Privacy Policy

Hooma Ltd ("we", "us", or "our") operates Hooma CRM (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Business Information: Salon name, address, phone number, and business details.
• Client Data: Names, contact information, pet details, appointment history, and notes about your clients that you enter into the Service.
• Staff Data: Staff names, roles, schedules, and contact information.
• Communication Data: Messages and information you provide when contacting our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time and date of visits.
• Device Data: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.
• Cookies & Similar Technologies: We use essential cookies for authentication and session management. See Section 7 for details.

We use your information to:

• Provide, operate, and maintain the Service.
• Process and manage your bookings, clients, and staff schedules.
• Authenticate your identity and secure your account.
• Send you service-related notifications (e.g., appointment reminders, account alerts).
• Respond to your support inquiries and requests.
• Analyze usage patterns to improve and optimize the Service.
• Detect, prevent, and address technical issues and security threats.
• Comply with legal obligations.

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party services that help us operate the Service (e.g., cloud hosting via Google Firebase, analytics via Vercel). These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, subpoena, court order, or governmental regulation.
• Safety & Protection: To protect the rights, safety, or property of Hooma Ltd, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Your data is stored on secure servers provided by Google Firebase (Google Cloud Platform). We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication with Firebase Authentication.
• Regular security reviews and monitoring.
• Access controls limiting who within our organization can access your data.

While we take reasonable precautions to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or reporting purposes. Client and booking data you entered will be permanently deleted upon account termination unless you export it beforehand.

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
• Analytics Cookies: Help us understand how the Service is used (via Vercel Analytics). These are anonymized and do not track you across other websites.

We do not use advertising or cross-site tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may affect the functionality of the Service.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain processing of your personal data.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@hellohooma.app. We will respond within 30 days.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will take steps to delete it promptly.

Your data may be processed and stored in countries outside your country of residence, including the United States (where Google Cloud servers may be located). We ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or equivalent measures, to protect your data in accordance with this Privacy Policy.

The Service integrates with the following third-party services:

• Google Firebase: Authentication, database, and hosting.
• Vercel: Hosting and analytics.
• Google Sign-In / Apple Sign-In: Optional social authentication.

Each of these services has its own privacy policy. We encourage you to review them. We are not responsible for the privacy practices of third-party services.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: