Privacy policy
Contents11 sections
01Who we are02The data we collect03What we use it for04Who we share it with05How long we keep it06When you delete your account07Your rights08Security09Minors10Changes11Contact usThis policy explains what data Sterncut collects when you use the app or the sterncut.ma website, what it's used for, who it's shared with and how to exercise your rights. It applies to clients, queue guests, barbers and shop owners.
Who we are
Sterncut is published by [legal entity], which is responsible for processing your data.
The data controller is [legal entity], [legal form], registered in the [city] commercial register under number [RC number], ICE [ICE number], with its registered office at [address].
This processing has been declared to the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP) under number [CNDP declaration number].⚑1
For any question about your data: adil.boudraa3@gmail.com.
The data we collect
Only what's needed to book, queue, talk to your barber and run your wallet. No bank cards.
Your account
- Name, phone number and email address.
- Password: stored hashed by our sign-in provider; nobody at Sterncut can read it.
- Your Google or Apple sign-in ID, if you sign in with one of them.
- Date of birth (optional), app language and profile photo.
Your location
- Your phone's location, only while the app is open, to sort shops by distance. It isn't stored.
- Each shop's location, as a pin on the map.
- When a barber sends our team a photo of the shop's poster, the photo is saved with the location where it was taken.
Your bookings
- Services, times, notes to the barber, cancellations and their reasons, and no-shows.
- After a visit, the barber rates the client's reliability. That rating can decide whether a shop asks for a deposit.⚑2
Your conversations
- Chats between a client and a barber (text and photos).
- Support cases with our team.
- Reviews, which are public, plus reports and appeals.
Your wallet
- Cash top-ups made at a shop, deposits, refunds, coupons and referral rewards. No bank card data is collected.
Your searches
- Searches made in the app, including ones that found nothing.
Without an account: the queue
- If you take a place in a shop's queue from its web page without an account, we store your first name and phone number, and send you text messages about your place.
Barbers and shops
- An ID document, to verify the barber's identity.⚑3
- Bio, specialty, portfolio photos and working hours.
- Earnings, commission or rent terms, cash handled, weekly statements and subscription bills.
Notifications
- The token that lets us send notifications to your phone, and a log of notifications sent.
What we use it for
To run the service, to comply with the law and to know where to recruit new shops. Never for advertising.
- Creating and securing your account.
- Showing nearby shops and their free times, and recording your bookings and your place in a queue.
- Letting a shop decide whether to ask for a deposit, based on no-shows and reliability ratings.
- Delivering your messages and photos, and handling support cases.
- Publishing reviews and handling reports and appeals.
- Running the wallet: top-ups, deposits, refunds, coupons and referrals.
- Verifying barbers' identity, and producing their statements and shops' subscription bills.
- Sending you notifications about your bookings and messages.
- Studying searches that found nothing, to choose the neighbourhoods where we recruit shops.
We rely on performing the service you asked for, on our legal obligations (accounting in particular), on your consent (location, notifications) and on our legitimate interest (searches with no result, preventing abuse).⚑4
We show no advertising, use no audience-measurement tools and sell no data.
Who we share it with
With the shop you choose and a few technical providers. No one else.
The shop and barber you book see your name, phone number, booking, notes and messages. They also see your no-shows and your reliability standing.⚑5
Reviews are public and shown with your first name.⚑6
Our providers process data on our behalf and on our instructions:
- Supabase — database, sign-in and file storage.
- Expo — sending notifications, through Apple and Google.
- Google and Apple — signing in with a Google or Apple account.
- Cloudflare — hosting the sterncut.ma website.
- envoisms.ma — sending text messages to people on a queue without the app (Morocco).
- Apple Maps and Google Maps — displaying maps.
These providers may process data outside Morocco, notably in Ireland (Supabase, the database) and the United States (Expo, Google, Apple and Cloudflare). These transfers are made in accordance with law 09-08 [CNDP authorisation reference].⚑7
We disclose data to authorities only when the law requires us to.⚑8
How long we keep it
As long as your account exists. Money records are kept for 10 years.
- Account data: as long as the account exists.
- Phone location: never stored.
- Money records (wallet, deposits, barber statements, invoices): 10 years, as the law requires for accounting records.⚑9
- Queue guests' first name and phone: 30 days, then erased.
- Searches: linked to your account while it exists, then kept with no link to you.
- Notification log: while the account exists, then kept with no link to you.
- Barbers' ID documents: until the barber's account is deleted.
When you delete your account
Your personal details are erased. Your bookings, reviews and money records stay, without your name.
Deleting makes the account anonymous: your name, phone, email, photo and other personal details are erased.
Bookings, reviews and money records are kept without your name. Reviews stay published as “Former customer”.
Money records are kept for 10 years, then deleted.
The details, and how to delete with or without the app, are on the Delete your account page.
Your rights
You can see your data, correct it, object to its use or have it deleted — in the app or by email.
- Access: find out what data we hold about you, including your no-shows and reliability standing.
- Correction: fix inaccurate data. Most of it can be changed directly in the app.
- Objection: object, on legitimate grounds, to the use of your data.
- Deletion: delete your account in the app, or ask us to.
Write to adil.boudraa3@gmail.com from the email address on your account, or give its phone number. We reply within 10 days.⚑10
If you're not satisfied with our reply, you can complain to the CNDP (www.cndp.ma).
Security
Access to data is limited, and passwords are never kept in readable form.
Only the people at Sterncut who need it to run the service can access data. Our team reads a conversation only if it's reported or attached to a support case.⚑11
Minors
You must be at least 18 to create an account.
Sterncut is for people aged 18 and over.⚑12 Date of birth is optional.
Changes
If this policy changes in an important way, we tell you in the app.
The last-updated date is at the top of this page. For an important change, we tell you in the app 30 days before it applies.⚑13
Contact us
adil.boudraa3@gmail.com · +212 6 59 94 15 07
[legal entity], [address]. Email: adil.boudraa3@gmail.com. Phone: +212 6 59 94 15 07.