Privacy Policy
A Delaware corporation. Questions go to hello@taar.io.
The short version
taar is online scheduling software for solo practitioners, from nail techs and lash artists to tutors and coaches. Providers subscribe to taar to take bookings and payments and send reminders. Their clients book through taar, and can use the taar app to keep a diary of their past sets and save inspiration.
- We collect what we need to run bookings between clients and providers. We never sell, rent or trade your data, and we don't use it for advertising.
- If you're a provider and connect Google Calendar, we use it only to keep your Taar bookings and your calendar in sync.
- You can ask us to delete your data at any time.
What we collect
If you use the match form on our website: your inspo photo, your city, the Instagram handle or phone number you give us, and which link brought you here (the campaign tags in the web address and the site you clicked through from). A person at Taar reads it and messages you back. If you'd rather we didn't, tell us and we delete it.
If you make a Taar account: your name, your email address, a phone number if you give us one, and whether you're a client or a provider. You sign in with a password or with a code we email you.
If you sign in with Google: Google gives us your name, your email address and your profile photo. We use your name and email address to create your account and sign you in. We never copy the photo into Taar, never show it and never use it for anything.
Clients: your bookings (the provider, service, time, price and any note you write), photos you add to your nail diary or attach to a booking, looks you save, providers you tag, and the approvals you give in the app. Approvals include accepting a price change and confirming you're happy with your set.
Providers (such as nail techs): your profile, menu, prices and policies, portfolio photos, your approximate area (a neighbourhood, never your address), your hours and availability, your bookings and your clients' booking notes, and your subscription status.
Where you are: if you tap "use my location", the app asks your phone for your position. We round it to about a kilometre before storing it, and keep that approximate point with a short label like a neighbourhood name, so we can show you techs near you and sort them by distance. We never store your exact position. You can type a place instead, and you can clear it at any time in the app. We never show your location to anyone else, and we don't track you in the background — we ask only when you tap the button.
If you use our contact form: your name, your email or phone number, the topic and your message, used only to reply to you.
Payments: Stripe processes all payments. Card details go straight to Stripe; Taar never sees or stores your full card number. We keep a record of each payment: amount, status and date. Providers who get paid through Taar set up their own Stripe account, and Stripe collects any identity and bank details it needs from them directly. A payment you make to a provider is created on that provider's Stripe account, so it appears in their Stripe dashboard along with the email address you gave us — the same as paying any small business that uses Stripe. If you ask us to save your card so they can charge the balance, it is saved on their Stripe account and not on Taar's, and no other provider can see or use it. Tech subscriptions bought through the App Store are handled by Apple.
Your phone: a push-notification token so we can tell you about your bookings, plus crash and error reports (see "Crash reports").
How we use it
- To run bookings: show providers' work and open times, hold and confirm appointments, send confirmations, reminders and receipts, and let a provider and their client reach each other about a booking.
- To take payments and handle refunds and disputes. If a client disputes a card payment, we may give their bank the record of the booking through Stripe: the service and price they agreed to, any price change they approved, the after photo, and their confirmation that they were happy. This protects techs from chargebacks for work they did.
- To match clients with providers whose work fits the look they want (see "Your photos").
- To keep Taar working and safe: fixing crashes, and preventing fraud and abuse.
- To answer you when you contact us.
Your photos
Photos you upload are read by an AI model to tag what's in them: shape, length, colour and technique. That covers your own sets and a nail tech's portfolio. We use those tags to match clients with techs who do that kind of work, and to make that matching better over time.
To read a photo, we send it through OpenRouter to an AI model provider. We require a provider that does not keep the photo and does not train on it; if no such provider is available, the photo is not read at all.
We never do this to anything from Pinterest (see below). Taar never creates or shows AI-generated images. Sets in a client's diary are shown on their public Taar page unless they switch that off, and a tech can only add a client's set to their own page if that set is public and the tech has approved it. Ask us and we delete your photos with the rest of your record.
Looks you add to your inspo are shown on your Taar page by default, because their purpose is to show a nail tech what you want. You can make any of them private, one at a time, and a private look is visible only to you.
Likes
You can like a set on someone's public Taar page. Two things are true about every like, and together they are the whole rule:
- The count is public; who liked it is not. Taar shows the number on a set and never shows or shares which accounts make it up — not with the person whose set it is, and not with the nail tech who did it.
- Once a week a tech is told how many people liked the sets they did, as a single number: “N people loved sets you did this week”. It names nobody, and it cannot be broken down by set, by client or by day.
We do store which account liked which set, because otherwise one person could tap the same heart a thousand times. It is used to count likes and to let you take yours back, and for nothing else.
Google Calendar (providers)
Taar Scheduling can connect to a provider's Google Calendar. It only does this if the provider chooses to connect it. Taar then asks Google for:
- the provider's Google account email address, used only to show which account is connected; and
- permission to see and edit events on the provider's calendars (Google's calendar.events permission).
