Privacy Policy

Two different kinds of data live in Bella Flow, and they’re treated differently on purpose.

Your book — clients, visits, prices, tips, payouts, photos, notes — is private. It stays on your phone, and none of it is uploaded to us.

If you choose to build a public page, what you put on it is meant to be public: your service menu, your prices, your portfolio photos, where you work if you say so. That’s the point of publishing it, and it lives on our server so a stranger’s link actually works.

What we hold on a server beyond that is small: your account, the reviews your clients leave, and whatever you’ve chosen to publish on Your Page.

Your clients’ names never reach us. The app is built so it cannot send them. The only exception is a first name a client types into her own review, about herself.

We do not sell anything to anyone. There are no ads, no trackers, and no analytics SDK in the app.

You, the beauty professional using the app.

Your client, who taps a review link you sent her. She never installs anything and never makes an account. What she gives us is described in its own section below, and it is short.

Everything that makes up your book:

• Clients you add, and the notes you write about them
• Visits, services, prices, tips, and payment methods
• Payout records, pay schedule, commission rate, and workplace mode
• References to photos you attach to a payout or a client — pointers into your phone’s Photos library, or a compressed copy kept in the app if you don’t grant Photos access. Not a copy of your whole photo library, and not the image files themselves
• Goals and your app settings
• Appointments and your day closes

This is stored in the app’s own database on the device. We have no copy of it and no way to read it.

You can export your book as a JSON file at any time from Settings. That file carries your records and the photo references above — not the photo files themselves, and not anything you’ve published on Your Page, which lives on our server, not your phone.

You can clear your book from Settings or by deleting the app.

iCloud

Bella Flow keeps a recovery copy of your records in your own iCloud, in a private app container. That is Apple’s storage under your Apple ID, governed by Apple’s terms, not ours. We cannot see inside it.

It exists so a lost or replaced phone does not mean a lost book. It is a recovery copy, not live sync across devices, and normal daily use works completely offline.

An account exists so your reviews and your public page — not your book, which is what iCloud is for — come back if you get a new phone or reinstall. It holds:

About the Apple and Google identifiers. When you sign in with Apple or Google, we receive a stable ID that identifies you to Bella Flow only, plus your email address if the provider shares it. We never receive your password. We do not get access to your Apple or Google account, your contacts, your files, or anything else.

If you use Apple’s Hide My Email, we receive the relay address Apple gives us and never your real one.

If you build a public page at go.getbellaflow.com/@yourname, what you choose to add lives on our server, because that’s what makes the page work for a stranger who taps the link. Nothing here is on by default except your page name:

• Your page name, service menu and prices, portfolio photos and the albums you sort them into, social links, and the look you pick for the page (theme, font, layout)
• Your city and neighborhood, if you add them. Your exact street address only if you turn that on — it’s off by default
• One way for a client to reach you — text, call, or Instagram — only if you turn it on. Off by default
• A booking link, if you add one

Portfolio photo files themselves are stored with Vercel Blob, our file-hosting provider, not directly by us. See “Who else touches this data” below.

Your Page is built to be found. Unlike your review pages, which we tell search engines not to index, Your Page opts into indexing on purpose — that’s the point of having one. If you don’t want a public page at all, don’t build one; nothing here exists until you do.

When someone taps the booking or contact button on your page, we log that a tap happened — which button, and the website that sent them there, if any — so you can see whether your page is doing anything. We don’t log who tapped it: no cookie, no IP address, no account, nothing that identifies a visitor. A tap means somebody pressed a button. It doesn’t mean they booked or showed up.

When you tap “Ask for a review”, the app creates a review request and sends us:

• A one-time link token
• The service label, for example “Fill + Pedicure”
• The date of the visit
• Whether you shared the link by text, copy, or QR code

Not the client’s name. The app does not have a way to send it. That is enforced in the code, not left to a setting you might change by accident.

What your client gives us

On the review page, she can provide:

• A star rating, 1 to 5. Required.
• Written feedback, up to 500 characters. Optional.
• Compliment tags, stored as language-neutral keys rather than text. Optional.
• Her own first name. Optional, typed by her, about herself.

