TIMELY CUT PRIVACY POLICY Effective September 14, 2026 Timely Cut helps customers discover hair and barber professionals and helps providers manage appointments, clients, and communications. This policy explains what information we use and the choices available to you. Information we collect - Account information: name, email address, account role, and authentication identifiers. - Booking information: selected business, service, stylist, appointment time, notes, status, and provider checkout records. - Time requests: preferred appointment time, contact name, phone number, notes, permission to share your contact details with the selected shop, and the request outcome. - Provider information: business profile, address or service area, hours, staff, services, portfolio details, policies, clients, and campaign records. - Portfolio photos: photos a provider selects for upload are associated with their business and displayed publicly. The app accesses only selected library items, resizes them, and removes embedded location metadata before upload. Photos are hosted in Supabase Storage and can be removed by the owner from the portfolio. Account deletion also removes uploaded portfolio files; cached public copies may take time to expire. - Location: your device location when you grant permission, used to show nearby businesses. You can deny or revoke location access in iOS Settings. - Reviews and favorites: ratings, review text, saved providers, and related activity you choose to submit. - Messaging information: client phone numbers, SMS consent and opt-out status, campaign content, and delivery status when a provider uses text messaging. - Purchase and payment information: provider subscription status, App Store transaction identifiers, connected payment-account status, appointment payment status, and Stripe transaction references. Timely Cut does not receive or store complete payment-card numbers or bank-account credentials. - Technical information: basic request, authentication, and error logs needed to secure and operate the service. How we use information We use information to authenticate users, provide discovery and booking, maintain provider schedules, prevent conflicting appointments, support rebooking, deliver opted-in messages, respond to support requests, protect the service, and meet legal obligations. Service providers Timely Cut uses Supabase for authentication, database, photo storage, and server functions; Google Places for nearby business and public rating information; Twilio for provider-initiated SMS delivery; Stripe for provider onboarding and payments for real-world appointments; and Apple for App Store subscriptions and transaction verification. These companies process information only as needed to provide their services and under their own privacy terms. SMS and consent When you submit a time request, you choose whether to share your phone number with that shop so the barber can call or text you about arranging a time. This is not consent to marketing. A time request does not reserve an appointment or collect payment. Barbers may separately opt in to Timely Cut SMS request alerts by sending the activation text from the phone that should receive alerts. We record the verified number and consent time. Alerts may include the requesting customer's name, preferred time, and consented contact number. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe, HELP for help, or turn off alerts in the app. Requests remain available in the app even if SMS is disabled or delivery fails. Replies to a Timely Cut alert number are not forwarded to customers. Providers may send messages only to clients recorded as having consented. Every marketing message includes opt-out instructions. Replying STOP prevents further marketing messages from that sender; replying START may restore consent. Message and data rates may apply. Sharing and sales Time-request contact details are visible to the requesting customer and the selected shop owner, and are processed by Twilio when an opted-in barber alert is sent. We do not sell personal information. Information is shared with the provider involved in your appointment, with service providers described above, when you direct us to share it, or when required to protect users, enforce our terms, or comply with law. Retention and deletion We retain information while your account is active and as reasonably needed to operate the service, resolve disputes, prevent fraud, or meet legal requirements. You can initiate permanent account deletion from Profile > Account > Delete account. Deletion removes the account and associated Timely Cut data that we are not legally required to retain. Security We use encrypted network connections, access controls, row-level database security, protected credentials, and other reasonable safeguards. No system can guarantee absolute security. Children Timely Cut is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Your choices You can update profile information, revoke device permissions, manage SMS consent, sign out, or delete your account in the app. For access, correction, privacy, or deletion questions, contact us below. Changes We may update this policy as Timely Cut evolves. The effective date above identifies the current version. Material changes will be communicated through the app or another appropriate channel. Timely Cut by Cywinski Digital Crystal Lake, Illinois daniel@cywinskidigital.com