Privacy policy
What we keep, and why.
Last updated:
Tasriha lets you take a number in a beauty shop’s queue, or book an appointment. This page says what we store for that, why, for how long, who sees it, and how to get it all back or delete it.
In short
- We keep the bare minimum: your phone number, your first name, your numbers and your appointments.
- No ads, no selling data, no trackers.
- The queue screen shows numbers, never names.
- Your bank card never goes through Tasriha.
- You download or delete everything from “My data”.
Who is responsible
The controller is SIRTECH SARL, a company under Algerian law. The team that runs Tasriha is based in Spain.
- Publisher
- SIRTECH SARL, a limited liability company under Algerian law.
- The team
- Based in Spain.
- Registered office
- [TO COMPLETE by the operator: registered office address in Algeria]
- Trade register
- [TO COMPLETE by the operator: trade register (RC) number]
- Contact
- contact@tasriha.app
What we store
Nothing more than what makes the queue and the appointments work. Here is all of it, topic by topic.
- Your account
- To take a number, book or keep a salon as a favourite, you need an account: your first name, your phone number and a password, and the language you chose. Your password is never kept as it is: we keep only a fingerprint (scrypt) that cannot be turned back into it. We also note the date you accepted the terms. If you give it, your birthday (day and month, no year), for a message from your salons.
- Your email
- Only if you add it yourself and confirm it. It is used to give your account back to you. It is optional.
- Accounts without a password
- Before 2 October 2026, taking a number without an account created a guest account, tied to the phone by a cookie. We no longer create them. A guest account that still exists keeps its history; to take a new number or book, you add a password to it.
- Your numbers in the queue
- The shop, the number, the day, the times (taken, called, started, finished), the status, and how it was taken: QR code, remotely or at the counter. If you picked someone on the team, who. If you say “I’m on my way”, the time.
- At the counter
- For a customer with no phone or no account, the barber may type a first name and a phone number. Only the shop sees them.
- Your appointments
- The shop, the team member, what you book (name, price and length at the time of booking), the time, and the notes written by you or by the shop. An address, only if the shop comes to you.
- At each shop
- How many visits and no-shows you have there, and your last visit. A shop only sees its own. It may also note what helps it serve you (an allergy, your usual cut): those notes are the shop’s, no other shop sees them, they are not in your export, and they go when your account does.
- Your reviews
- The rating, the text, and the shop’s reply. They are public, with your first name only.
- Favourites, follows, loyalty
- The salons you save, the team members you follow, and your loyalty stamps.
- Notifications
- If you turn them on: the technical address your browser gives so this phone can ring when it’s your turn, with its encryption keys. One per device. It holds neither your name nor your number. A shop that turns them on can send you at most one message a week (your birthday, “it’s been a while”); you switch them off shop by shop.
- Forgotten password
- A reset reference, kept as a fingerprint. And, when you write to us on WhatsApp, your message and the number that sends it.
- For a shop
- The name, the trade, the commune and a point on the map, the phone, WhatsApp and Instagram if you give them, the description, the photos you upload, the opening hours, the price list, and the team’s first names and photos. All of this is public: that is the point of your page.
- A shop’s payments
- By CIB or Edahabia card, the payment goes through Chargily: we keep the amount, the period, the method and the Chargily reference. Tasriha never sees your card number. By CCP or BaridiMob, we keep the transfer reference and the code issued.
- Technical
- Strictly necessary cookies (see below). Anti-abuse counters, per phone number, per shop or per IP address, that clear themselves within 48 hours at most. Error reports, cleaned of phone numbers and private links. Daily counters with no personal data at all (how many numbers taken, served…).
- Security log
- Sensitive actions (payment, code, reset, suspension…) are recorded: who, what, when.
What we don’t do
- No ads, no selling of data, no Google Analytics and no Facebook Pixel.
- No tracking of your location. If you look for salons around you, your position stays on your phone: it works out the nearest commune, and that is all we receive.
- Photos are redrawn on the phone before they are sent: their metadata, GPS position included, never leaves it.
- No bank card number, ever.
