Privacy Policy

• Required: email address, social sign-in identifier (Apple/Google)
• Optional: name, phone number, preferred language, preferred currency
• Generated through use: booking history, reviews, favorites, messages with Salons
• Device data: push notification token
• Location: when you use "Near me", your device's current location is used on your device only to move the map. It is not stored on our servers. You can turn off location permission in your device settings.
• Payment data: amount, time, payment method type and approval reference (card numbers are handled by Toss Payments and not stored by the Company)
• Usage data: IP address, browser/device type, visit and click events (service improvement and abuse prevention)
• Salon partners: business registration number, representative name, settlement bank details

• Identifying members and fulfilling the service agreement
• Processing booking requests, confirmations, changes, and cancellations, and sharing booking details with the relevant Salon
• Sending booking reminders and service notices via push notification
• Preventing fraud and handling disputes (no-shows, reports)
• For Salon partners: settlement and marketing-slot transactions

When a booking is made, the Company shares the minimum information needed to fulfill it (name, contact info, booking notes) with the relevant Salon. Otherwise, the Company does not share personal data with third parties without consent, except where required by law.

The Company uses the following processors to operate the Service:

The following providers process personal information outside Korea (e.g., the United States) to operate the service. Data is transferred over the network when you use the service. If you do not want this, you can stop processing by deleting your account, which ends your use of the service.

• Google LLC (Firebase Cloud Messaging, USA): push token — sending notifications, until account deletion
• Vercel Inc. (USA): connection logs — web hosting, while the service is provided
• Mixpanel Inc. (USA): usage events (pseudonymous ID) — analytics, up to 1 year

Personal data is deleted promptly upon account deletion. Booking and report records may be retained separately for up to one year afterward to prevent fraud and handle disputes, or longer where required by law.

You may view or correct your personal data at any time, and can request account deletion (which erases your personal data) from the Profile page in the app.

Personal data stored electronically is permanently deleted using methods that prevent recovery.

We use cookies and browser storage to keep you signed in (session cookie), remember your display language (bn_locale cookie), and keep recent searches and display settings (browser storage). You can delete or block them in your browser settings; some features such as staying signed in may stop working.

Privacy officer: Changgeun Jung (CEO) · support@beflex.co. You can also reach us through the in-app help center.

Material changes to this policy will be announced within the Service.