Privacy Policy
Effective 11 October 2026
Lushy is responsible for the personal information it holds, under Botswana's Data Protection Act 2024. We collect only what the app needs to work, and we never sell it.
What we collect and why
| What | From whom | Why |
|---|---|---|
| Name, email, phone number, date of birth | Everyone, at sign-up | Your account, contacting you, and keeping Lushy 18+ |
| Business name, specialties, location, bio, photos and videos of work, prices, house-call settings, unavailable dates | Pros | Showing your business to clients |
| Bookings: service, date, time, price, salon or house call, the address for a house call, status | Clients and pros | Arranging appointments |
| Messages | Clients and pros | Chat between the two people on a booking |
| Ratings and reviews | Clients | Showing a pro's rating |
| Reports and blocks | Anyone who uses them | Keeping people safe |
| Which sponsored cards you saw or tapped | Everyone who sees one | Telling the business how many people their card reached |
| A notification token for your phone | Everyone | Sending booking and message alerts |
| Your phone's location, only when you tap "use my location" | Pros | Filling in your business location; we store the address you save, not your movements |
| Your name, email and, from Google, your profile photo | People who sign in with Apple or Google | Creating your account |
Saved posts and your Client/Business setting stay on your phone. Lushy uses no advertising or analytics trackers. Pros who pay a subscription pay through DPO Group on lushyapp.com; we never see or store card numbers.
Who can see it
- Everyone using Lushy: a pro's business name, posts, prices, location, rating and reviews.
- The other person on a booking: your name, photo and phone number, and for a house call, the address.
- Sponsored businesses: only totals, such as "seen by 312 people". Never who you are.
- Companies that run Lushy for us: Supabase (database and sign-in), Expo, Apple and Google (notifications and sign-in), Vercel (website) and DPO Group (pro payments). They may store data outside Botswana.
- The authorities, when the law requires it.
How long we keep it
- Your information stays while you have an account.
- Deleting your account (Settings → Security & Privacy → Delete My Account) is immediate and permanent. It removes your profile, posts and their photos, messages, and the reviews you left, and cancels your upcoming appointments.
- The other person keeps their record of past and cancelled bookings with you, including the name and phone number on the booking.
- If anyone reported your account, we keep that report without your name or contact details, so a pattern of abuse cannot be erased by starting again.
Your rights
You can ask to see the information we hold about you, correct it, have it deleted, or object to how we use it. Write to privacy@lushyapp.com and we will reply within 30 days. You can also complain to Botswana's Information and Data Protection Commission.
Children
Lushy is for people aged 18 and over. If we find an account belonging to someone younger, we delete it and everything in it.
Changes and contact
We will tell you in the app at least 14 days before an important change. Questions: privacy@lushyapp.com, or Lushy, Gaborone, Botswana.
See also the Terms of Service.