Privacy Policy

1.1 Information You Provide

We collect information you provide directly when you:

• Create an account (name, email address, password, business information)
• Log business data (appointments, revenue, client information, KPIs)
• Use the AI Coach feature (chat messages, questions, feedback)
• Set goals and track progress
• Contact customer support
• Participate in community features (leaderboard, team activities)

1.2 Automatically Collected Information

When you use our mobile app, we automatically collect:

• Device information (type, operating system, unique device identifiers)
• Usage data (features used, time spent, interaction patterns)
• Performance data (app crashes, errors via Sentry)
• Network information (IP address, connection type)
• Push notification tokens (for sending notifications)

1.3 Local Storage

Our mobile app stores data locally on your device for offline functionality:

• Appointment logs and client records (SQLite database)
• Daily KPI entries
• Goals and progress tracking
• AI Coach conversation history
• Authentication tokens (securely stored)
• App preferences and settings

This local data syncs with our servers when you’re online and is deleted when you log out or uninstall the app.

We use your information for the following purposes:

• Service Delivery: Provide, maintain, and improve the app and related services
• AI Coaching: Generate personalized insights and recommendations using OpenAI GPT-4
• Analytics: Calculate KPIs, track progress, generate forecasts and trends
• Account Management: Process transactions, manage subscriptions via Stripe
• Communications: Send notifications, updates, and customer support messages
• Security: Detect and prevent fraud, abuse, and security incidents
• Compliance: Comply with legal obligations and enforce our terms
• Product Development: Analyze usage patterns to enhance features and user experience

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

• OpenAI: AI coaching responses (chat messages only, no personal identifiers sent)
• Stripe: Payment processing (billing information for subscriptions)
• Sentry: Error tracking and crash reporting (anonymized)
• Vercel: Hosting and infrastructure (encrypted data at rest and in transit)
• Neon: Database hosting (PostgreSQL, encrypted)
• Twilio: Text message delivery (mobile number and message content only, never for their own marketing)

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

3.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 Mobile Information and Text Messaging

We collect mobile phone numbers from members, and from barbers whose shop uses our staff reporting tools, so that we can send notifications about your own account by text message. What we send: a one time welcome message with a private link to your own page, and a recurring message linking to your own performance report. Message frequency varies, and is typically one welcome message followed by roughly one message per week. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. See our Terms of Service for the full program details.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors who provide support services, such as our text message delivery provider, is permitted only for the purpose of delivering the messages you asked for. Text messaging originator opt-in data and consent are never shared with any third party.

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication (JWT tokens, bcrypt password hashing)
• Local data encryption on mobile devices (iOS Keychain, Android Keystore)
• Regular security audits and vulnerability assessments
• Access controls and monitoring
• Automatic logout after inactivity

• Account data: Retained while your account is active
• Business data (KPIs, appointments): Retained indefinitely unless you request deletion
• AI Coach conversations: Retained for 1 year or until deletion requested
• Deleted account data: Permanently removed within 30 days, except where retention is required by law

Access and Portability

You can access and export your data at any time through the app settings (JSON/CSV).

Correction and Updates

You can update your account information and business data directly in the app.

Deletion

Use the “Delete Account” feature in app settings, or contact support@6fbmentorship.com.

EEA users have rights under GDPR (access, rectification, erasure, restriction, portability, objection, consent withdrawal, complaint to supervisory authority). California residents have rights under CCPA (know, delete, opt-out of sale - we do not sell data, non-discrimination). Contact support@6fbmentorship.com to exercise either.

Our Service is intended for business professionals aged 18 and older. We do not knowingly collect information from children under 13.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. We use Standard Contractual Clauses for EU data and maintain Data Processing Agreements with all providers.

We may update this Privacy Policy from time to time. Material changes will be announced via in-app notification or email. Continued use of the Service after changes become effective constitutes acceptance.