Privacy Policy — Ubtan Home Salon

 

Effective date: May 28, 2026
Last updated: May 28, 2026
Publisher: Ubtan Home Salon ("we", "us", "our")
App name: Ubtan Wellness
Contact / Grievance Officer: contact@ubtan.in

​

This Privacy Policy explains how Ubtan Home Salon collects, uses, shares, retains, and protects your personal data when you use the Ubtan Wellness mobile application and any related services (collectively, the "App"). By using the App, you agree to the practices described below. This policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.

​

1. What We Collect

We collect the following categories of personal data:

• Identity & contact data: name, mobile number, email address (optional), and a password (hashed using bcrypt; never stored in plain text).

• Service address & PIN code: required to deliver salon services at your home.

• Precise GPS location: captured only at three explicit moments — (a) when you tap "Confirm Booking" in the cart, (b) when our assigned service professional taps "Start" at your address, and (c) when our staff punch in for attendance at the start of their shift. The App does not access your location in the background and cannot read your location while it is closed.

• Booking, payment & invoice records: services booked, dates, prices, GST split (SGST/CGST), HSN/SAC codes, and invoices.

• Device information: operating system, app version, and crash diagnostics — used only to maintain quality of service.

We do not collect biometric data, financial account credentials, health data, or any sensitive personal information beyond what is listed above.

 

2. How We Use Your Data

• To process and fulfil your salon-at-home bookings.

• To assign the closest available service professional and compute travel ETA.

• To issue GST-compliant invoices and maintain books of account.

• To notify you of booking status, offers, and important account updates.

• To detect and prevent fraud, abuse, and unauthorised access.

• To respond to your service queries, complaints, and grievance-redressal requests.

 

3. Location Data — Disclosure

The App requests Android ACCESS_COARSE_LOCATION and ACCESS_FINE_LOCATION, and iOS NSLocationWhenInUseUsageDescription, but only uses the foreground (in-use) location. Location is not collected in the background, not used for advertising, and not sold to any third party. You may revoke location permission at any time from your device settings; doing so will prevent us from accurately assigning a service professional.

 

4. Sharing & Disclosure

We share personal data only:

• With our own employees and field staff, strictly to complete your booking.

• With payment processors that we engage to settle transactions.

• With tax authorities and GST/Income-Tax filings as legally required.

• With law-enforcement or judicial authorities upon receipt of a valid legal request.

We do not sell, rent, trade, or otherwise transfer your personal data to third parties for advertising or marketing purposes. We use no third-party advertising SDKs.

 

5. Data Retention

• Account and contact data are retained for as long as your account is active.

• Booking and invoice data are retained for 8 years to comply with India's GST and Income-Tax record-keeping requirements.

• When you delete your account (see Section 7), we anonymise your personal identifiers but retain the underlying transactional records in a non-attributable form for the statutory retention period.

 

6. Security

• Passwords are hashed using bcrypt before storage; we never see your plain-text password.

• All API traffic between the App and our servers is encrypted in transit using HTTPS / TLS 1.2+.

• Access to production data is restricted to authorised personnel under written confidentiality obligations.

 

7. Your Rights under the DPDP Act

You have the right to:

• Access — request a copy of the personal data we hold about you.

• Correction — fix inaccurate or incomplete data via the in-app Edit Profile screen, or by writing to us.

• Erasure — delete your account in-app via Account → Delete Account, which triggers anonymisation of your personal identifiers.

• Grievance redressal — write to our Grievance Officer (details below).

• Nominate — designate another person to exercise these rights on your behalf in case of incapacity.

We will respond to all valid requests within 30 days.

 

8. Children

The App is intended for users aged 18 and above. We do not knowingly collect personal data from children under 18. If you become aware that a minor has provided us data, please contact us and we will delete it promptly.

 

9. Account Deletion

You can delete your account anytime from inside the App: open Account → Delete Account. After deletion, your personal identifiers are anonymised within 7 days; transactional records are retained in non-attributable form as described in Section 5. You may also request deletion by writing to contact@ubtan.in with the subject line "Account deletion request".

A public account-deletion URL (per Google Play's requirement) is available at:
https://www.ubtan.in/delete-account

 

10. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified through the App and at the URL above.

 

11. Contact / Grievance Officer

For any privacy questions, requests, or grievances:

• Email: connect@ubtan.in

• Subject line: "Privacy / Grievance"

 

We respond to all valid requests within 30 days.