Document légal

Politique de confidentialité

Version de référence (anglais) mise à jour le 5 septembre 2026. La présente page reprend ce texte officiel dans son intégralité.

L'essentiel, en français

Nous collectons votre e-mail, votre nom, votre téléphone et votre rôle (client ou professionnel) pour créer et gérer votre compte.
Votre position sert uniquement sur votre téléphone pour trier les salons par distance : elle n'est ni envoyée, ni conservée. Refuser la localisation n'empêche pas d'utiliser l'application.
L'application ne contient aucun outil de mesure d'audience, de publicité ou de suivi comportemental. Aucune donnée n'est vendue.
Les paiements sont traités par Stripe : nous ne voyons jamais votre numéro de carte.
Vous pouvez supprimer votre compte depuis l'application (Profil → suppression). Les données personnelles sont effacées ; les avis publiés restent visibles avec un nom anonymisé.
Pour toute demande : contact@xistenceapp.com

Overview

X'istence ("we", "us", "our") operates the X'istence mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our App.

By creating an account and using the App, you agree to the practices described in this policy.

1. Data We Collect

1.1 Account Information

Email address — used for authentication and account recovery
Full name — displayed on your profile and bookings
Phone number — used for booking coordination and notifications
Role (client or professional) — determines app features available to you

1.2 For Professionals (Business Owners)

Business name, address, and type — displayed publicly to clients
Business photos — displayed on your salon profile (subject to admin approval)
Services, pricing, and schedule — shown to clients for booking
Team member information — names and roles of staff
Stripe account details — processed by Stripe for payouts (we do not store your bank details)
Geo-location (optional) — used to show your salon on the map

1.3 For Clients

Booking history — appointments, services booked, and payment status
Favorites — salons you have saved
Reviews — ratings and comments you leave on salons
Loyalty points — points earned per salon and redeemed rewards
Location (optional) — used on your device only to sort salons by distance and calculate directions. Your GPS position is never sent to our servers, never stored and never shared. Denying location access does not prevent you from using the App.

1.4 Device and Notifications

Push notification token — to send you booking reminders and updates
Device type and OS version — for compatibility and support

The App contains no analytics, advertising or behavioural tracking tools. We do not use Google Analytics, Firebase Analytics or any tracking SDK, and we do not collect diagnostics for advertising purposes.

2. How We Use Your Data

2.1 Authentication & Account Management

To create and manage your account
To verify your identity during login
To send password reset emails

2.2 Booking & Payments

To facilitate appointments between clients and professionals
To process payments securely via Stripe
To send booking confirmations and reminders
To manage cancellations and refunds

2.3 Reviews & Ratings

To display reviews you write on salon profiles
To allow professionals to respond to your reviews
To calculate and display average ratings

2.4 Loyalty Program

To track points earned per salon
To allow redemption of rewards
To notify you when you unlock a reward

2.5 Notifications

To send push notifications about bookings, reviews, and loyalty rewards
You can disable notifications at any time in your device settings

2.6 AI Try-On

To generate the hairstyle preview images you request (the photo you submit is sent to our AI image provider only for the time needed to produce the result)

3.1 Stripe

We share payment data with Stripe (our payment processor) to process transactions and payouts. Stripe handles all card information securely — we never see or store your full card details.

3.2 Firebase

We use Firebase (Google) for authentication, database storage, and push notifications. Your data is stored on Google's servers in compliance with GDPR.

3.3 Public Information

The following information is visible to other users:

For professionals: business name, address, photos, services, schedule, reviews
For clients: your name on reviews and bookings (visible only to the professional you booked with)

3.4 Legal Requirements

We may disclose your data if required by law, court order, or government regulation.

4. Data Retention

Active accounts: data is retained as long as your account is active
Deleted accounts: we delete your personal data within 30 days of account deletion, except where retention is required by law (e.g., financial records)
Reviews and ratings: retained even after account deletion, as they contribute to public salon ratings (your name is anonymized)

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

Access — request a copy of your personal data
Rectification — request correction of inaccurate data
Erasure — request deletion of your account and data ("right to be forgotten")
Restriction — request limitation of data processing
Portability — receive your data in a machine-readable format
Objection — object to certain processing activities
Withdraw consent — withdraw consent for optional data processing at any time

To exercise these rights, contact us at: contact@xistenceapp.com

6. Account Deletion

You can delete your account at any time from the App:

Go to Profile → Settings → Delete Account
Confirm the deletion
Your personal data will be permanently deleted within 30 days

Note: Reviews you have submitted will remain visible but your name will be replaced with "Anonymous". Booking records needed for financial/legal compliance will be retained as required by Belgian law.

Professionals (Stripe Connect): If you are a professional, your business profile and salon data (services, team, photos, schedule) are deleted with your account. However, payment and payout records linked to your Stripe account (transactions, payouts, financial records) cannot be deleted immediately — Belgian accounting and tax law requires us to retain financial records for as long as legally required. Stripe also retains data related to your Connect account under its own terms and policies. For any question about this data, contact contact@xistenceapp.com.

7. Data Security

All data is transmitted over HTTPS (TLS 1.2+)
Passwords are hashed by Firebase Authentication
Payment data is handled exclusively by Stripe (PCI-DSS compliant)
Firestore security rules restrict data access to authorized users only
Regular security reviews of our codebase and infrastructure

8. Children's Privacy

The App is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.

9. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We rely on Standard Contractual Clauses (SCCs) and Google's Data Processing Addendum to ensure adequate protection levels.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or email. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For questions about this Privacy Policy or your personal data:

Email: contact@xistenceapp.com
Support: page d'aide et contact
Online version: la présente page
Siège: Bruxelles, Belgique

L'adresse postale complète du siège sera publiée dès l'immatriculation de la société.