Privacy Policy

Last updated: September 17, 2026

This Privacy Policy explains what personal data Hanym (“Hanym”, “we”, “us”) collects, why we collect it, who we share it with, how long we keep it and how you can control it. It applies to:

• Hanym, the app for customers of beauty salons (Android and iOS);
• Hanym Admin, the app for salon owners and staff (Android and iOS);
• the website hanym.com.tm.

Together we call them the “Service”.

1. Who is responsible for your data

The Service is operated by Hanym, Aşgabat, Türkmenistan. For any question about this policy or your data, write to okde.hunarmen@gmail.com.

2. Data we collect

2.1. Account data

• Phone number — required to create an account and to sign in. We verify it with a one-time code sent by SMS.
• Name — shown to the salons you book with and next to the reviews you publish.
• E-mail address and profile photo — optional, only if you add them.

2.2. Bookings and orders

• Bookings: the salon, the services and options you choose, date and time, the comment you leave, the applied coupon, the booking status and cancellations.
• Orders from salon shops: the products, delivery or pickup, the delivery address, the contact phone number, your comment and the amounts.
• The payment method you choose and the payment status. We do not receive or store bank card numbers.

2.3. Content you create

• Messages and photos you send in chats with salons and with our support team.
• Reviews and ratings of salons, comments on articles.
• Favourites and likes (salons, services, hairstyles, articles).

2.4. Location

If you allow it, the Hanym app uses your device’s location only while you are using the app: to show salons on the map, to sort them by distance and to help you pick a delivery address. The coordinates are sent with the search request to calculate distances and are not saved to your profile, unless you save them yourself as part of an address. Hanym Admin uses location only when you choose to mark your salon’s position on the map. The apps never access your location in the background. Location is optional — you can pick a region and city manually instead.

2.5. Camera and photos

The apps access the camera or the photo library only when you choose to take or attach a photo: a profile photo, a photo in a chat, salon gallery, service and product images, stories or a payment receipt. Only the photos you select are uploaded.

2.6. Device and technical data

• For every device you sign in on: device name and model, operating system and its version, app version, the IP address of the last request, the time of last use and the push notification token. You can see this list and sign out any device in Account → Sessions.
• The time of your last activity in the Service.
• Server logs (IP address, time, error details) used for security and troubleshooting.
• Daily request counts per section of the Service, which are not linked to any user.

2.7. Salon owners and staff (Hanym Admin)

• The salon profile: name, description, address and map position, phone numbers, working hours, photos, services, products, prices, awards and experience. This information is public — it is shown to everyone in the Hanym app.
• Stories (checked by our moderators before customers can see them) and push mailings you send to your customers.
• Replies to reviews.
• Purchased plans and add-ons, invoices and the bank transfer receipts you upload.
• When you pay online through Töleg, card details are entered on Töleg’s side. We only receive the order number and the payment status.
• Customer data from bookings and orders at your salon, which you must use only to serve those customers.

2.8. What we do not collect

We do not access your contacts, calendar, microphone, health data or the advertising identifier (IDFA / Advertising ID), and we do not collect your activity in other apps or websites.

3. How we use your data

• to create your account, verify your phone number and keep the account secure;
• to make bookings and orders and pass them to the salon, to run chats, reviews and favourites;
• to send notifications about your bookings, orders, messages and account; a salon you have booked with may also send you news and offers — you can turn notifications off in your device settings at any time;
• to answer your support requests;
• to moderate stories, reviews and comments and to prevent fraud and abuse (for example, limits on sign-in attempts);
• to process payments for salon plans;
• to keep the Service working, fix errors and understand the overall load;
• to comply with the law.

We do not sell personal data, do not use it for personalised advertising and do not use it to track you. Banners in the app are the same for everyone; we only count how many times a banner is opened.

4. Who we share data with

4.1. Salons

When you book, place an order or write to a salon, that salon receives your name, phone number, the details of the booking or order, the delivery address and your messages. The salon uses this data to serve you and is responsible for how it uses it.

4.2. Other users

Your reviews are public and are shown with your name. Salon profiles are public.

4.3. Service providers

• Google Firebase Cloud Messaging (Google LLC) — delivers push notifications; receives the device token and the text of the notification. Privacy information.
• Map tile server (currently map.telecom.tm) — draws the map; the request contains your IP address and the map area being displayed.
• Mobile network operators — deliver the SMS with your sign-in code to your phone number.
• Töleg — processes online payments in Hanym Admin.
• Hosting provider — stores the servers of the Service.
• Navigation apps — when you tap to get directions, the salon’s address is opened in the maps app you choose (for example Google Maps, Apple Maps or Yandex Maps), whose own privacy policy applies.

Providers receive only the data needed for their task and may not use it for their own purposes. We share data only with providers that protect it at a level equal to the protection described in this policy.

4.4. Legal requirements

We may disclose data when required by law or a lawful request of a state authority, or when needed to protect the rights and safety of users, salons and the Service.

5. How long we keep data

• Account data, favourites, messages and reviews — while your account exists, or until you delete them.
• Sign-in codes are valid for 5 minutes and cannot be used afterwards.
• Sessions and push tokens — until you sign out or end the session in Sessions.
• Server logs — as a rule no longer than 90 days.
• Booking, order and payment records are needed by salons for their accounting and may be kept for the period required by law. After your account is deleted they are kept without your name and contact details.

6. Security

Data is transferred over encrypted connections (HTTPS). Access to the admin panel is limited to authorised staff. Your phone number and e-mail are hidden from other users and are shown only to the salon you book with or order from. Sign-in attempts and code requests are rate limited. No method of transfer or storage is completely secure, but we take reasonable measures to protect your data.

7. Deleting your account

You can delete your account and personal data at any time:

• in the app: Account → Account deleting;
• on the web: https://hanym.com.tm/delete_account;
• by e-mail to okde.hunarmen@gmail.com — write from the address in your profile or include the phone number of the account; we may ask you to confirm it.

We delete the account within 30 days of the request: the profile, phone number, e-mail, photo, sessions and push tokens, favourites, messages, reviews and comments. Booking, order and payment records are kept only as described in section 5, without your name and contact details. Deleting a salon owner account also removes the salon from the catalogue.

8. Your choices and rights

• View and edit your data in Account → Profile.
• Allow or deny access to location, camera, photos and notifications in your device settings.
• See the devices you are signed in on and sign them out in Account → Sessions.
• Request a copy of your data, its correction or deletion by e-mail. We answer within 30 days.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy when the Service changes. The date at the top of the page shows the latest version. We will inform you in the app about significant changes.

11. Contact us

Hanym, Aşgabat, Türkmenistan
E-mail: okde.hunarmen@gmail.com
Support page