Privacy Policy

Beru ("we", "us", or "our") operates a directory and marketplace platform that connects customers with independent beauty and grooming professionals. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our websites, mobile apps, and related services (the "Platform").

We process personal data in line with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable National Privacy Commission guidance, as well as other laws that may apply to you.

1. Who we are

For purposes of this policy, Beru is the personal information controller for data we collect through the Platform. Privacy and data-subject requests: support@beru.app.

Providers who receive your booking or messaging details through Beru may process that information as independent controllers for delivering their own services. Their practices are not controlled by this policy.

2. Information we collect

Depending on how you use Beru, we may collect:

• Account details — name, email address, phone number, password or authentication credentials, and profile information you provide.
• Booking and service data — appointment requests, times, services selected, notes, status history, and related communications needed to run bookings.
• Messaging content — messages and media you exchange with other users through the Platform.
• Provider application and profile data — business details, services, portfolio images, location or service area, availability, and documents or proofs you submit during application or KYC-related onboarding when required.
• Provider identity verification data — a photo of a valid government-issued ID, a selfie of you holding that ID, and proof-of-work files you submit when applying as a Provider (see section 2.1).
• Payment-related data — payment status, transaction references, and limited billing metadata. Card numbers and e-wallet credentials are handled by our payment partner (PayMongo); we do not store full card numbers on Beru systems.
• Location data — approximate or precise location when you use map or nearby-search features and grant permission on your device.
• Device and usage data — IP address, device type, app or browser information, log data, and security signals (including bot-protection challenges such as Cloudflare Turnstile when enabled).
• Support correspondence — messages you send to support and related account information needed to help you.

2.1 Provider identity verification

To keep the Platform safe for customers, anyone applying to be a Provider must verify their identity. As part of the application, we require:

• A clear photo of a valid government-issued ID;
• A selfie of you holding that same ID; and
• At least one proof-of-work file (for example, a certificate or sample of your work).

We use these materials only to confirm that you are who you say you are, review your Provider application, and prevent fraud, impersonation, and abuse. Government-issued ID details are treated as sensitive personal information under the Data Privacy Act, and we process them on the basis of your consent when you submit them and our legal and legitimate interest in operating a safe marketplace.

Your ID photo, selfie, and proof-of-work files are never shown on your public profile or to customers. Access is limited to you and authorized Beru staff who review Provider applications. The files are stored with our cloud storage provider (Amazon Web Services). We keep them while your application is under review and while your Provider account is active, and afterward only as long as needed for fraud prevention, dispute resolution, or legal requirements. You may request deletion by emailing support@beru.app; deleting these materials may mean we can no longer keep your Provider account verified or active.

If you do not want to provide these materials, you can still use Beru as a customer, but we will not be able to approve your Provider application.

3. How we use information

We use personal data to:

• Create and authenticate accounts and operate the Platform;
• Enable discovery, bookings, messaging, favorites, and Provider tools;
• Process payments and subscriptions when those features are enabled;
• Send transactional notices (for example, verification codes, password resets, booking updates) when email or messaging is configured;
• Review Provider applications, verify Provider identity, and enforce Platform rules;
• Secure the Platform, prevent fraud and abuse, and debug reliability issues;
• Improve product features and understand aggregate usage;
• Comply with legal obligations and respond to lawful requests.

Depending on the context, our bases for processing include: performing a contract with you (providing the Platform), our legitimate interests in operating and securing a marketplace directory, your consent where required (for example, precise location or optional communications), and compliance with legal obligations.

4. Sharing of information

We do not sell your personal information. We may share data with:

• Providers and establishments you interact with — for example, name, contact details, and booking or message content needed to fulfill an appointment;
• Service providers (processors) acting on our instructions, such as hosting and infrastructure, object storage for uploads, email delivery, payment processing (PayMongo), security/bot protection (for example, Cloudflare Turnstile), and web analytics (for example, Vercel Analytics on our website);
• Professional advisors or authorities when required by law, to protect rights and safety, or in connection with a corporate transaction.

5. Cross-border processing

Some infrastructure and processors may store or process data on servers located outside the Philippines. Where we transfer personal data internationally, we take steps appropriate under applicable law to protect it, including contractual safeguards with processors where required.

6. Retention

We keep personal data only as long as needed for the purposes described above, including to maintain your account, complete bookings, resolve disputes, enforce our Terms, and meet legal, tax, or security requirements. When data is no longer needed, we delete or anonymize it within a reasonable period, subject to backups and legal holds.

7. Security

We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Your rights

Under the Data Privacy Act and related rules, you may have the right to:

• Be informed about how your personal data is processed;
• Access personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Object to processing in certain cases, or withdraw consent where processing is based on consent;
• Request suspension, blocking, or removal of personal data under applicable conditions;
• File a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise these rights, email support@beru.app with enough detail for us to verify your identity and respond. We may need to retain certain information where the law requires it or where deletion would impair Platform security or ongoing disputes.

9. Cookies and similar technologies

We use cookies and similar technologies that are necessary for authentication, session management, security, and core Platform functionality. Our website may also use lightweight analytics to understand traffic. You can control cookies through your browser settings; disabling essential cookies may break sign-in or other features.

10. Children

Beru is not directed to children under 18. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us personal data, contact support@beru.app so we can take appropriate action.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the Platform after changes take effect means you acknowledge the updated policy.

12. Contact

Privacy questions or requests: support@beru.app