Privacy Policy

AJ Spa ("we") provides in-home spa booking through the AJ Spa mobile apps. This website (ajspa.app) is our public marketing site and hosts our privacy, terms, and account-deletion pages.

We collect the account details you provide (name, email, optional phone, optional photo), booking addresses, booking history, support messages you send, and device tokens used to deliver transactional notifications.

Staff location is collected only after a therapist taps On the way, and only while the app is in use, so we can detect arrival. We do not collect location in the background or when there is no active On the way booking.

Payments are processed by Paymob. Card numbers, Apple Pay, and Google Pay credentials are entered in Paymob's checkout, not in AJ Spa. We store payment status, amount, and optional saved-card last4/token returned by Paymob, never the full PAN or CVV.

We use Supabase to host the app backend. We do not sell personal data. We keep records as long as needed to provide bookings, prevent fraud, and meet legal requirements in Saudi Arabia.

You can review or update personal information in the app, request deletion in the app, or use the public deletion request form. For questions, use the contact channels published in the app and on this site when listed (we do not list placeholder phone numbers here).