Privacy policy

1. Who we are and our role

MoLu connects customers with salons, barbershops and centres (“businesses”) and lets them take bookings. When you book, the business sees your booking details to serve you and is responsible for how it uses them for that service.

2. Data we collect from customers

When you book: your name and mobile number, the service, time and staff member, and any note you write. For home visits: your home address, and your map location if you choose to attach it.

When you review: your star ratings and comment. Comments are public with your first name only.

When you join a waitlist: your name, number and the requested day.

Your location on the “nearest” page is used once to sort results and is not stored in our database.

We don’t ask you to create an account, and we don’t collect your card details: you pay the business at the appointment.

3. Data we collect from business owners

Name, email, mobile number and password (stored with one-way hashing), and business details: name, type, address, location, hours, services, prices, photos and staff.

If you choose to verify your business: your commercial registration number and a copy of it. We use them only to verify you; only you and the platform admin can open the copy, it is never shown to customers, and you can delete it at any time.

Subscription and payment records: plan, amount and status. Cards are processed by the payment gateway (Moyasar); we never see your card number.

4. Why we use data

To make and manage bookings (confirmations, reminders, changes, cancellations, waitlists), to show businesses and reviews, to run business accounts and subscriptions, for security and abuse prevention, and to meet legal obligations.

We don’t sell your data or use it for third-party advertising.

5. Who we share data with

The business you booked: your booking details only.

Service providers acting for us: hosting and database (Render, Neon), WhatsApp messages (Meta), payments for business owners (Moyasar), and maps (OpenStreetMap). They are bound to protect the data and may not use it for their own purposes.

Authorities, when legally required.

6. Where data is stored

Data is currently stored on servers in the European Union (Frankfurt, Germany). Transfers follow the PDPL rules for transfers outside the Kingdom, and we plan to move hosting into Saudi Arabia as the platform grows.

7. How long we keep data

Booking data is kept while the business account exists so it can serve you and keep its records, and deleted within 90 days after the account is closed, except what the law requires us to keep (such as payment records).

8. What is stored on your device

A sign-in cookie for business owners and a cookie that remembers your language. In your browser only: your favourites, links to your bookings for “My bookings”, and your name and number to speed up the next booking. Clear them by clearing this site’s data in your browser.

We don’t use advertising or tracking cookies.

9. Your rights

You can ask what data we hold about you, get a copy, correct it, ask for it to be deleted, and withdraw your consent. Write to us at privacy@molu-app.com and we’ll reply within 30 days. You may also complain to the Saudi Data and AI Authority (SDAIA).

10. Security

We use encrypted connections (HTTPS), one-way password hashing, random unguessable booking links and limited access. No system is perfectly secure; if a breach affects you, we’ll tell you and the authorities.

11. Children

The platform is for people aged 18 and over. A parent or guardian books for anyone younger.

12. Changes to this policy

We may update this policy; we’ll change the date above and tell business owners about important changes.

Contact us

Data requests: privacy@molu-app.com · support@molu-app.com · WhatsApp 0542026281