Your shop’s information.

What is stored

Business accounts include an email address, shop details, branding, schedules, service menu and barber profiles. Check-in records include the customer’s first name, barber, service, queue status and timing. Signup and support requests include the contact information and message supplied.

Customer and family profiles

Adults may optionally save a mobile number, first name, email, month/day birthday, and up to six children’s first names and optional birthdays within a single shop. Birth years are not collected. The adult confirms they are the parent or legal guardian of added children. Customer PINs are stored as protected hashes. Customers can change their PIN after verifying the current one. A shop administrator can verify the adult’s identity and issue a private recovery link that expires in ten minutes and works once. The customer chooses the new PIN; recovery and PIN changes sign out existing customer sessions. If the shop independently verifies a corrected mobile number, recovery can update it while retaining family and reward history and turning off text-offer consent. Verification notes and recovery events are recorded without storing the PIN or private recovery link in the audit log. Phone numbers and email addresses are supplied by customers and are not verified by a messaging code.

Returning customers unlock profiles using a mobile number and customer PIN on an authorized tablet or through the customer portal. Remote profile sessions expire after 30 minutes, stay in browser memory, and do not authorize queue entry. Kiosk customer sessions are limited to that tablet and shop, expire after ten minutes, and are cleared from the interface after inactivity or when the customer finishes. Family ticket records retain the profile/member identifier and visit name for queue operations.

Birthday and other promotional offers require separate, optional email and text choices. Consent choices and their timestamp are stored with the profile. Offers for children use the adult’s contact information only. Providing a birthday does not itself opt a customer into marketing. Customers can update their preferences on the kiosk, in the customer portal, or by contacting the shop. Automatic promotional messaging is not enabled.

Rewards records

Shops may enable visit and birthday rewards. Completed profile-linked haircuts earn visit credits under the shop’s current rules. Records include the customer and family member identifier, linked visit, reward terms, recorded discount, redemption time, staff authorization and any void reason. Family members earn separately. Birthday eligibility uses the saved month/day and the shop’s timezone. Rewards do not require marketing consent, and no birthday messages are sent automatically. Turning a program off preserves history. A child with rewards history cannot be removed through self-service; contact the shop for help with correction or deletion requests.

Connected Google email

When enabled, a shop can authorize its own Google account to send individual customer emails. Turnilo requests the sending permission and account email identity; it does not request inbox-reading access. Google authorization tokens are encrypted at rest and isolated by shop. Disconnecting removes the stored connection and attempts to revoke Google access. Email history records the recipient, subject, provider identifier and send status. Message bodies are sent to Google for delivery but are not stored in Turnilo’s email history. Promotional sends require an adult customer’s email opt-in and a shop administrator’s explicit review and send action. Automatic birthday campaigns are not enabled. Reply STOP to the shop or turn off email offers in your profile.

Who can see it

Each barbershop or salon account accesses its own workspace. The Turnilo service owner can administer accounts and shops. Waiting-room boards display ticket numbers; customer names are available to authorized shop administration. Kiosk PINs and account passwords are stored as protected hashes, not displayed in the interface.

Sessions and devices

Cookies authorize business accounts and shop tablets. Turnilo also uses browser storage for device preferences and a ticket-access token. Setup drafts are saved to the signed-in business account. Check-in is limited to authorized shop tablets; a tablet’s authorization does not verify its physical location.

Retention and requests

Shop records and completed ticket history are currently retained for operations and reports; this release does not automatically erase them after a fixed period. Archiving a barber or suspending an account keeps existing history. Setup drafts are removed when the shop is created.

Use Turnilo support for access, correction or deletion requests. The service owner reviews requests and verifies authority before making changes. Do not include passwords, PINs or customer details in a support message.