listing, bookings and earnings.

Where the two differ, the section says so. “We”, “us” and “Zaplon” mean the operator of these apps and of zaplon.pk.

1. What the customer app collects

Account and identity

• Mobile number — this is how you sign in. We send a one-time passcode (OTP) to it. Required.
• Name — shown to a salon when you book. Required to finish setup.
• Gender — required to finish setup, and “Prefer not to say” is one of the choices. Used to recommend relevant services, since salons in Pakistan are commonly men’s, women’s or unisex. Not shown to salons, and never used for advertising.
• Age group — required to finish setup, again with a “Prefer not to say” option. We store a broad range such as 25–34, never your date of birth or exact age. Used only to understand which services different age groups book. Not shown to salons.
• Profile photo — optional, and only if you choose one from your camera or gallery.

Gender and age group can both be changed at any time from the Profile tab, including back to “Prefer not to say”. Both are erased when you delete your account.

Location

If you grant permission, the app takes a single location reading to sort salons by distance and estimate travel time. We store only the latest coordinates and the time they were taken — there is no location history, no reverse-geocoding to a street address, and no background or continuous location tracking of any kind. The app only ever asks for location while you are using it. You can refuse, and everything except distance sorting still works.

Bookings and activity

• Your bookings — salon, service, staff, date, time and status.
• Reviews and ratings you write. These are public: your first name (not your full name, never your number) is shown next to them.
• Reports you file against someone else's review — the reason you picked and any note you added.
• Salons you bookmark.
• Your preferred travel mode (walk, bike, or car).

Referral wallet

If you refer a salon to Zaplon, we keep your referral code, your credit balance, and a ledger of every credit and redemption — including which salon a credit was redeemed at and when. This is a financial record; see the retention table below for how long it is kept.

Notifications

If you allow notifications, we store a push token issued by Expo and Google for your specific device install, plus your on/off preference. The token identifies a device, not a person, and is deleted when you turn notifications off, uninstall, or delete your account.

Support messages and diagnostics

When you send feedback through the app we receive your message, the category you picked, and optionally an email address if you supply one. We also automatically attach two technical details to help us reproduce problems: the app version and your operating system version and device model (for example “android 14 — SM-A536E”). Nothing else about your device is read.

2. What the salon-owner app collects

The owner app collects everything in section 1 that applies to your own account — mobile number, name, notification token, feedback and diagnostics — and in addition:

Business information

• Salon name, description, address, city, map coordinates and contact number.
• Photos of the salon that you upload.
• Opening days and hours, and the clientele you serve.
• Your service menu and prices.
• Staff records — the names of staff you add and which services each performs. Please only enter staff details you are permitted to share.

Customer details you enter yourself

The owner app lets you record walk-in customers and manual bookings for people who are not Zaplon users. When you do this you enter that person's name, and optionally their phone number, and it is stored on our servers.

For this data you are responsible for telling that person their details are being recorded and for having a lawful reason to enter them. Zaplon processes it on your instruction, uses it only to run your queue and booking list, and never markets to those people. If someone asks you to remove their details, email us and we will delete them.

Earnings and settlement

• Bookings taken at your salon, including the first name and phone number of the Zaplon customer who booked, so you can contact them about their appointment.
• Your commission rate, weekly commission bills, payments recorded against them, and any adjustments.
• Your salon code, and — if another user referred you — which referral code was used at signup.
• Records of any suspension of your listing and the reason for it.

We do not collect bank account numbers, card details or CNIC numbers in either app. Commission is settled in cash, in person, and only the amount and date are recorded.

3. Payments

Neither app takes payments. You pay the salon directly for your appointment. There is no card processor, no mobile wallet integration and no in-app purchase in either app, so no payment credentials of any kind reach us.

4. Why we use your data

• To sign you in and keep your account secure.
• To take, show, change and cancel bookings.
• To show salons near you and estimate travel time.
• To send you booking confirmations, reminders and status updates.
• To calculate referral credit and — for salons — weekly commission.
• To investigate reported reviews, disputes, no-shows and fraud, and to suspend accounts that abuse the platform.
• To answer your support messages and fix bugs you report.

We do not sell your data. We do not share it with advertisers, we do not use it to build advertising profiles, and neither app contains any advertising, analytics or third-party tracking SDK.

5. Who else handles your data

We use a small number of service providers to run Zaplon. They process data only on our instructions, for the purposes below.

These providers store data on servers outside Pakistan. We also disclose data where the law requires it, and to a salon you have booked with — a salon only ever sees the bookings made at that salon.

6. How long we keep it

7. Deleting your account

Customer app — in the app

Open Profile, scroll to the Account section, and tap Delete my account. You will be asked to confirm. It takes effect immediately and cannot be undone.

When you confirm, we:

• erase your mobile number, name, email, profile photo, gender, age group, location and push token;
• cancel any upcoming bookings and notify those salons;
• zero any referral credit — an unspent balance is forfeited, so redeem it first if you want it;
• delete your saved salons;
• detach your reviews from your identity;
• sign you out and invalidate your login on our servers.

Your mobile number is released, so you can sign up again later as a new user. Nothing from the old account carries over.

Salon-owner app — in the app

Open Profile, scroll to the Account section, and tap Delete Account. You will be asked to confirm. It takes effect immediately and cannot be undone.

Deleting a salon account disposes of two different things, and they are treated differently. Your personal data is erased. Your salon is closed rather than erased, because its booking history belongs to the customers who booked it and to records we are required to keep.

When you confirm, we:

• erase your name, mobile number, email, profile photo, location and push token, and the contact number shown on your salon listing;
• remove your salon from the customer app immediately — it disappears from search, can no longer be booked, and drops out of the saved lists of customers who bookmarked it;
• stop all future commission billing for the salon;
• mark any unpaid commission bill as forfeited — it is written off as uncollectible, and kept rather than deleted so our own records stay accurate;
• keep the salon's past bookings, reviews, commission bills and payment records, no longer linked to you by name or number;
• sign you out and invalidate your login on our servers.

You cannot delete your account while your salon still has upcoming bookings. Cancel them in the app first, or wait for them to be served. This exists so no customer is left holding a reservation at a salon that has disappeared from the app.

Your mobile number is released, so you can register again later as a new user — nothing from the old account or salon carries over. If you cannot sign in, email support@zaplon.pk from the address or number on the account instead and we will close it for you within 30 days.

8. Your rights

• Access — ask for a copy of the personal data we hold about you.
• Correction — your name, photo, gender and age group are editable in the app; email us for anything else.
• Deletion — as described in section 7.
• Withdraw consent — turn off location or notification permission in your phone's settings at any time. The apps keep working without either.
• Object or complain — write to us and we will respond.

Email support@zaplon.pk for any of these. We answer within 30 days.

9. Security

Traffic between the apps and our servers is encrypted with HTTPS. Your login token is held in your device's secure keystore. We never store a password for customer or salon accounts — sign-in is by one-time passcode. Sign-in attempts are rate limited. No system is perfectly secure, but if a breach affects you we will tell you.

10. Children

Zaplon is not intended for under-18s and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

11. Changes to this policy

If we change this policy we will update the effective date at the top and, for anything material, notify you in the app. Continuing to use Zaplon after a change means you accept the updated policy.

12. Contact

Questions, requests or complaints: support@zaplon.pk

Effective 11 August 2026. Supersedes the policy dated 6 August 2026.