Privacy Policy

Effective date: 8 October 2026

This policy explains what data the Trimli mobile app and the trimli.ba website collect, why, who can see it and how you can have it deleted. Trimli is an app for booking appointments at hair salons and barbershops. It has two kinds of users: clients, who book appointments, and salons, which manage their schedule, team and clients.

1. Who is responsible for your data

Contact for all privacy questions and requests: info@trimli.ba

2. What data we collect

Account

• First and last name, email address, password (stored only as a one-way hash, never in readable form).
• Optional: phone number, profile photo, preferred language.
• If you sign in with Google or Apple: your account identifier with that provider, plus the name and email it shares with us. For Apple sign-in we also keep a token that lets us revoke Trimli's access when you delete your account. We never receive your Google or Apple password.

Appointments

• Salon, staff member, services, date and time, price, status (confirmed, completed, cancelled), notes you add and the reason for any cancellation.

Reviews, messages and saved salons

• Reviews you leave after a visit: rating, tags and comment, with the option to post anonymously.
• Messages you exchange with a salon through the in-app chat.
• Salons you save to your list.

Data salons enter

• Salon details: name, description, address, city, map coordinates, phone, email, website, photos, working hours and booking rules.
• Team: staff names, titles, photos and working hours.
• Client records: for every client, the salon keeps a record with name, phone, email, notes and visit history (number of visits, no-shows, late cancellations, amount spent). A salon can also enter a walk-in client who has no Trimli account. In that case the salon decides what to record and is responsible for having the right to record it.

Device and technical data

• A push notification token, device identifier and platform (iOS/Android), so we can send notifications to the right phone.
• Crash and error reports (device model, OS version, app version, technical details of the error), so we can fix bugs.
• Standard server logs (IP address, time of request, requested address), kept by our hosting provider for security and diagnostics.

What we do not collect

• We do not collect your location. Salons are searched by city.
• We do not process payments. You pay at the salon, and we never see card details.
• We do not show ads, do not track you across other apps or websites, and do not sell or rent your data to anyone.
• The app only accesses photos you choose yourself, for example a profile photo or salon pictures.

3. Why we use your data

Purpose	Legal basis
Creating your account, booking, cancelling and rescheduling appointments, chat and reviews	Performance of the service you requested
Notifications about your appointments (confirmations, changes, reminders, new messages)	Performance of the service, plus your consent to push notifications, which you can withdraw in your phone settings
Emails needed to run your account (password reset, confirmation links)	Performance of the service
Security, abuse prevention, fixing errors	Legitimate interest
Salon client records and statistics	Legitimate interest of the salon in keeping records of its own clients

We do not use your data for marketing and do not make automated decisions about you that have legal or similarly significant effects.

4. Who can see your data

• The salon where you book sees your name, contact details, appointment, notes, your visit history at that salon and the messages you send it. Salons cannot see your appointments at other salons.
• Other users see your reviews with your name, unless you post anonymously. Salon profiles, photos, staff and reviews are public within the app.
• Service providers that process data on our behalf and only for running Trimli:
  • Global.ba, hosting of the server and database (Bosnia and Herzegovina)
  • Google Firebase Cloud Messaging, push notification delivery
  • Apple Push Notification service, notification delivery to iPhones
  • Sentry, crash and error reports (servers in the USA)
  • Google and Apple, only if you choose to sign in with them
  • An email service provider, for sending account emails
• Authorities, only when required by law.

Some of these providers process data outside Bosnia and Herzegovina, including in the EU and the USA. We use only providers that apply appropriate safeguards for personal data.

5. How long we keep data

• Account data is kept for as long as your account exists.
• Crash reports and server logs are kept for a limited period (typically up to 90 days) and then deleted.
• Password reset links and confirmation links expire within hours.

6. Deleting your account

You can delete your account at any time directly in the app:

• Client: Profile → Delete account.
• Salon: Salon tab → Delete account and salon. For security, we send a confirmation link to the owner's email, and the salon is deleted only when the link is opened.

When an account is deleted:

• Your account, sign-in tokens, saved salons, conversations, notifications and push tokens are deleted. Apple sign-in access is revoked.
• Upcoming appointments are cancelled and the other side is notified, so nobody waits for an appointment that no longer exists.
• Your reviews remain visible but are no longer linked to your account.
• Salons where you were a client keep their own record of your past visits (name, contact and visit history), the same way a salon keeps a paper appointment book. If you want that record removed too, write to us or contact the salon directly.
• When a salon owner deletes their account, the salon is deleted together with its services, team, photos, client records and history.

If you cannot access the app, send a deletion request from your account's email address to info@trimli.ba.

7. Your rights

You have the right to:

• access the data we hold about you and receive a copy;
• correct inaccurate data (most of it you can edit yourself in the app);
• request deletion;
• object to or request restriction of processing;
• receive your data in a commonly used format (data portability);
• withdraw consent to notifications at any time in your phone settings;
• lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina (azlp.ba), or with the supervisory authority in your country if you live in the EU.

Send requests to info@trimli.ba. We respond within 30 days.

8. Security

All communication between the app and the server is encrypted (HTTPS). Passwords are stored only as hashes. Access to the database is restricted. No system is completely safe, but if we learn of a breach that affects your data, we will inform you and the competent authority as required by law.

9. Children

Trimli is not intended for children under 16. Persons under 16 may use the app only with the consent of a parent or guardian. If you believe a child has given us data without consent, contact us and we will delete it.

10. Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date. We will notify you of significant changes in the app.

11. Contact

info@trimli.ba