01Who is responsible
Brocha is a service run by David Levi, an individual based in Little Elm, Texas, United States (“Brocha”, “we”). We are the controller of the personal data described in this policy, which covers the Brocha app and mibrocha.com.
For anything about privacy, write to support@mibrocha.com.
Each artist decides what to do with her own clients’ data that she keeps in the app (her schedule, her notes and clients she adds by hand). For that data Brocha acts as a processor: we store it on her behalf and only to provide the service to her.
02What data we use
If you request an appointment (clients)
- Your email, for your Brocha account (you sign in with a code we send you).
- What you type in the request: name, phone, occasion, date and time, people, services, the address if the artist comes to your home or hotel, and your notes.
- The messages, photos, videos and files you send in the chat.
- Your deposit receipt, if you choose to upload it.
- What the artist’s request form asks for, if she uses one: photos (for example of your face or hair), your answers to her questions and, if she asks for it, a photo of your ID document.
- A copy of the artist’s policies you accepted, with the date. If the artist can’t take your appointment or cancels it, the reason she picks and the note she leaves you.
- Your review: stars, tags, text and an optional photo. It is published with your first name and last initial.
- The date and version of the terms you accepted.
You request appointments and talk to your artist in the Brocha app, with your account. If your artist invites you, you get a private link (mibrocha.com/r/…) that opens that booking in the app: don’t share it.
If you are an artist
- Your account: email address (if you sign in with an email code) or an anonymous ID.
- Your public profile: name, link, city and country, approximate area (rounded to ~1 km, never your exact address), bio, experience, services and prices, photos of your work, profile photo, Instagram, deposit and travel rules, and the days you are busy (the date only, never client details).
- Your policies (arrival, grace period, cancellation, deposit, no-shows and anything you add), shown on your profile; your request form and your prep checklist for clients.
- The payment methods you choose to show (for example Zelle, Nequi or a bank account). Only clients who sent you a request can see them.
- The private backup of your schedule, clients and time blocks, so you don’t lose anything if you change phones.
- Where the law requires it, complaint details: legal name, ID number, address and phone. These are never published.
- If you subscribe to Brocha Plus: your subscription status (active or not, monthly or yearly, free trial, renewal date and store). We never see your card or payment details: Apple or Google handle them. On your public profile the only visible difference is that your page has no Brocha branding.
- The date and version of the terms you accepted.
If you join the founding artists list
- What you type at mibrocha.com/artistas: name, Instagram handle (optional), mobile or WhatsApp number, whether you do makeup or hair, your area and how you found the page.
- The date and version of the terms you accepted.
For everyone
- If you turn on notifications: your phone’s notification token and your language.
- Content reports you send.
- Technical connection data (such as IP address) that our providers log for security.
We don’t collect your precise location on our servers (the app uses it only on your phone to show nearby artists), your contacts, card details or advertising IDs. We don’t use facial recognition.
03Why we use it
- To show artist profiles and let you request an appointment.
- To deliver your request, the quote, status updates and chat messages between client and artist.
- To give the artist what her request form asks for (photos, answers and ID), so she knows what to expect and, for at-home appointments, for her safety; and to send you her checklist when she confirms your appointment.
- To send you notifications and appointment reminders, if you turn them on.
- To publish verified reviews (from real appointments only) and work out ratings and badges.
- To keep Brocha safe: prevent fraud, spam and abuse, review reports and comply with the law.
- To answer you when you write to us.
- If you joined the founding artists list: to contact you on WhatsApp or Instagram, invite you to Brocha and help you set up your profile.
We don’t use your data for advertising, we don’t sell it and we don’t build marketing profiles.
04Sensitive data and minors
- Your notes may include things like allergies or skin type. That’s optional: only write them if the artist needs them to do a good job. By doing so you allow her to use them only for your appointment.
- Face photos can be sensitive data. We don’t do facial recognition, and photos are only used for what you choose (chat, the artist’s request form, review or portfolio).
- ID document: only asked for if the artist turns it on (for example, for appointments at your home or hotel, for her safety). Only that artist can see it, through short-lived links. It is never published, Brocha doesn’t verify it or use it for anything else, and it is deleted automatically 7 days after the appointment, or right away if the request is declined or cancelled. You can cover details that aren’t needed (such as the number): your photo and name are enough. If you’d rather not send it, you can choose another artist.
- Brocha is for adults 18 and over. If the appointment is for a minor (for example, a quinceañera), her parent or guardian must request it.
- Artists may only publish photos of minors with a parent’s or guardian’s permission. If we learn that we received a minor’s data without that permission, we delete it.
06Where it is stored
Data is stored on our providers’ servers in the United States. If you are in Colombia or another country, by accepting this policy you allow that transfer. The United States is on the list of countries with an adequate level of protection of Colombia’s Superintendence of Industry and Commerce (SIC), and our providers have data protection agreements in place.
07How long we keep it
- Artist account: for as long as you have it. If you delete it, we immediately erase your profile, photos, requests, chats, files, reviews and backup.
- Brocha Plus: the status of your subscription is erased with your account. Apple, Google and RevenueCat keep their own purchase records as their policies and tax law require.
- Requests and chats: while the artist’s account exists, so both of you keep the history of the appointment. You can ask us to delete yours sooner.
- Request form: the photo of your ID is deleted 7 days after the appointment, or right away if the request is declined or cancelled. The other form photos and answers are deleted 6 months after the appointment.
- Notifications: a phone’s notification token is erased after 120 days without use.
- Founding artists list: up to 12 months if you don’t create your profile. You can ask us to take you off the list at any time.
- Backups and technical logs at our providers may last up to 30 more days. We only keep things longer when the law requires it (for example, abuse reports).
08Your rights
Under Colombia’s Law 1581 of 2012 and similar laws in other countries, you have the right to:
- Know, update and correct your data.
- Ask for proof of the consent you gave us.
- Know how we have used your data.
- Withdraw your consent and ask us to delete your data, unless we have a legal duty to keep it.
- Access your data for free.
- Complain to Colombia’s Superintendence of Industry and Commerce (SIC), after first making your request to us.
If you live elsewhere, for example in the United States or the European Union, we also honor the rights your law gives you.
09How to exercise them
Write to support@mibrocha.com with:
- your name,
- what you are asking for (a question, a correction, deletion, withdrawing consent…),
- how to find your data: your account email, your artist link or your request link (mibrocha.com/r/…).
We may ask for something else to confirm it’s you.
- Questions: we answer within 10 business days. If we need more time we’ll tell you and answer within 5 more business days.
- Complaints (correction, deletion, withdrawal of consent or a breach): within 15 business days, extendable by up to 8 more business days with notice.
Artists can also edit their profile and delete their account in the app.
10Security
We use encrypted connections (HTTPS), database access rules so each person only sees their own data, private files behind short-lived links, request links that can’t be guessed, and limits against abuse. No system is 100% secure: if an incident affects your data, we will tell you and the authorities where required.
11Changes to this policy
If we change this policy we’ll let you know in the app or on this page before the change applies. If the change is important, we’ll ask you to accept it again.
12Contact
Brocha — David Levi
1400 Thrasher Dr, Little Elm, Texas 75068, United States
Phone: +1 682 202 0330
support@mibrocha.com