Effective August 22, 2026 · Thunderbyte Technologies Limited
This Privacy Policy explains how Thunderbyte Technologies Limited (“BarberOS”, “we”, “us”) collects, uses, and protects information when a barbershop (“Shop”, “you”) and its staff use the BarberOS platform to run their business. It also explains how we handle information about a Shop's own customers that gets entered into BarberOS by shop staff.
BarberOS is a multi-tenant platform. Each Shop's owner and managers control the data entered for their own business — staff records, transactions, service prices, and any customer names entered at checkout. In relation to that data, the Shop is the data controller and BarberOS acts as a data processor, storing and processing it only to provide the service. In relation to account data we collect directly to operate the platform (login credentials, billing, support requests), BarberOS is the data controller.
Account & identity data. Name, phone number, and (optionally) email address for every user account — owners, managers, cashiers, barbers, and beauticians — created when a Shop signs up or invites staff.
Authentication data. A securely hashed password (we never store passwords in plain text) and, if you enable it, a two-factor authentication secret. We also record login sessions and a token version used to invalidate old sessions after a password change.
Business data. Shop name, location, contact phone, services and prices, product inventory, revenue-split configuration, and — where a Shop enables its public digital card — a business description, logo, and social/contact links the Shop chooses to publish.
Financial & transaction data. Records of services sold and products purchased, amounts charged, how revenue is split between staff and the Shop, payment methods used, staff wallet balances, and requests for withdrawals, expenses, and salary payments.
Customer data entered by Shop staff. When a cashier records a sale, the client's name may be entered for the receipt. BarberOS stores this on behalf of the Shop as part of its transaction records; we do not independently collect or use this information for our own purposes.
Attendance data. Clock-in and clock-out timestamps and absence records for staff who use the attendance feature.
Feedback. Messages submitted through a Shop's feedback box, along with optional contact details the submitter chooses to provide.
Technical data. IP address, browser/device information, and basic usage logs, collected automatically to keep the platform secure and reliable.
We do not sell personal information, and we do not use Shop or customer data entered into the platform for advertising.
We share information only where necessary to operate the service:
We do not sell or rent personal information to third parties.
Passwords are hashed with bcrypt and never stored or transmitted in plain text. Sessions are authenticated using signed tokens delivered in HttpOnly cookies. Access to each Shop's data is restricted by role-based permissions, and platform administrators use a separate authentication path with optional two-factor verification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect information using industry-standard practices.
We retain account and transaction data for as long as a Shop's account is active, and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations. A Shop owner or manager can request deletion of specific records or closure of the account by contacting us; some financial records may need to be retained longer where required by law.
Subject to applicable law — including Tanzania's Personal Data Protection Act, 2022 — you may have the right to access, correct, or request deletion of your personal information, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below. For data entered about a Shop's customers, please contact that Shop directly, as they control that data.
We use an HttpOnly authentication cookie to keep you signed in, and your browser's local storage to cache your profile and preferences for a faster experience. We do not use third-party advertising or tracking cookies.
BarberOS is a business tool intended for shop owners and staff who are adults. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify Shop owners directly.
Questions about this policy or your data can be sent to info@barberos.co.tz or via WhatsApp at +255 753 543 754.