All documents

Privacy Policy of the KV Barbershop mobile app

This Policy describes what personal data the KV Barbershop mobile app for iOS and Android (the “App”, “we”) processes, for what purposes, on what legal grounds, who it is shared with, and what rights users have. Read it together with the Terms of Use.

1. Data controller and contacts

• Name: Societate cu răspundere limitată „KV HUSTLE” (SRL „KV HUSTLE”)
• IDNO: 1026023029973
• Registered office: MD-7721, Mișovca village, Ialoveni district, Republic of Moldova
• Data inquiries email: [email protected]
• Phone: +373 67 374 488

2. What data we collect

We process only the data needed for the corresponding App feature to work.

2.1. Account and sign-in

• Phone number — the sign-in identifier. Sign-in is confirmed with a one-time code (OTP) via SMS or Telegram; only a sha256 hash of the code is stored.
• Name, email, date of birth — profile data.
• Profile photo (avatar) — if you upload one; stored on our server.

2.2. Bookings and visits

• Selected services, barber, date and time, price, booking comment, visit history and statuses. Bookings are created and stored in the Altegio online booking platform (see section 4); the App matches them to you by phone number.

2.3. Loyalty program and activities

• KVT bonus balance and transaction log (accruals, spends, refunds).
• Raffle participation: tickets, daily claims, results.
• KV Members Club (Premium) subscription status and task progress.
• Referral program: if you invite a friend, we process the friend’s phone number you provide, to send the invitation and account for the reward. By providing the number you confirm the friend agrees to receive the invitation.

2.4. Linked social accounts (only at your initiative)

• Telegram — your account’s identifier and username (via the official bot).
• Google/YouTube — Google account identifier, email and name (via “Sign in with Google”; basic profile only).
• TikTok — identifier and display name (via TikTok Login Kit).
• Instagram — public username, identifier and public profile photo (from the @handle you enter, confirmed by you via a preview).
• Video tasks: links to the videos you published and their public view statistics.

2.5. Support

• Messages you send in the in-app support chat.

2.6. Technical data

• Device push token and interface language — to deliver notifications in your language.
• IP address, request logs, session tokens (stored as sha256 hashes) — security, rate limiting, abuse and fraud prevention.

We do not collect special categories of data (health, religion, biometrics, etc.) and do not track your geolocation.

3. Purposes and legal grounds

• Performance of the contract: account and sign-in, online booking, visit history, the KVT loyalty program, raffles, the Premium subscription, support, service notifications about your bookings.
• Consent: linking social accounts, uploading a profile photo, marketing notifications (can be disabled in the device and App settings; withdrawal does not affect prior processing).
• Legitimate interest: service security, prevention of fraud, manipulation and multi-accounting; handling inquiries.

4. Who we share data with

We do not sell your data. Sharing happens only to the extent needed for the service to work. Some recipients are located outside the Republic of Moldova (cross-border transfer — based on the performance of the contract with you and/or your consent, with contractual and technical safeguards).

Data may be disclosed to competent authorities where required by law.

5. Retention

Some data may be kept longer where required by law (e.g. accounting) or for defense in a dispute.

6. Your rights

You have the right to access your data, rectify it, delete it, restrict processing, object to processing based on legitimate interest, withdraw consent, and receive your data in a machine-readable format (portability).

• Rectification: name, email, date of birth, photo and phone number can be changed directly in the App (Profile settings).
• Account deletion: request it from the App (Profile settings → “Delete account”) or by email — see the Account deletion page.
• Other requests: [email protected]. We may ask you to confirm your identity. Response time — 1 month.

7. Notifications

Service notifications (changes to your bookings, raffle results, support replies) are sent as part of the contract. Push notifications work only with your OS-level permission; you can disable them in the device and App settings.

8. Children

The App is not intended for children under 14. Users aged 14–18 use the App with the consent of a parent or legal guardian.

9. Security

We apply technical and organizational measures: TLS (HTTPS) transport, OTP and session tokens stored only as hashes, restricted data access, rate limiting, backups. No system guarantees absolute security, but we minimize the risks.

10. Right to complain

If you believe your rights have been violated, you may complain to the supervisory authority: the National Center for Personal Data Protection (CNPDCP) — datepersonale.md. We would appreciate you contacting us first — we will try to resolve the matter directly.

11. Applicable law

Processing is governed by the law of the Republic of Moldova: until 22.08.2026 — Law No. 133/2011 on personal data protection; from 23.08.2026 — Law No. 195/2024 (GDPR model). Law No. 284/2004, Law No. 62/2022 (advertising) and other applicable acts also apply.

12. Changes to this Policy

We may update this Policy; the current version with its update date is published on this page. We will announce material changes in the App.