Privacy Policy
Version 1 · Effective October 31, 2026
This is placeholder content for development purposes and has not been reviewed by legal counsel. Replace it before this site goes live.
1. Introduction
This Privacy Policy, together with our Terms of Service, governs your use of youShine's beauty and wellness booking platform, for both centers managing their business and clients booking appointments. It describes what we collect, how we use it, and the control you have over it.
2. Data Collection
We collect only what's necessary to operate the platform:
- Account information: name, email, phone number, and a securely hashed password — we never store your password in plain text.
- Center & booking data: business details, service listings, staff rosters, and appointment schedules needed to run your center or manage your bookings.
- Customer app data: booking history, messages you send to centers, and — if you choose to add them — Beauty Passport preferences like skin type or allergies. Location is only used if you search "near me."
- Technical data: basic request metadata used for security and reliability (e.g. rate-limiting abusive traffic).
3. Usage of Data
We use your information solely to operate and improve youShine. We do not sell your data.
- Service facilitation: powering bookings, scheduling, messaging and staff management, and sending you confirmations, reminders and receipts.
- Sharing with your center: sharing what's needed with the specific center you book at so they can serve you.
- Account security: detecting suspicious activity and keeping your account secure.
4. User Rights
You maintain control over your data, including the right to access a copy of what we hold about you, and the right to request deletion of your account and associated data, subject to any records we're legally required to keep. You can review, edit, or delete your Beauty Passport preferences at any time.
5. Security
Passwords are hashed, never stored in plain text. Two-factor authentication is available for platform staff accounts. We encrypt sensitive credentials at rest and apply rate-limiting on authentication endpoints to reduce abuse.
6. Contact Information
Questions about this policy or your data? Reach us via the contact form, or from Settings → Help in the app.