Privacy policy

Nikhaar is a marketplace for booking grooming appointments. Customers use it to find and book barbershops; barbershops use it to take those bookings and run their day.

This policy covers the Nikhaar website, the Nikhaar customer app and the Nikhaar Business app. It explains what we collect, why we collect it, who else sees it, how long we keep it, and what happens when you ask us to delete it.

Only what the service needs to work. We do not buy personal data, and we do not build advertising profiles.

What we never hold: your card number, your CVV, or your wallet PIN. Those are entered with JazzCash or Easypaisa and are never sent to Nikhaar. All we receive back is a reference and a result.

Nikhaar asks for your location for one purpose: to show you barbershops near you and how far away they are.

The apps request location access only while you are using them. There is no background location access, and the apps do not track your movement.

Your coordinates are sent with the search request and used to work out which shops are nearby. We do not keep a history of where you have been. If you would rather not share your position at all, you can decline the permission and choose a city or area by hand — every part of the marketplace works that way.

Barbershop addresses are a different thing entirely. A shop’s address and map position are business information, published deliberately so customers can find it.

We do not sell your information. It is shared in four situations, and no others.

The barbershop you book with. When you book, the shop sees your name, your contact number, the appointment, and your booking history with that shop — including past no-shows. They cannot see your history with any other shop.

Companies that run part of the service. Each receives only what its job needs:

Publicly, where you chose to publish. A review you leave appears on the shop’s page with your first name and your rating.

Where the law requires it, in response to a valid legal request.

Some records are trimmed automatically. Others are kept because they are a business’s account of its own trading, and deleting them would leave a barbershop unable to show what it sold.

Unread notifications are not deleted on a timer — removing something you have not seen would be worse than keeping it.

You can delete your account yourself, from Profile in the Nikhaar app or on your profile page. It takes effect immediately.

We will be exact about what that does, because it is not a total erasure.

Removed: your name, email address, phone number and profile photo are permanently replaced; your password is destroyed; your saved location preferences are cleared; your push-notification devices are deleted, so nothing can reach you again; any private notes a barbershop wrote about you are deleted; and every sign-in session is ended.

Kept, with your identity removed: past appointments and the accounting entries attached to them. A completed booking is a barbershop’s record of a sale — of money it took and tax it may owe — and Nikhaar’s accounting records are, by design, append-only: the database itself refuses to delete or alter them. So those records remain, but they no longer identify you. Reviews you left stay published, attributed to a deleted user.

One exception. If your account owns a barbershop on Nikhaar, you cannot delete it yourself — doing so would leave the shop, its barbers and its takings without an owner. Contact us and we will transfer or close the business first.

Your old email address and phone number are not released for reuse. That prevents anyone from registering onto the remains of your history.

Location. Decline the permission and browse by city or area instead.

Notifications. Turn off push notifications in your device settings at any time. Messages about an appointment you have actually booked — a confirmation, a change, a reminder — are sent because you booked it.

Marketing. Suggestions to rebook are only sent if you have opted in, and you can opt out in your profile at any time.

Your data. You can see and correct your details in your profile, and delete your account outright. To request a copy of what we hold, contact us.

Passwords are stored only as a one-way hash and cannot be read back, by us or by anyone who obtained the database. Sign-in sessions are single-use and are destroyed the moment one is reused, which is what a stolen session looks like. Changing your password, signing out everywhere, or having an account suspended ends every existing session immediately.

Traffic is encrypted in transit. Card and wallet credentials never reach Nikhaar. Access to production data is limited to the people who operate the service, and administrative actions are recorded.

No service can promise it will never be breached. If a breach affects your information, we will tell you.

Nikhaar is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

If this policy changes in a way that affects you, we will say so in the app and on this page before it takes effect.

Questions about your information, or a request to see or delete it: contact Nikhaar support.