Your data, in plain sight.
What data Kyro uses, where it is kept, who can see it and how we protect it. Short and in plain words; the full version is in the Privacy policy.
Privacy policyIn short
- Only what’s neededFor an account: name, email, phone and password. For bookings: what you booked, where and when.
- No cards in the appClients pay at the salon. Salons pay their subscription on Stripe’s secure page; KYRO never sees card details.
- Your location stays on your phoneIf you allow it, the app uses it only on the device, to show nearby salons. We never send or keep it.
- No ads and no trackingNo ads, no pixels, no analytics tools. This site uses no cookies.
How we protect data
- Every connection between the apps, the site and the servers is encrypted (HTTPS/TLS).
- Passwords and sign-in codes are stored only as cryptographic fingerprints; nobody at KYRO can read them.
- Access rules inside the database itself: each account sees only what it’s allowed to. A salon can never see another salon’s client records.
- Profile photos are not public; they open only through temporary links, in the apps.
- Sign-in and code attempts are limited, to block automated attacks.
- Very few people have admin access, all bound by confidentiality, and every look at personal data is logged.
- If a data breach ever happened, we notify the authority within 72 hours, and the people affected when the risk is high.
Where data is kept
We work with providers that have data processing agreements and the safeguards the GDPR requires for transfers.
- Supabase the database, accounts and files London, United Kingdom (European Commission adequacy decision)
- Resend service emails: codes, confirmations, invitations EU region; open tracking turned off
- Twilio SMS codes USA, with GDPR safeguards
- Apple iPhone notifications and maps in the iOS app EU and USA, with GDPR safeguards
- Cloudflare the secure connection for the site and web app global network, with GDPR safeguards
- Stripe only salons paying for Kyro Studio EU and USA, with GDPR safeguards
For salons
-
Client data belongs to the salon
KYRO processes it only on the salon’s behalf, under the data processing agreement.
Data processing agreement -
Allergies only with the client’s consent
An allergy note is saved only after the specialist confirms in the app that the client gave explicit consent.
Details in the policy -
Everyone sees what concerns them
Roles in Kyro Studio decide who sees takings, clients and the team. Specialists see only clients they have worked with.
Roles in Kyro Studio
This site
This site uses no cookies and keeps no access logs. The only thing saved in your browser is the theme you pick (light or dark), after you press the theme button. Fonts are hosted by us, with no requests to third parties.
Cookies and local storageYour rights
- You can ask at any time to access, correct or delete your data.
- You delete a client account right in the app: Cont (account), “Editează contul”, “Șterge contul”.
- You can complain to ANSPDCP, Romania’s data protection authority.
Found a security problem?
Write to us and we’ll reply as soon as we can. Please don’t make the problem public before we can fix it.