Visino Privacy Policy
Visino is a loyalty app for salons and small businesses: the salon scans a customer's QR code, adds points after each visit and subtracts them at redemption. This page says what Visino stores, why, who else handles it, and how long it is kept.
Who is responsible
Visino is operated by Visinote. Questions about this policy or about your data go to visinote@visinote.qasoftsolution.com.
Two groups of people have data in Visino: salon owners, who hold an account, and the salon's customers, whose details the salon types in. The salon decides which customers it records and what it records about them, and Visino stores that data on the salon's behalf.
What is stored about a salon owner
- Email address, used to sign in and to send password reset messages.
- Password, stored only as a one-way hash. Nobody, including the operator, can read it back.
- Shop name, and the country used as the default for customers' phone numbers.
- Sign-in sessions and password reset requests, stored as hashes of their tokens together with when they expire.
- The subscription record: which store it was bought in (App Store or Google Play), the product, its status, when it expires, and the store's transaction identifier or purchase token. Visino never receives card numbers or any other payment details; the store handles payment.
What is stored about a salon's customers
- Whatever the salon enters of: name, phone number and its country, email address, date of birth.
- A random identifier printed in the customer's QR code.
- The visit count, the points balance, and a permanent history of every point added or subtracted, with the time it happened and the salon account that did it.
Customers do not install the app and do not create an account. They only keep the QR image the salon sends them.
A salon can give its customers a points lookup link, which ends with a short form of the salon's name. Anyone who opens it and types a phone number sees, for the customer of that salon with that number, the customer's name as the salon recorded it, the current and lifetime points, and the dates of past earnings and redemptions. Because the link can be guessed from the salon's name, anyone who knows the salon and a customer's phone number can see this. The page never shows the phone number, the email address or the date of birth, and the number typed is not stored.
Technical data
- The web server's access log records, for each request, the IP address and port, the time, the method, the host, the path without its query string, the response status, size and duration, and the request headers the app or browser sends, such as the user agent and language. Authorization and cookie headers are replaced with
REDACTED, and the Referer header is removed, before anything is written. - IP addresses are also held in the server's memory for a short time to limit repeated requests from one address, such as sign-in attempts and customer lookups. They are not written to the database.
- Application logs record request identifiers, the account and shop a request belongs to, and the app version. They are built to leave out names, phone numbers, email addresses and dates of birth.
What stays on the device
- The app keeps its sign-in tokens in the device's secure storage and a few settings, such as the chosen language, on the device.
- The camera is used only to read QR codes. Frames are processed on the device; no photo is stored or uploaded.
- A customer's QR image is drawn on the device and shared through the system share sheet, to whichever app the salon chooses. From there it is subject to that app's own policy.
What Visino does not do
- No advertising, and no tracking across other companies' apps or websites.
- No analytics, crash-reporting, advertising or attribution SDK in the app.
- No selling or sharing of data with anyone for their own use.
- No cookies on these pages.
Data is used only to run the app: to sign the salon owner in, to show and update customers and points, and to know whether the subscription is active.
Who else handles data
- Apple (App Store) and Google (Google Play) take payment for the subscription and tell Visino its status. Their own privacy policies apply to what they collect.
- An email delivery provider receives the salon owner's email address and the password reset message it carries.
- A hosting provider runs the server on which the database and the logs live.
No one else receives data from Visino.
How long data is kept
Data in use has no fixed retention period: it is kept for as long as the salon's account exists.
A salon owner can delete the account from inside the app. The account is closed at once and every session is signed out. 30 days later, everything belonging to it is permanently deleted: the shop, its customers, their points and history, the subscription record, and the sign-in data.
Deleting the account does not cancel a subscription. That is done in the App Store or Google Play, where it was bought.
For a salon's customers
There is no way for a salon's customer to have their own record deleted by asking Visino directly. This is a deliberate choice: Visino cannot verify who is asking on behalf of a salon's records. A customer who wants their details removed should ask the salon, which can delete them in the app. A salon whose subscription has ended must subscribe again before it can delete a customer.
A customer the salon deletes disappears from the app, but the record, including its point history, is kept until the salon's account itself is permanently deleted.
Security
All traffic between the app and the server is encrypted with HTTPS. Passwords and tokens are stored only as hashes, and the database keeps each salon's records separate from every other salon's.
Changes
If what Visino stores or who handles it changes, this page changes with it.