Privacy Policy for Luxtril

1. Who Operates Luxtril

This Privacy Policy applies to the Luxtril mobile application, website, and related services operated by Luxtril Technologies Pvt. Ltd. (referred to as "Luxtril", "we", "us", or "our"), the official developer entity registered on the Google Play Console.

If you have any questions or privacy concerns regarding this policy, our designated Data Protection & Privacy Officer can be reached directly at:

• Official Privacy Email: privacy@luxtril.com
• Support Email: support@luxtril.com
• Entity: Luxtril Technologies Pvt. Ltd.

2. Information We Process

In accordance with Google Play's User Data & Data Safety policies, we provide a complete inventory of the categories of data we collect, whether collection is optional or mandatory, and whether the data is processed locally on your device or transmitted to our secure cloud servers.

3. How We Use Information

We process your data strictly for legitimate operational purposes, including:

• Service Delivery: Managing appointment schedules, salon bookings, master stylist reservations, and reminders.
• Account Management: Verifying identity via secure OTP/SMS, profile maintenance, and passwordless authentication.
• Customer Support: Responding to service inquiries, booking modifications, feedback, and technical assistance.
• Safety & Fraud Prevention: Protecting users and salon partners against abusive behavior, unauthorized access, and fraudulent transactions.
• App Optimization: Monitoring system health, fixing crash reports, and enhancing the Luxtril user experience.

We do not sell, rent, or trade your personal or sensitive user data to third-party data brokers or advertisers.

4. Android Device Permissions & User Choices

Luxtril requests Android runtime permissions only when strictly necessary for specific features. You can grant or revoke these permissions at any time via your device's Settings > Apps > Luxtril > Permissions.

• ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION: Used to help you locate premier salons and master stylists in your vicinity. If denied, you can still manually enter a city or postal code to browse salons.
• POST_NOTIFICATIONS: Used to send appointment reminders, booking status updates, and VIP offers. You can toggle push notifications on or off at any time.
• READ_MEDIA_IMAGES / CAMERA (Optional): Used solely if you choose to take or upload a profile picture or reference hair/beard style photo. We never access your photo library in the background.

5. Sharing & Third-Party Service Providers

We may share limited data with trusted third-party service providers who assist us in operating Luxtril. All providers are bound by strict confidentiality and data-protection agreements:

• Salon Partners & Stylists: When you book an appointment, the relevant salon receives your name, appointment time, and contact info to fulfill your service.
• Cloud Infrastructure: Secure cloud hosting and database services (e.g., Google Cloud Platform / AWS) located in enterprise-grade data centers.
• Payment Gateways: PCI-DSS compliant payment processors (e.g., Razorpay / Stripe). Luxtril does not store raw credit/debit card numbers on its servers.
• Communication Services: SMS and transactional email dispatchers (e.g., Firebase Cloud Messaging, Twilio) for OTP verification and booking confirmations.
• Analytics & Crash Reporting: Google Firebase Analytics & Crashlytics to monitor application performance and diagnose crashes.

6. Security & Modern Encryption

We implement robust organizational and technical safeguards designed to protect personal data against accidental loss, unauthorized access, alteration, and disclosure:

• Encryption in Transit: All communications between the Luxtril app, our web servers, and third-party APIs are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
• Encryption at Rest: Sensitive database records and backups are secured with AES-256 bit encryption.
• Access Controls: Strict role-based access restrictions (RBAC) and multi-factor authentication are enforced across all administrative systems.
• Periodic Security Reviews: Routine vulnerability scans and code audits are conducted prior to major production releases.

7. Data Retention Policy

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or legal compliance):

• Active Account Data: Retained while your Luxtril account remains active.
• Booking & Financial Records: Retained for the statutory duration required by applicable financial and taxation laws.
• Analytics & Server Logs: Anonymized or purged after 90–180 days.
• Deleted Accounts: When an account is deleted, associated personal identification records are permanently removed or anonymized within 30 days.

8. Account Deletion & User Privacy Rights

In compliance with Google Play's Account Deletion Policy, Luxtril provides both an in-app deletion option and an external web-based request mechanism. You do not need to have the app installed to request the deletion of your account and personal data.

9. Children's Privacy

Luxtril is intended for general audiences and is not directed to children under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal information without verified parental consent, we will promptly delete such information from our servers. Parents or guardians who believe their child has submitted data may contact us immediately at privacy@luxtril.com.

10. International Processing & Global Compliance

If you access Luxtril from outside our primary host country, please note that your information may be processed and stored on cloud servers configured to comply with international data security standards, GDPR (Europe), CCPA/CPRA (California), and the Digital Personal Data Protection (DPDP) Act (India).

11. Policy Updates & Contact Information

We may update this Privacy Policy periodically to reflect new features, updated SDKs, or legal revisions. We will notify users of substantial changes via in-app notifications, email, or a prominent banner on this page prior to the effective change date.