How we protect your data

Zarkili helps nail salons and their clients manage bookings, messages and loyalty. This page explains in plain words what we do to keep that information safe. For full details, see our Privacy Policy.

Payments

Salons pay their Zarkili subscription through Stripe, on Stripe’s own secure pages. Card details go straight to Stripe; we never see or store card numbers. Clients don’t pay through Zarkili at all.

Encryption

Everything between your device and our services (the app, the website and our servers) travels over encrypted HTTPS connections. The data we store is also encrypted at rest by our cloud provider.

Each salon’s data stays separate

Every time data is read or changed, our servers check who is asking and which salon they belong to. A salon can only reach its own clients, bookings and messages, and a client can only reach the salons they have joined. This is enforced on our servers, not just hidden in the app, and we test it automatically. Zarkili’s own staff can access salon data to run and support the service; our Privacy Policy describes exactly what they can see.

Staff accounts

Zarkili staff accounts with platform-wide access require two-step sign-in: a password plus a code from an authenticator app.

Backups

Our database is backed up every day. If something goes wrong, we can also restore it to an earlier point in time.

Protection against abuse

We limit how often sensitive actions can be repeated in a short time, to slow down misuse and automated attacks.

Automated checks

Every change to our code runs automated tests, including checks that one salon cannot reach another salon’s data. Our code is also scanned automatically for passwords or keys included by mistake, and we get alerts about known security issues in the software we build on.

Your rights

Clients can download a copy of their data in the app under Profile → Export My Data. We email you a download link that works for about 7 days.

If you sign in with an email and password, you can delete your account under Profile → Delete My Account. Deletion removes your personal details and your photos. Some appointment records your salon relies on are kept, but without your name or contact details.

If you sign in another way (for example, with Google), if you are a salon owner, or if you want us to correct, restrict or stop using your data, email us at support@mobendo.com and we’ll handle it for you.

Questions or a security concern?

Write to support@mobendo.com. If you think you’ve found a security problem, please tell us there and we’ll get back to you.

Last updated: