Privacy Policy
Last updated: July 28, 2026 · Tiếng Việt
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Lobri customer application (the "Service") to discover, book, and pay for nail, hair, and spa services, and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
If You are a technician or salon owner, the Lobri Partner Privacy Policy applies to You instead.
Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Application refers to the Lobri customer app, the software program provided by the Company for booking nail, hair, and spa services.
- Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to Eastin Technology, a brand of Logan and Brielle LLC.
- Country refers to: Oklahoma, United States.
- Customer ("You") means an end user who books services through the Service.
- Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Salon means a salon listed on the Service where services may be performed.
- Service refers to the Application.
- Service Provider means any natural or legal person who processes the data on behalf of the Company.
- Technician (or "Tech") means a licensed nail, hair, or spa professional who provides services to Customers through the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You means the individual accessing or using the Service as a Customer.
Collecting and Using Your Personal Data
Types of Data Collected — Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address
- First name and last name
- Phone number
- Address, State, Province, ZIP/Postal code, City (for example, for an at-home visit)
- Profile photo
- Messages You send and receive through the in-app chat, including any photos attached to them
Payment Information
Payments and applicable sales tax are processed by our payment processor, Stripe, Inc. We do not collect or store full payment card numbers on Our servers. Payment-related information (such as transaction identifiers) is handled by Stripe under its own terms and privacy policy.
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type and version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers, and other diagnostic data. When You access the Service through a mobile device, We may collect the type of device, its unique ID, IP address, mobile operating system, and similar diagnostic data.
Information Collected while Using the Application
This information may be uploaded to the Company's servers and/or a Service Provider's server, or it may be simply stored on Your device, and is used to provide and improve features of Our Service. Device permissions are described in the next section.
Device Permissions and Their Purposes
With Your prior permission, the Application requests access to the following device capabilities. Each permission is requested only to provide a specific feature, and You can grant or revoke any of them at any time through Your Device settings.
- Location (foreground only): the Application accesses location only while it is open and in use — to show nearby Technicians and Salons and calculate distance for radius-based search and at-home visits. Lobri does not access or track Your location in the background.
- Camera: to capture a profile photo, or a photo You choose to attach to a review or a dispute.
- Photo Library / Files: to let You upload existing images for Your profile, a review, or a dispute.
- Push Notifications: to send booking updates, reminders, payment notices, and chat messages.
Lobri does not request access to Your microphone, contacts, calendar, or health data. If a permission is denied, the related feature may be unavailable, but You can continue to use the rest of the Service.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor its usage.
- To manage Your Account and Your registration as a Customer.
- To facilitate bookings and services, including matching You with Technicians and Salons and sharing the information necessary to complete an appointment at a salon, a tech's studio, or Your home.
- To process Your payments and taxes, including authorizing and holding funds in escrow and calculating sales tax.
- To enable communication between You and Technicians, including real-time chat with automatic translation between Vietnamese and English.
- To run referrals and community features, including referral rewards and interactions in the Explore feed.
- To contact You by push notification, SMS, email, or telephone regarding bookings, security updates, and related communications.
- To manage Your requests and to handle reviews, disputes, and complaints.
- For trust, safety, and fraud prevention, including investigating violations and protecting users.
- For business transfers and to analyze usage and improve our Service.
We may share Your personal information in the following situations:
- With Service Providers to operate, monitor, and analyze the Service, process payments and taxes, send messages, store data, moderate content, and contact You.
- To complete a booking — when You book a service, We share the information needed to deliver it (for example, Your first name and booking details with the assigned Technician and Salon).
- For business transfers in connection with any merger, sale of Company assets, financing, or acquisition.
- With Affiliates, whom We require to honor this Privacy Policy.
- With other users, where You interact in public areas of the Service (such as reviews and the Explore feed), in which case such information may be viewed publicly.
- For legal reasons, where required to comply with the law or valid requests by public authorities.
- With Your consent, for any other purpose.
We do not sell Your personal information.
SMS & Text Messaging
We use Twilio to send transactional text messages such as one-time passcodes (OTP), account and booking notifications, and partnership or staff invitations, to users who provide their phone number and consent during signup or when a verified salon sends an invitation. Message frequency varies and message and data rates may apply. You can opt out at any time by replying STOP, or reply HELP for assistance.
Text messaging originator opt-in data and consent are NOT shared with any third parties or affiliates for marketing or promotional purposes.
Retention of Your Personal Data
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. Unless otherwise stated, the periods below are maximums and We may delete or anonymize data sooner when it is no longer needed:
- Account Information
- When You delete Your account (permitted only when You have no active bookings), We permanently scrub Your personal information within 30 days, except records We must keep by law.
- Financial Records
- Transaction records are retained as required to meet legal, tax, and trust-and-safety obligations.
- Booking, Support & Usage Data
- Bookings, support tickets, chat transcripts, and server logs are retained for a limited period to resolve inquiries and disputes, support quality, and maintain security, and uploaded files not attached to a booking are removed automatically.
When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period and are not restored except where necessary for security, disaster recovery, or legal compliance.
Transfer of Your Personal Data
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction. Where required by applicable law, We ensure that transfers of Your Personal Data are subject to appropriate safeguards, and no transfer will take place unless there are adequate controls in place including the security of Your data.
Delete Your Personal Data
You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You. You may delete Your account from within the Service's account settings (when You have no active bookings) or by contacting Us; Your personal information is then permanently scrubbed within 30 days. You may also update or correct Your information at any time in account settings. Please note that We may need to retain certain information when We have a legal obligation or lawful basis to do so — for example, transaction records.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law enforcement
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
Other legal requirements
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users or the public, or protect against legal liability.
Security of Your Personal Data
The security of Your Personal Data is important to Us. We use commercially reasonable administrative, technical, and organizational measures to protect Your Personal Data, including encryption of sensitive data at rest, access controls with role-based permissions, and audit logging of sensitive actions. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee its absolute security.
Service Providers We Use
The Service Providers We use may have access to Your Personal Data only to perform tasks on Our behalf and are obligated not to disclose or use it for any other purpose. These providers process information in accordance with their own privacy policies:
- Payments & sales tax: Stripe, Inc. (Stripe, Stripe Tax) — stripe.com/privacy
- SMS (one-time passcodes): Twilio Inc. — twilio.com/legal/privacy
- Chat translation: Google Translate (Google LLC) and DeepL SE — policies.google.com/privacy, deepl.com/privacy
- Image moderation & cloud storage: Amazon Web Services, Inc. (Amazon Rekognition and Amazon S3) — aws.amazon.com/privacy
- Address geocoding: Google Maps Platform (Google LLC) — policies.google.com/privacy
- Database & caching: MongoDB, Inc. (MongoDB Atlas) — mongodb.com/legal/privacy-policy — and a managed Redis service for caching and rate limiting.
- Push notifications: Expo (650 Industries, Inc.), delivered via the Apple Push Notification service and Firebase Cloud Messaging — expo.dev/privacy
- Analytics & crash reporting: Google Firebase (Firebase Analytics and Crashlytics, Google LLC) — firebase.google.com/support/privacy — and Sentry (Functional Software, Inc.) for error and performance monitoring — sentry.io/privacy. These process diagnostic and usage data (such as app events, device and OS type, and crash reports) using an internal user identifier, and are not used to track You across other companies' apps or websites.
- Email (receipts): our email/SMTP provider.
- Sign-in providers: Apple Inc. (Sign in with Apple) and Google LLC (Google Sign-In) — apple.com/legal/privacy, policies.google.com/privacy
App distribution is provided by the Apple App Store and Google Play, each subject to its own terms and privacy policy.
Push Notifications and Platform Services
To deliver push notifications, the Application relies on the operating-system services of Your device — the Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (Google) on Android — together with Expo. These services process a device push token and the notification content needed to reach Your device. You can disable push notifications at any time in Your Device settings. The Application is distributed through the Apple App Store and Google Play, and Your download and installation are also subject to those stores' own terms and privacy policies.
Automated and AI Processing
Some features of the Service use automated processing, including artificial intelligence:
- Chat translation: messages may be translated automatically between Vietnamese and English; the original text remains available.
- Content moderation: images posted in public areas (such as the Explore feed) are automatically screened, and content flagged as unsafe is hidden pending review.
- Dispute photo assessment: photos may be analyzed to help assess a dispute. Automated analysis assists Our team — a human reviewer makes the final decision, and decisions are recorded in an audit log.
Your Rights
Subject to applicable law, You have the right to access the personal information We hold about You, to correct inaccurate information, to request deletion, to object to or restrict certain processing, to request a copy of Your data in a portable format, and to withdraw consent where processing is based on consent. You may exercise most of these rights from within the Service's account settings, or by contacting Us. We will respond within the timeframes required by applicable law and may need to verify Your identity first.
Your U.S. State Privacy Rights
Depending on Your state of residence, You may have additional rights under state privacy laws — for example, the Texas Data Privacy and Security Act (TDPSA) and the California Consumer Privacy Act, as amended (CCPA/CPRA). These may include the right to know, access, correct, delete, and obtain a portable copy of Your personal information, and the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising.
We do not sell Your personal information and We do not share it for cross-context behavioral / targeted advertising. To exercise any of these rights, contact Us using the details in the "Contact Us" section. We will verify Your request before acting on it, will not discriminate against You for exercising these rights, and will respond within the timeframes required by law.
Children's Privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date above. We will let You know via email and/or a prominent notice on Our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
- By email: eastintechnology@gmail.com
- By mail: Logan and Brielle LLC, 22455 Pine Bluff Way, Edmond, OK 73025, USA