What Taar does with that access:
Reads busy times. When someone looks at a provider's booking times, Taar refreshes their busy times if the last check was more than 15 minutes ago, and it checks once a day regardless. It reads four things about each event on the calendar they connected — when it starts, when it ends, whether it has been cancelled, and whether it is marked free or busy — plus a private marker Taar puts on the events it created itself, so it can tell its own apart. Nothing else is sent to us: event titles, descriptions, locations and guests are never read. Taar stores only the resulting busy ranges, and replaces all of them on every sync.
Adds Taar bookings to the calendar. Taar puts each booking on the calendar the provider connected, titled with the client's name and the service and including the client's booking note. It updates or removes that event when the booking moves or is cancelled. Taar only ever changes or deletes events it created itself, which it recognises by the private marker above.
What we store: an encrypted key that lets Taar reach the calendar (a refresh token), the connected email address, the busy times described above, and the IDs of the events Taar created.
What we never do with Google data:
- sell it
- use it for advertising
- share it with anyone except the service providers that host Taar
- let a person read it, except with the provider's permission for support, for security, or where the law requires
- use it to train AI models
Disconnecting: a provider can disconnect at any time with the Disconnect button next to Google Calendar in Taar Scheduling's setup page, or at myaccount.google.com/permissions. When they disconnect in Taar, we revoke access with Google and delete the token and the stored busy times. Events already on the calendar stay there unless they delete them.
Taar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
AI assistants (Claude, ChatGPT and others)
An AI assistant connected to Taar can search providers, read their menus, estimate prices and see open times. That information is public: providers choose to publish it.
To book, or to see your bookings through an assistant, you sign in to Taar and approve that assistant. It can then hold a time for you and see your Taar bookings. It never receives card details; payment always happens on Stripe's page.
You can see and disconnect assistants at taar.io/mcp/connections. What you type into an assistant is covered by that assistant's privacy policy, not ours.
If you connect Pinterest, we read only the boards and pins you choose. The connection is read-only: we never post, pin, comment, follow or change anything in your account.
What we read is shown back to you and to nobody else. We don't store it, we don't show it to other users, and every pin links back to Pinterest. The only thing we keep is the access token that lets us read, and only for as long as you stay connected. Disconnect whenever you like and we delete the token, or email hello@taar.io and we'll do it for you.
Texts from Taar
If you tick the box when you book, we text you about that booking: a confirmation when it is made, a reminder before it, and one follow-up afterwards. Message frequency varies and depends on how many appointments you book. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. Opting out stops the texts; it does not cancel your booking. The box is never ticked for you, and we do not text you unless you tick it. We never share or sell your phone number or your SMS consent to anyone, for any purpose, including to other companies for their own marketing. There is a page showing exactly where and how consent is collected at taar.io/sms-opt-in. Texts are sent on behalf of Taar Inc by Chacha Advisory LLC. Reply HELP to any message or email hello@taar.io for help.
Your phone number
We hold your number so a provider can reach you about a booking and so we can send the texts above. We don't share or sell phone numbers or SMS consent to anyone, and we never pass them to another company for that company's own marketing.
Crash reports and app speed
The Taar app and website send crash and error reports to Sentry so we can fix problems quickly. A report includes the screen, the app version, the device type and an internal account code (a random ID). Before anything is sent, we strip out names, email addresses, phone numbers, photos and web links.
We also use Expo for two things: push notifications, and measuring how fast the app is. The speed measurements are timings only — how long a screen took to open, and which screen it was. They carry no photos, no messages and nothing you typed.
Analytics
Our website uses Google Analytics and Vercel Web Analytics to count visits and see which posts bring people here. It also uses Microsoft Clarity, which records how people move through the page so we can see where it confuses them. Forms are masked in those recordings.
How long we keep it
We keep your data while your account is open. When you delete your account, we delete your profile, photos, diary, connections and tokens within 30 days.
We keep booking and payment records for as long as tax law and any open dispute require. Where we can, we remove your name from them.
Your choices
Delete your account and data: clients can do this in the app, under settings. Providers should email hello@taar.io and we'll do it. Either way you don't need to give a reason, and we confirm when it's done.
Get a copy of your data, or correct it: email us, or edit it in the app.
Depending on where you live (for example, California), you may have more rights over your data. We honour them for everyone.
Children
Taar isn't for children under 13, and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.
Security
Data is encrypted in transit. Calendar tokens are encrypted at rest. Only people at Taar who need access have it.
Changes
When this policy changes, we update the date at the top. For significant changes we also tell you in the app or by email.
Contacting us
Questions, corrections, or deletion requests go to hello@taar.io.
Taar Inc.