Versione italiana  |  English

JoyInCloud Privacy Policy

Last updated: 6 October 2026

JoyInCloud is an application for booking services at beauty salons. This policy explains what personal data we collect, why we process it, who we share it with and what rights you have. It applies to the web version and to the mobile app.

The mobile app is distributed through the official stores: Google Play for Android and the App Store for iOS. The store you download the app from is an independent party: Google or Apple process, on their own behalf, the data relating to your store account, the download and updates, under their own privacy policies. We do not receive your payment details or your store account identifier from them.

1. Who processes your data

The data controller is:

2. What data we collect

We only collect the data we need to let you use the app.

• Account data: first name, last name, email address, password, gender.
• Signing in with Google: optional. You can register and sign in with your Google account instead of using an email address and password. If you do, we receive from Google a unique account identifier, your email address together with whether it is verified, and your name, which we use as the initial profile details and which you can change. We never receive your Google password and we do not request access to Gmail, Calendar, Drive or any other Google service. The technical data needed to validate an individual sign-in is used only during that request and is not stored. The link to your Google account stays associated with your account until you unlink it; after unlinking, only the technical record needed to stop that same Google account from being improperly re-linked to another profile remains, and it is deleted together with your account.
• Signing in with Apple: optional on the web and in the iOS app. Apple sends us a unique identifier, your real or private-relay email address and its verification status and, only on the first authorization, your first and last name. We retain the technical link and an encrypted refresh token used only to revoke authorization when you unlink Apple or delete the account. ID tokens, authorization codes and nonces are processed only for the request and are not retained. We never receive your Apple Account password.
• Phone number, entered in your profile.
• Consents: consent to data processing and consent to promotional communications, collected at sign-up and stored together with your account.
• Booking history: the appointments you book, with salon, service, date and time.
• Reviews: optional. After a service booked through the app you can leave the salon a numeric rating and, if you wish, a comment. Alongside the review we process the name you are shown under and the date it was published. The review is public: anyone opening the salon's page can see it. We also process the reports we receive about a review, so that we can check and moderate it.
• Favourite municipality: optional. If you mark a municipality as your favourite, we save it in your profile so we can offer it again when you open the app. Only one is kept: choosing another replaces the previous one, and you can remove it whenever you want.
• Location: optional. The "Use my location" feature runs only when you trigger it: if you do not tap it, the app does not access your location. On Android it requests approximate location only; on iOS it respects the accuracy level you authorize in system settings. It never runs in the background: the app does not access your location while it is closed or in the background. The coordinates of that single request are sent over HTTPS to the JoyInCloud backend and used temporarily to identify the nearest administrative municipality, using ISTAT geographic data, and are then discarded: we do not store them and we do not send them to any external geocoding service. The only thing that may be kept from that operation is the municipality you choose as your account preference. The app remains fully usable by picking the municipality manually from the list.
• Technical data for push notifications: optional in the Android and iOS apps. If you enable notifications from Profile, we process an app installation identifier, the Firebase Cloud Messaging (FCM) registration token, the platform, app version and essential technical information about the device and operating system. The FCM token identifies an app installation for delivery purposes and is not used for advertising.

Your password is not stored in clear text: the server keeps only a hash of it, that is an irreversible transformation from which the original password cannot be recovered.

3. What we do not do

In this version of the app:

• we do not use analytics or usage-statistics tools;
• we do not use crash reporting tools;
• we do not use advertising trackers or ad networks;
• we do not perform profiling or automated decision-making about you;
• we do not use Firebase Analytics: Firebase analytics collection is disabled;
• we do not process payment data: the app makes no charges, we neither receive nor store your card or other payment instrument details, and the full amount is paid at the salon (see section 7 of the Terms of Service).

We use only Firebase Cloud Messaging and Firebase Installations to deliver the push notifications you choose to enable. The app does not ask for permission at startup and FCM registration is not started automatically before you make that choice.

4. Why we process your data and on what legal basis

Consents are optional and you can withdraw them at any time by writing to the contact address in section 1. Withdrawal does not affect the lawfulness of processing carried out before it. Location consent can also be withdrawn directly from your device settings.

Push notifications are an optional service channel: you can turn them off from Profile or in Android settings without losing access to the app's other features.

5. Who receives your data

When you book an appointment, the salon you chose receives the data needed to provide the service: your name, your contact details and the booking details. The salon processes this data to manage the appointment.