That last one is the only client name that ever reaches us, and she is the one who chooses to give it. The review form doesn’t ask her age — see Children below.

Review pages carry a noindex instruction, so search engines are told not to list them.

We use these companies to run the service. They process data on our instructions and nothing more.

Our marketing site at getbellaflow.com uses Vercel Analytics to count page visits in aggregate. No cookies, no fingerprinting, no profile of you.

The marketing site can also use Google Analytics, and this one is your choice. The first time you visit we ask, and nothing is sent to Google unless you say yes — the script is not loaded at all until then. If you accept, Google Analytics sets cookies and gives us aggregate numbers on which pages people read and how they found the site. If you decline, it never loads and Vercel Analytics carries on counting visits without cookies. You can change your mind by clearing this site’s data in your browser, which makes us ask again.

We have turned off the advertising side of it. Google Signals is disabled on the property, and advertising storage, ad user data and ad personalization are refused on every page whatever you choose. We do not run ads and we do not build advertising audiences from your visit.

None of this touches the app. Bella Flow on your iPhone contains no analytics of any kind, as described below.

The app itself contains no advertising, marketing, or analytics-tracking SDK. No Firebase, no Mixpanel, no Segment, no Meta Pixel, no Google Analytics.

• We do not sell your data. Not to anyone, not ever.
• We do not share it for advertising.
• We do not read your book. We cannot; it is not on our servers.
• We do not email you marketing because you signed up. Your address is for getting you back into your account.
• We do not use your data to train machine learning models.

Specifics, because “we take security seriously” means nothing:

• Sign-in codes are stored as a one-way hash, never as the code itself, and expire in 10 minutes.
• Device keys are stored as a one-way hash. The key itself is shown to your phone once and never again.
• In our database, IP addresses used for abuse limits are salted and hashed before they’re ever written down — we don’t store yours in readable form there.
• Like any web host, our infrastructure provider may keep its own short-lived server logs of requests; those aren’t part of our database and we don’t read them.
• Email addresses used for abuse limits get the same salted-hash treatment in our database.
• Everything travels over HTTPS.

No system is perfect, and we will not pretend otherwise. This is what we actually do.

Your book: yours, on your phone. Clear it from Settings or delete the app. We never had a copy.

Your account, page, and reviews: kept while your account exists, because that is what makes your work come back on a new phone.

Delete your account any time from Settings → Delete Account, right in the app. Everything in our database goes immediately and for good — your identity, email or sign-in link, reviews, review requests, and everything you published on Your Page: page settings, location, contact info, service menu, and links. There’s no confirmation step after you tap through, and there’s no way for us to undo it.

Your photos come off Your Page the moment your account is deleted, along with everything else on it. Removing one photo at a time, on its own, also deletes that photo’s file from our storage provider. Deleting your whole account doesn’t yet do that same file cleanup for every photo at once — the files stay in our storage provider’s system, unlinked from anything and invisible to anyone, until we close that gap. If that matters to you, remove your photos individually before you delete your account.

If you’ve never received a review, your page name goes back into the pool for someone else to claim. If you have, your page name is retired for good — nobody else can ever take it, and a link to it stops resolving rather than resolving to someone new.

If you’re locked out of the app and can’t get to Settings, email bellaflow@alevyn.io from the address on the account and we’ll delete it by hand.

Sign-in codes are deleted the moment they are used, and expire on their own regardless.

Bella Flow’s accounts are for working beauty professionals, who must be 18 or older under our Terms of Service.

A client leaving a review through a link you send her isn’t creating an account and isn’t asked her age — the review form only asks for a rating and, optionally, written feedback, compliment tags, and her own first name.

Either way, Bella Flow is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has given us information, email us and we will remove it.

If this policy changes in a way that affects what we collect or how we use it, we will update this page and change the date at the top. Material changes get an in-app notice as well.

bellaflow@alevyn.io

Bella Flow is operated by Alevyn LLC.