Salon Ledger Privacy Policy — Version History

Every version we have published, newest first. Superseded versions stay online at a permanent address so that a policy you agreed to can always be read back exactly as it stood.

  1. Version 2026-09-29

    Current

    Effective: September 29, 2026

    Initial Privacy Policy for Salon Ledger, published during its closed pilot. Salon Ledger replaces the paper service-ticket pad in a nail salon: the salon owner signs in with an email address, adds techs by name, links each tech's phone with a one-time QR code, and techs log their tickets on those phones. The policy lists every field the service holds about the owner, the techs, the linked phones and the tickets, including the full change history kept on every ticket and a per-ticket entry-time measurement that exists only for the pilot. It states that nothing is collected about the salon's own customers, that no payments are processed, and that the app carries no analytics, advertising or crash-reporting SDK. It discloses that on Android the QR code is read by Google's ML Kit, which processes the camera image on the phone but sends Google its own usage and performance metrics. It says plainly that deletion is by email request and that pilot sign-in is not yet the production authentication system.

    • Business tool: the salon owner is the customer; techs use it at the owner's invitation and need no account
    • Every field listed for the owner, techs, linked phones and tickets
    • Nothing collected about the salon's customers — a ticket has no customer name or contact
    • No payments processed; tips are recorded, not handled
    • Tickets are never deleted by design, and every change is kept with who made it and when
    • Per-ticket entry time disclosed as a pilot-only measurement, Tier B under the NeuEra Data Practices Charter
    • Camera used only to scan the linking QR code; frames are not stored or sent by us
    • Google ML Kit on Android disclosed, including the metrics it sends to Google
    • No analytics SDK, no advertising SDK, no crash reporting, no advertising identifier
    • Hosting named: Fly.io, United States (Chicago)
    • Deletion by email request today; pilot sign-in stated as not yet production authentication

Read the current Privacy Policy