Privacy policy

Last updated: 6 November 2026

This policy explains how Emporaa (“we”, “us”) collects, uses, shares and protects information in the Emporaa Android app (package com.emporaa.app) and our websites, including the online booking pages for salons. Emporaa is business software for small businesses in Pakistan: snooker clubs, parking, mobile and computer shops, gyms, restaurants, salons and landlords.

1. Who uses Emporaa

Emporaa accounts are created by our team for business owners and their staff. The app does not let the public create accounts. Businesses use Emporaa to keep records about their own customers — for example club players, gym members, tenants, buyers and sellers of phones and laptops, repair customers and salon clients. For those records, the business decides what to record and why; Emporaa stores and processes them on the business’s behalf. A business using Emporaa is responsible for telling its customers and having their permission where the law requires it.

2. Information we collect

a. Account information (business owners and staff)

• Name, mobile number and password. Passwords are stored only in hashed form by our sign-in provider; we cannot read them.
• Business name, type, city and address, and subscription status (active, paused, paid until).

b. Business records entered in the app

Depending on the type of business, a business may enter:

• Sales, bills, receipts, payments, udhaar (credit) balances, rent, fees and expenses.
• Names, mobile numbers and notes about its customers, members, tenants, suppliers and staff.
• Stock details such as phone IMEI numbers and laptop serial numbers.
• National ID (CNIC) numbers and CNIC photos — for example of a person selling a used phone or laptop to a shop, or of a tenant.
• Photos taken or chosen in the app: cars, phones, laptops, gym members, rent agreements, police tenant forms and the condition of devices left for repair.
• For repairs, a device password or PIN, if the customer chooses to give it to the shop.
• Bookings, appointments, orders, meter readings and similar business details.

c. Online booking pages

When someone books a salon appointment on an Emporaa booking page, we collect their name, mobile number, the services, staff member and time they choose, and an optional note. No account or login is needed.

d. Device permissions and technical data

• Camera — only when you tap to take a photo or scan a barcode (IMEI or serial number). Barcodes are read on the phone; only the number you save is stored.
• Photos / media — only the pictures you choose to attach.
• Network state — to know when you are online so changes can sync.
• A sign-in session token so you stay signed in.

We do not collect your location, contacts, call logs, SMS, microphone audio or advertising ID, and the app contains no advertising and no third-party analytics or tracking.

3. How we use information

• To provide the service: save business records, sync them between the owner’s and staff’s phones, and keep a backup online.
• To show online bookings to the salon they were made with, and to stop double bookings.
• To sign you in, keep accounts secure, and manage subscriptions.
• To give support when you contact us.

We do not sell personal data, use it for advertising, or build profiles of people.

4. Who we share information with

• Supabase — our database, sign-in and file-storage provider. Data is stored on their servers in the Mumbai, India region.
• Vercel — hosts our websites, including the booking pages.
• The business you deal with — a booking is shared with the salon you booked; records a business enters are visible to that business’s owners and staff only.
• WhatsApp, phone and share apps — when a user taps a WhatsApp, call or share button (for example to send a receipt or reminder), the message opens in that app and is sent by the user. Those apps’ own privacy policies apply.
• Legal reasons — if required by law or to protect the rights and safety of people or our service.

Our providers process data only to run Emporaa for us and may not use it for their own purposes.

5. How we protect information

• All data is sent over encrypted connections (HTTPS/TLS).
• Each business can only read and change its own records; this is enforced by the database, not just the app.
• CNIC photos, ID photos, member photos, agreements and repair photos are kept in private storage and opened only through short-lived links for that business.
• Records are also kept on the phone so the app works offline; anyone with access to an unlocked phone that is signed in can see them, so please use a screen lock.

6. How long we keep information

We keep a business’s records while its account exists, including while a subscription is paused, so nothing is lost. Records a business deletes in the app are hidden at once and removed from the server with the account. When an account is closed and deletion is requested, we delete its data within 30 days; copies in backups are removed within a further 30 days.

7. Your choices and deleting data

• Business owners can edit or delete records in the app at any time. To close your account and delete all of your business data, message or call us from your registered mobile number at +92 310 2031101 (WhatsApp or call). We confirm when it is done.
• Customers of a business (members, tenants, sellers, repair or booking customers) can ask that business to correct or delete their details, or contact us and we will help.
• Online bookings can be cancelled from the booking confirmation page; to have your booking details deleted, contact the salon or us.

8. Children

Emporaa is made for businesses and is not directed to children under 13. We do not knowingly collect information from children through the app or booking pages.

9. Changes to this policy

If we change this policy, we will update this page and the date at the top. Important changes will also be shown in the app.

10. Contact us

Questions or requests about privacy: WhatsApp or call +92 310 2031101.