Privacy Policy

Stami (“Stami”, “we”, “us”, or “our”) is a customer platform for nail, hair, and beauty salons. We help salons manage loyalty programs, digital membership cards, bookings, check-ins, and customer communication.

This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you when you use the Stami mobile apps, websites, and related services (together, the “Services”).

By using the Services, you acknowledge this Privacy Policy. If you do not agree, please do not use the Services.

Depending on how you use Stami, we may collect the following categories of information:

• Account and profile information — such as name, email address, phone number, language preference, and salon profile details.
• Service activity — such as booking history, check-ins, loyalty points or stamps, rewards, vouchers, and digital membership / Wallet pass information.
• Communications — messages you send through in-app chat or support channels, and related metadata needed to deliver those conversations.
• Device and technical data — such as device type, operating system, app version, approximate network information, and diagnostic identifiers.
• Push notification tokens — used to deliver notifications you have enabled.
• Crash logs and analytics — aggregated or diagnostic information that helps us understand stability, performance, and product usage.

We do not intentionally collect special-category sensitive data that is unnecessary for providing the Services (for example, government ID numbers or biometric templates used for authentication beyond what your device OS may manage locally).

We use personal information to:

• Create and manage accounts for salon owners, staff, and customers;
• Authenticate users and protect account security;
• Enable appointment booking, scheduling, and related updates;
• Operate loyalty programs, rewards, and digital membership cards;
• Support Apple Wallet / Google Wallet passes where offered;
• Provide customer support and respond to requests;
• Send service notifications you have opted into;
• Improve, troubleshoot, and secure the Services;
• Detect, prevent, and investigate fraud, abuse, or misuse;
• Comply with applicable legal obligations.

Where enabled, Stami may request access to your device camera solely to scan QR codes for membership cards, loyalty check-in, and related salon workflows.

Camera access is used for real-time scanning. Stami does not store photos or videos from the camera for this purpose. You can revoke camera permission at any time in your device settings; scanning features that require the camera will then be unavailable.

If you allow notifications, we may send:

• Appointment reminders and booking updates;
• Loyalty and reward notices;
• Promotional messages from your salon where permitted;
• Important service or account notices.

You can disable push notifications in your device settings at any time. Doing so may limit reminders and updates related to bookings or loyalty rewards.

Stami does not sell personal information.

We may share information only in these limited situations:

• Partner salons — so the salon you interact with can manage bookings, loyalty, membership, and customer service.
• Service providers — trusted vendors that help us operate the Services (for example hosting, analytics, messaging, crash reporting, or payment-related infrastructure), under appropriate confidentiality and data-processing terms.
• Legal requirements — when we believe disclosure is required by law, regulation, legal process, or to protect the rights, safety, or integrity of Stami, our users, or others.

We retain personal information for as long as your account remains active and as needed to provide the Services.

After account closure or deletion requests, we delete or anonymize personal information within a reasonable period, unless we must retain certain records longer — for example booking, billing, security, or other records required by law, dispute resolution, or legitimate business needs (such as preventing abuse).

You may request deletion of your Stami account and associated personal data at any time.

In the Stami app, go to Settings → Delete Account and follow the on-screen instructions.

You may also email us at support@stami.app with the subject line “Account deletion request” and enough information for us to verify the account.

We process deletion requests within a reasonable period. Some information may be retained where required by law or for legitimate purposes described in the Data Retention section above (for example completed bookings needed for salon records).

Depending on where you live — including under the EU General Data Protection Regulation (GDPR) and similar laws — you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Receive a portable copy of certain information (data portability);
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at support@stami.app. We may need to verify your identity before fulfilling a request. You may also have the right to lodge a complaint with your local data protection authority.

Stami is not intended for children under 13 years of age (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

If you have questions about this Privacy Policy or our data practices, contact: