Privacy Policy
Draft — pending owner approvalTailoring App is workshop software for tailors, run by Bulu ("we", "us"). Shops use it to keep orders, customer details, measurements and karigar work in one place. This page explains what the app collects, why, where it is stored and how you can have it deleted. It applies to the Tailoring App mobile apps and the web app at app.tailoringapp.com.
Who is who
The shop that signs up is the owner of the customer and order records it enters. We store those records on the shop's behalf and use them only to run the service. Account data about the people who log in (owners, admins, staff and karigars) is collected by us directly.
What we collect and why
| Data | Why |
|---|---|
| Account data. Name, email address, mobile number, password (stored only as a hash), role, and a verified-number flag. | To create your account, sign you in, send WhatsApp login and password-reset codes, and control what each role can see. |
| Shop data. Shop name, business type, default measurement unit, products, tags and production stages. | To set up the workspace and show your own catalogue and workflow. |
| Customer details. Customer name, email, one or more phone numbers (and whether each is on WhatsApp), address, city, state, pincode and country. | So the shop can find customers, contact them and deliver orders. |
| Body measurements. Measurement values, units, notes, the garment they were taken for, who took them and when. | So the shop can stitch to the right size and compare past and new measurements. |
| Measurement photos. Photos you take or choose from your library and attach to a measurement. | To record how a customer was measured. We ask for camera or photo access only when you add a photo. |
| Order and payment records. Order number, customer, garment, quantity, price, trial and delivery dates, status, production stage, assigned karigar, notes, and whether the order is paid and by which method (cash or online). | To run the order, work board and dashboards. The mobile app records cash payments only. |
| Subscription records. Plan, status, billing dates and the payment provider's customer and subscription references. | To manage the shop's trial or subscription. Card and UPI details are handled by Razorpay, not by us. |
| Device push tokens. A token and platform (iOS or Android) for each device. | To send order due-date notifications to your phone. The token is removed when you log out. |
| Security records. Hashed session tokens with the client type and expiry, failed login attempts by email, and one-time code records (mobile number, source IP address, attempt count). | To keep you signed in, limit repeated login and code attempts, and protect accounts. |
| Assistant messages (web app). Messages you send to the in-app assistant and its replies. | To answer questions about your shop. The text is sent to an AI model provider to generate the reply. |
The apps do not use advertising or analytics trackers, do not sell data, and do not track you across other companies' apps or websites. They do not read your contacts or your location.
Who else handles data
- Our hosting provider, which runs the servers and stores backups.
- Meta (WhatsApp Business), to deliver login and password-reset codes to your mobile number.
- Razorpay, to process subscription and online payments.
- Clerk, on the web app only, if you choose Google or Apple sign-in.
- An AI model provider, on the web app only, if you use the assistant.
We share data with them only as needed to provide the service. We do not give it to anyone else unless the law requires it.
Where it is stored
Data is stored on our server in India. Measurement photos are stored on the same server and are served only to signed-in users of the shop that owns them. Traffic between the app and the server is encrypted with HTTPS. On your phone, the sign-in token is kept in the device's secure storage.
How long we keep it
- Shop, customer, measurement, photo and order records are kept while the shop's account is active, so the shop's history stays complete.
- Sign-in sessions expire automatically (24 hours on the web, 30 days in the mobile app unless you log out sooner).
- One-time codes expire within minutes.
- Nightly backups are kept for 14 days, so deleted data can remain in backups for up to that long.
Deleting your account and data
- Delete your account yourself: in the mobile app under Account, Delete account, or in the web app from the account menu. Your sign-in details are removed straight away and you are signed out on every device. If you are the shop owner and the only active member, this also closes the shop; if others are active, transfer ownership first.
- Staff accounts: a shop owner or admin can deactivate staff and karigar accounts under Setup, Users.
- Erase all shop records: to have a closed shop's customers, measurements, photos and orders permanently erased, email support@tailoringapp.com from the address on the account. We confirm it is you, erase the data within 30 days and reply when it is done.
We may keep limited records the law requires, such as payment and invoice records, for as long as the law asks.
Your choices
You can ask to see, correct or delete the personal data we hold about you. Customers of a shop should contact the shop first; the shop can edit or deactivate their records, or ask us to. You can turn off camera, photo or notification access at any time in your phone's settings.
Children
The service is for businesses and is not meant for children under 18.
Changes
If we change this policy we will update the date above and, for material changes, tell shop owners in the app or by email.
Contact
Questions or requests: support@tailoringapp.com.