Why, and on what basis
The law asks us to say what each use rests on. There are four.
- To provide the service
- Your account, your numbers, your appointments, your reviews, your favourites, your loyalty, and a shop’s subscription. Without them Tasriha does not work. Basis: performance of the contract (our terms).
- For security
- Anti-abuse limits, the security log, error reports and daily counters. They protect accounts and keep the service up. Basis: our legitimate interest.
- When you ask for it
- Notifications and email. You turn them on yourself, and you can withdraw them at any time. Basis: your consent.
- For the accounts
- Records of payments. Basis: a legal obligation.
Who sees what
- Everyone
- A shop’s page, its prices, its photos, and reviews with their author’s first name. On the queue screen, only numbers, never names.
- The shop
- Your first name, your phone number, and your history with them: numbers, appointments, visits, no-shows. Their team sees it on the counter. They see nothing of what you do at another shop.
- The Tasriha team
- Only to run the service or to help you: checking a reset, settling a payment, dealing with abuse.
- The authorities
- Only on a request that complies with the law.
Nobody else. No data is sold, rented or traded.
Our providers, and where the data is
These companies run Tasriha for us. They process the data only on our instructions.
- Vercel
- Website hosting. Servers in Frankfurt (Germany).
- Neon
- Database. Servers in Frankfurt (Germany).
- Cloudflare
- Photo storage and delivery (R2).
- Railway
- Realtime server: it pushes the queue numbers live. It receives numbers only, never names.
- Chargily
- Payment by CIB or Edahabia card, in Algeria. You type your card on their page, not ours.
- Resend
- Sending email, only if you added an email address.
- Apple, Google, Mozilla
- Your browser’s notification services, to make your phone ring. The message content reaches them encrypted.
- WhatsApp (Meta)
- Only if you write to us on WhatsApp, about a forgotten password or a payment by code.
So the data is hosted outside Algeria, mainly in the European Union. Some providers are American companies: when data leaves the European Union, it does so under the safeguards set by the GDPR (the European Commission’s standard contractual clauses).
How long
- Queue numbers
- 13 months. Then they are anonymised: only daily counts remain, with no name and no phone number.
- Security log
- 24 months.
- Error reports
- 30 days.
- Reset references
- 30 minutes, for a single use.
- Anti-abuse counters
- 48 hours at most.
- Notifications
- Until you turn them off, your browser refuses them, or you delete your account.
- Payments
- As long as accounting law requires, even after the shop closes.
- Everything else
- As long as your account exists.
- A deleted account
- Anonymised at once: phone number, first name, password and email are cleared, notifications deleted. Your reviews stay, signed “Customer”.
Your rights
You have the right to see your data, correct it, erase it, object to a use of it, and take it elsewhere. Most of it takes two taps:
- See and download
- In “My account”, open “My data”: a JSON file with everything we hold about you. It is also your right to portability.
- Correct
- Your first name, your number, your email: change them in your account.
- Erase
- “My data”, then “Delete my account”. It is immediate. If you run a shop, close it first.
- Object, withdraw consent
- Turn off notifications, remove your email, or write to us to object to a use based on our legitimate interest.
- Anything else
- Write to contact@tasriha.app with your account’s phone number. We may ask you to prove the number is yours. We answer within one month at most.
If our answer does not satisfy you, you can complain to an authority:
- In the European Union
- The AEPD (Agencia Española de Protección de Datos), the Spanish authority, because the Tasriha team is based in Spain. The GDPR applies.
- In Algeria
- The ANPDP (national authority for the protection of personal data), under Law No. 18-07 of 10 June 2018.
Security
- Everything goes over HTTPS. Passwords, codes and references are kept as fingerprints. A reset link works once, for 30 minutes.
- In “My account”, “Sign out all my phones” closes every session at once.
- If an incident affects your data, we tell you, and we tell the authority when the law requires it.
Changes
If we change what we store or why, this page changes too, with a new date at the top. An important change is announced in the app before it applies.
Contact
A question, or a request about your data or these rules: write to contact@tasriha.app, with the phone number on your account.
We answer in French, Arabic or English.