On this page
1. Who we are
Kresona is a booking and management platform for individual beauty salons. It is not a marketplace: each salon has its own code, and a client who joins with that code is connected to that one salon. We do not list salons publicly, we do not rank them against each other, and we do not sell client lists to anybody.
Two different kinds of people use Kresona, and the data involved is different for each:
- Salon owners and their staff, through Kresona Partner. A salon uses Kresona to keep its own records — its clients, its staff, its bills.
- Salon clients, through Kresona Book, to book appointments at the one salon they are connected to.
For the records a salon keeps about its own clients and staff, the salon decides what goes in and Kresona stores it on the salon's behalf.
2. What we collect
When you create an account
- Your mobile number, which is how you sign in. We send a one-time password to it; we do not use passwords for salon or client accounts.
- Your name.
- For a salon: the salon's name, address, city, whether it serves men, women or both, and an optional salon photo.
- Optionally, a referral code if somebody told you about Kresona.
What a salon records in the app
- Clients — name, mobile number and, if entered, age. Salons often add walk-in clients who have never installed the app.
- Staff — name, gender, date of birth, address, mobile number and, if entered, email, education, years of experience, monthly salary, a photo and a short note.
- The salon's own catalogue — services, packages, retail products, offers and coupon codes.
- Money — bills and their line items, discounts and coupons used, payments collected and how they were paid, outstanding dues, and business expenses.
- Portfolio media — photos and videos the salon uploads to show its work.
When an appointment is booked
- The services chosen, the date and time, the price and duration as they stood at the moment of booking, any note the client added, and any note the salon added when confirming, rejecting or cancelling.
Automatically
- A notification token for each device that has the app installed and notifications enabled, so we can tell you about a booking. It identifies the app installation, not you personally.
- Server logs of requests made to our servers, kept for security and for finding faults.
What we do not collect. Kresona has no advertising, no analytics or tracking SDK, and no crash-reporting service. We do not ask for your location, your contacts, your photo library beyond the images you choose to upload, or your calendar. We never see or store card, UPI or bank details — recording that a bill was paid "by UPI" stores the word, not an account.
3. Why we collect it
| What | Why |
|---|---|
| Mobile number | To sign you in, and to tell one account from another. A salon also uses a client's number to find them at the counter. |
| Salon and catalogue details | To show clients the right menu, the right prices and the right opening hours. |
| Bookings | To hold the slot, to stop two clients being given the same one, and to show both sides what was agreed. |
| Bills, payments and expenses | To let a salon run its own accounts, chase its own dues, and know what it earned. |
| Staff records | To let a salon manage its team and record who served which client. |
| Notification token | To send the handful of notifications the platform sends: a new booking, a cancellation, a confirmation. |
| Server logs | To keep the service secure and to diagnose faults. |
We do not use any of this to build advertising profiles, and we do not sell it.
4. Who can see it
- Your salon sees its own clients, staff, bookings, bills and expenses. It cannot see another salon's records.
- A client sees their own bookings and the details of the one salon they are connected to. Clients never see each other, and they do not see a salon's bills, expenses or staff records.
- Kresona operators — the small team that runs the platform — can see salon accounts in order to set them up, provide support and investigate faults. Access is limited to what the job needs.
- Nobody else. We do not sell, rent or share personal data with advertisers, data brokers or other salons.
We may disclose information if the law requires it, or where it is necessary to protect the safety or rights of a person or of the platform.
5. Third parties
We use as few outside services as possible. Today they are:
- Google Firebase Cloud Messaging — delivers notifications to your device. It receives the notification token and the message text.
- Google Firebase Remote Config — tells the app which server address to use, so that a change of server does not require a new app release. It sends configuration to the app; it does not send your data anywhere.
- Cloud hosting and file storage — our servers, database and uploaded portfolio media are hosted with a cloud provider. Data is stored on servers in India where the provider offers it.
WhatsApp promotions are a special case. When a salon sends a promotion by WhatsApp, Kresona composes the message and hands it to WhatsApp on the salon owner's own phone; the owner sends it from their own WhatsApp account. Kresona does not send WhatsApp messages, and once a message is in WhatsApp it is covered by WhatsApp's privacy policy, not ours.
6. How long we keep it
- While your account is active, we keep the records described above so the app works.
- Bookings, bills and expenses are kept as a salon's business records for as long as the salon needs them, and for as long as tax law requires them to be kept.
- Notification tokens are deleted as soon as we learn a device is no longer reachable, or when you sign out.
- Server logs are kept for a short period and then discarded.
- After an account is deleted, see Delete your account for what goes and what stays.
7. Security
- Traffic between the apps and our servers is encrypted in transit.
- Sign-in uses a one-time password sent to your mobile number; sessions use signed tokens that expire.
- Back-office accounts use passwords, which are stored only as salted, iterated hashes — never as readable text.
- Each salon's data is scoped to that salon at every step, so one salon cannot read another's.
No system is perfectly secure. If a breach ever affects your data, we will tell affected users and act as the law requires.
8. Your rights
You can:
- See what we hold about you — most of it is visible in the app, and you can ask us for the rest.
- Correct it. Salon and profile details are editable in the app; write to us for anything you cannot reach.
- Delete it. See Delete your account.
- Object or complain. Write to us first; you may also complain to your local data-protection authority.
If you are a client of a salon and want the salon's record of you removed, ask the salon — they entered it and they control it. If they do not respond, write to us and we will help.
9. Children
Kresona is meant for salon owners, their staff and adult clients. It is not directed at children, and we do not knowingly create accounts for anyone under 18. A salon may record a child's appointment as part of the family's booking; that record belongs to the salon and should be entered only with a parent's knowledge. If you believe a child has an account with us, write to us and we will remove it.
10. Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the date at the top. Significant changes will also be announced in the apps.
11. Contact
Questions about this policy, or about the data we hold: