Legal
Privacy Policy
Last updated: 15 September 2026
1. Who we are
Digibook is an online booking platform for barbershops and hair salons. The service is provided by Ahmed Pašić, sole proprietor, Dobropolje, Tešanj, Bosnia and Herzegovina ("Digibook", "we", "us").
The platform has three parts: this website, the salon-facing application (Digibook Admin), and the customer applications we publish under each salon's own brand.
For any privacy question, write to digiboss.it@gmail.com.
2. Who controls your data
When you use Digibook Admin as a salon owner or employee, we are the controller of your account data.
When you book an appointment as a salon customer, the salon is the controller of that data and we process it solely on the salon's behalf, as a processor. You may address requests for access, correction, or deletion either to the salon or to us.
3. What data we collect
- Account data: full name, phone number, e-mail address, and password. Passwords are stored only as an encrypted hash and are never visible to us.
- Booking data: appointment history, the salon you chose, the barber and service you selected, appointment date, time and status, and any notes entered by you or the salon.
- Technical data for notifications: push notification token, device type and platform (iOS or Android), and your selected app language.
We do not collect location, contacts, photos, biometric data, or advertising identifiers. We use no analytics, behavioural tracking, or advertising networks.
4. Why we process data and on what legal basis
- Creating and maintaining your account — performance of a contract.
- Booking, changing, and cancelling appointments — performance of your contract with the salon.
- Reminders and appointment status notifications — performance of a contract and our legitimate interest in reducing no-shows. You can disable push notifications at any time in the app or device settings.
- Customer support and fixing technical faults — legitimate interest.
- Meeting legal obligations — legal obligation.
5. Who we share data with
We never sell your data or share it with third parties for marketing. We use the following processors:
- Supabase — database, authentication, and backend infrastructure.
- Expo (650 Industries, Inc.) — push notification delivery service.
- Apple Push Notification service and Google Firebase Cloud Messaging — delivery of notifications to your device.
The salon you book with can see your name, phone number, and your appointment history at that salon. Other salons on the platform have no access to that data.
Some of these processors are located outside the European Economic Area. Where that is the case, transfers are made under the European Commission's Standard Contractual Clauses.
6. How long we keep data
We keep account data for as long as the account exists. After an account is deleted we erase the data within 30 days, except where we are legally required to retain it longer. Appointment history is kept while the salon remains active on the platform, and for no longer than five years from the appointment date.
7. Deleting your account and data
You can delete your account yourself in the app, under Settings and then Delete account. Deletion is permanent and cannot be undone. You may also send a deletion request to digiboss.it@gmail.com.
8. Your rights
You have the right to access your data, correct inaccurate data, request erasure, restrict processing, receive your data in a portable format, and object to processing. Send your request to digiboss.it@gmail.com and we will respond within 30 days.
If you believe your rights have not been respected, you may lodge a complaint with the Personal Data Protection Agency of Bosnia and Herzegovina, or, if you are in the European Union, with the supervisory authority in your country.
9. Data security
All communication between the app and our servers is encrypted with HTTPS and TLS. Passwords are stored only as hashes. Data access is restricted by row-level security rules in the database, so each salon can reach only its own records.
10. Children
The service is not intended for anyone under 16. If we learn that we have collected a child's data without parental consent, we will delete it without delay.
11. Changes to this policy
We will notify you of any material change through the app or by e-mail at least 15 days before it takes effect. The date of the most recent change is always shown at the top of this page.
12. Contact
Ahmed Pašić, Dobropolje, Tešanj, Bosnia and Herzegovina. E-mail: digiboss.it@gmail.com