To deliver push notifications we use Google Firebase Cloud Messaging and Firebase Installations, provided by Google as a data processor. Google receives the FCM token, the Firebase installation identifier and the technical data needed for delivery. The notification contains a generic title and message and pseudonymous internal booking and delivery identifiers; we do not send Firebase your name, contact details, booked service, appointment date or appointment time.

If you choose to sign in with Google, account selection and authentication are handled by Google, which processes the data tied to your Google account as an independent controller, under its own privacy policy. From Google we receive only the data listed in section 2.

The review you publish is visible to anyone opening the salon's page, together with the name you are shown under and the date. The salon being reviewed sees it in the same way.

We do not sell your data and we do not pass it on to third parties for marketing purposes.

6. Where the data is stored

Account and booking data is stored on a dedicated server located in Germany, within the European Union.

Firebase Cloud Messaging is a global service: Google and its providers may process technical data in countries outside the European Economic Area. Such transfers take place under the Firebase Data Processing and Security Terms and, where applicable, the Standard Contractual Clauses approved by the European Commission.

Signing in with Google is a global service too: if you use it, Google may process the data relating to that sign-in in countries outside the European Economic Area, under its own privacy policy and the safeguards set out there. Your account and booking data still stays on the server in Germany.

7. How long we keep it

• Booking data: 3 years, so that salon managers can review the history of their performance.
• Account data: for as long as the account exists. After a deletion request it is erased (see section 9).
• Location coordinates: not stored. They are used only for the duration of the single request, long enough to identify the nearest municipality, and then discarded. The only thing kept is the municipality you choose as your account preference.
• Link to your Google account: until you unlink it. After unlinking, only the technical record described in section 2 remains, and it is deleted when your account is deleted.
• Reviews and any related reports: kept for as long as needed to provide and moderate the feature, and in any case no longer than the life of your account: they are deleted when your account is deleted, unless the law requires us to keep them longer.
• FCM token: it is stored encrypted on our servers only while notifications are enabled. It is removed when you turn them off from Profile, sign out or Firebase reports that the token is no longer valid.
• Notification endpoint metadata: it is linked to your account and is deleted with it.
• Technical notification preparation and delivery records: normally 90 days, to verify delivery, handle errors and prevent abuse.

Google retains the Firebase installation identifier under its Firebase services privacy information. If deletion is requested through the APIs provided by Google, removal from active and backup systems may take up to 180 days.

8. Security

• All communication between the app and our servers happens over an encrypted HTTPS connection.
• Session tokens, which keep you signed in, are stored in the native apps using the device's secure storage. In the web version they are stored in the browser's localStorage.
• The password is stored on the server only as a hash.
• The Apple refresh token is encrypted on the server and decrypted only in memory to revoke authorization at the user's request.
• The FCM token is encrypted on our servers; we also use a cryptographic fingerprint to locate it without exposing the original value.
• Notifications show generic content even on the lock screen: booking details remain available only after opening the app and signing in.

9. Deleting your account

You can delete your account at any time directly from Profile in the app.

The feature requires explicit confirmation and, if your sign-in is no longer recent, a new authentication. If Apple is linked, JoyInCloud first revokes its token with Apple; if the revocation fails, the account remains active and you can retry without losing access.

On confirmation, your profile, credentials, Google and Apple identities, sessions, preferences, reviews, reports and notification endpoints are erased. Bookings and other salon commercial records are retained for the periods stated in section 7 but are unlinked from the deleted account. For assistance or to exercise your other rights, you can still write to mediamarketingsrlct@gmail.com.

10. Minimum age

The service is reserved for people aged 18 or over: booking an appointment is equivalent to entering into a contract. If we become aware of an account belonging to a minor, we delete it.

11. Your rights

Under articles 15-22 of the GDPR you have the right to:

• access your personal data and obtain a copy of it;
• ask for it to be corrected if it is inaccurate or incomplete;
• ask for it to be erased;
• ask for processing to be restricted;
• object to processing;
• receive your data in a structured, machine-readable format (portability).

To exercise these rights, write to mediamarketingsrlct@gmail.com.

If you believe the processing of your data breaches the law, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

12. Changes to this policy

If we change the way we process data, we will update this page and the last-updated date shown at the top. We invite you to check it from time to time.

13. Contact

Email: mediamarketingsrlct@gmail.com
PEC: mediamarketingsrlct@pec.it
Media Marketing S.R.L. — Via Sant'Elia 6, 95030 Gravina di Catania (CT), Italy