Privacy

Who we are

MIORA is run by SEDR APPS - L.L.C - S.P.C, Abu Dhabi, trade licence CN-6327448. We decide how your data is used. Write to us at hello@miora.one.

What we hold

Your mobile number, your name if you gave one, your visits and their bills, your gifts, your favourites, your preferences and message choices, the messages we sent you, the words you leave after a visit, a device token for notifications, a one-way fingerprint of the connection you signed in from, and four things about the card you saved.

On your first visit, the salon tells us if you were already its client. We keep that only to see if MIORA brings new clients.

If you came through one of our links, such as an Instagram post, a small cookie keeps the link's name for 30 days. When you sign in or book, we keep it with your account and your visits, only to see which of our posts bring people.

If you write to us on WhatsApp, we keep your number, your WhatsApp name, what you wrote and our answer, for 12 months after your last message.

Nearest sorts salons on your phone. Your location never leaves it.

Your number

Your number is kept so we can send you the messages about your visits — a confirmation, a bill, a gift. Beside it we keep a one-way fingerprint of it, which is how we recognise you when you sign in and how we notice the same number arriving twice through a friend's link. We never sell it. We never show it to a salon. Deleting your account removes both.

Your card

Never touches us. It goes straight to our payment processor. We keep four things about it: the last four digits, the expiry, a reference to it, and a fingerprint that cannot be turned back into the number, which we use to catch referral fraud and nothing else. We keep them for as long as the card is saved, and for seven years after that in the financial record of any visit it paid for. Saving a card also keeps your internet address and app or browser details, as proof you agreed to the card terms.

Photographs

We never photograph a salon or anyone in it, and no client is ever shown. A salon may give us a photograph of its own room, and we may ask for one; it appears on the salon's page and card as the salon's own picture.

What the salon sees

Your name and your visit. Never your rate, never what you paid us, never any other salon you go to.

If you tell us how a visit went, the salon's owner reads your words a few days later, without your name or the date — unless you mark something wrong, which only MIORA reads.

Who else sees it

Stripe for payments, Twilio, WhatsApp, Telegram and Microsoft for messages and email, Expo (and through it Apple or Google) for notifications, Hetzner for our servers, and Anthropic for the AI tools we use to run MIORA. Each handles your data only for us, and may hold it outside the UAE, including in Germany and the United States. The salon sees your name and its visits with you. Where the law requires it, the tax authority or a court. Nobody else, and we sell nothing to anybody.

How long

Financial records for seven years, because we have to. What we keep about your card, for as long as the card is saved — remove it on You and it goes — except where it is part of one of those records. Sign-in codes for minutes. The link cookie for 30 days. Everything else until you ask us to remove it.

After you delete your account, the records of what you paid stay for seven years without your name or number, because both we and the salon must keep them.

Your rights

Ask us for a copy of what we hold, or ask us to correct it: hello@miora.one, and we answer within thirty days.

Delete your account from You, on the app or the web. Within seven days everything that identifies you is gone — your name, your number, your cards, your favourites, and your preferences. Or write to hello@miora.one and we answer within thirty days.

Messages

We send you what a visit needs — a confirmation, a bill, a receipt. You choose the rest, per salon, on your account, and can turn any of it off there without losing the visit messages.

Notifications reach your phone through Expo, which hands them to Apple or Google to deliver. They receive a device token, the words of the message, and a link that carries nothing more than a booking or bill reference — never your name, your number, or what you booked.