MUA Match

Privacy Policy

Introduction

Welcome to MUA Match B.V., registered with the Dutch Chamber of Commerce under number 91422876. We value your privacy and ensure that all personal data you provide to us is handled with the utmost care and confidentiality. This privacy policy explains how we process your personal data when you use our app or our website www.muamatch.com. MUA Match B.V. is the controller for this processing.

1. Collection and Use of Data

MUA Match B.V. collects and uses personal data for the following purposes:

Registration and Profile Information

When you register as a makeup artist or client, we collect data such as your name, email address, phone number, and any other contact information required to create a profile. You confirm your email address and phone number with a code by email and SMS. If you sign in with your Apple or Google account, we receive your name and email address from Apple or Google. When you sign up, we record which version of the terms and conditions you accepted and which version of this privacy policy you were shown, and when.

Photos and portfolio content: Makeup artists can upload portfolio and banner images. Clients can upload a profile picture. These images are stored on our servers and displayed in the app according to profile visibility settings.

What Others See

A makeup artist's profile (name, photos, city or salon address, services, prices, reviews and email address) is visible in the app. With a Booking, the makeup artist sees your name and profile photo and, for an on-location appointment, your address. You see each other's phone numbers only once a Booking is confirmed.

Payment Information

The deposit and the service fee run through our payment partner Stripe. You enter your card details with Stripe; MUA Match does not receive them. You buy Premium and promotions in the app through Apple (App Store) or Google Play; Apple or Google handles that payment and MUA Match does not receive your card details. A Premium subscription you took out earlier with your payment card runs through Stripe. We keep what you paid, when and for what.

Payouts (Makeup Artists)

For payouts we process your name and bank account; on Stripe's secure page you also enter your date of birth, address and phone number, and in some countries your nationality or an identity document. We pass your bank account to Stripe and keep only the last four digits. When you provide personal data in connection with your payouts on MUA Match, Stripe receives that personal data and processes it in accordance with Stripe's Privacy Policy (https://stripe.com/privacy).

Communication

We use your contact details to inform you about your Bookings, your Account and changes to our services. For push notifications we keep a device code from Google Firebase. You can turn off tips and recommendations, such as new artists in your city, in the app in your notification settings.

Support Chat

If you contact us through the support chat in the app, our service provider Crisp processes your name, email address, phone number and what you send (text, photos and voice messages).

Service Delivery

MUA Match acts solely as a platform connecting users and service providers (makeup artists). We do not provide the beauty services directly, and all bookings are made between users through the platform.

Technical Data

IP address, browser type, device information, device type, operating system, and app version.

Use of the App

We count how often a profile is viewed, for the makeup artist's statistics, and keep your preferences in the app, such as your language and favorites.

Chat and Booking Data

When you send booking requests or chat messages through the application, we store the content, timestamps, and status of these interactions so that both parties can refer back to them later.

Location Data

We use the city you enter and, if you allow it, your phone's position at the moment you search. We use it to determine your country and show makeup artists nearby; for this the position goes to Google Maps and, when you search by distance, to our server. We do not track you in the background. You can turn off location access in your phone's settings.

Glam AI (AI Processing)

What you type or upload in Glam AI is processed by an AI model (Claude by Anthropic) through Amazon Bedrock in the EU, together with public data of makeup artists, to suggest looks and makeup artists to you.

We keep conversations until you delete them in the app or delete your Account. Without an Account, we use your IP address and a device code to limit the number of questions.

Messages and photos are checked automatically and may be refused. We do not use photos to recognise people. Amazon Bedrock does not use your data to train AI models.

AI-generated answers may be inaccurate or incomplete and are provided only to support the user experience. We take no decisions with legal effects based solely on automated processing.

2. Sharing of Data

We do not sell your personal data and do not share it with third parties, unless this is necessary for the execution of our services or when we are legally required to do so.

Service Providers

We work with these service providers, who process data on our behalf: Amazon Web Services (servers and storage in Frankfurt, and Glam AI via Amazon Bedrock in the EU); Stripe (payments, payouts and the verification of makeup artists); Google Firebase (signing in with Apple or Google, push notifications); Google Maps Platform (map, place search and turning your location into a country or city); Twilio (SMS codes); SendGrid (emails); Crisp (support chat); Sentry (error reports from the app, in the EU); Netlify (website and contact form). Apple and Google also process data when you sign in with their account, or when you buy Premium or a promotion through the App Store or Google Play. Some of these parties are based in, or have access from, the United States; we then rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Legal Obligations

When we are legally required to disclose personal data.

Business Transfers

In the event of a merger, acquisition, or sale of (part of) our company.

3. Use of Data

We use your data for registration and authentication, verification by email and SMS, service delivery and matching, Glam AI, processing payments and payouts, chat and booking functionality, support, analysis and improvement of our services, and communication about your Bookings and your Account.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  1. Consent: where you have given consent, such as for using your phone's location.
  2. Performance of a contract: where processing is necessary to provide our services.
  3. Legal obligations: where we are legally required to process your data.
  4. Legitimate interest: where necessary for our interests, such as security, fraud prevention, the limits of Glam AI, analysis and improvement of our services, and tips and recommendations (which you can turn off in the app).

5. Data Retention

We retain your personal data for as long as necessary for the purposes described in this privacy policy. Below is what happens when you delete your Account, and how long we keep data.

Deleting Your Account

You can delete your Account in the app via Settings › Delete Account, except while a Booking is still open or a payout is on its way; complete or cancel the Booking first. On deletion the following happens at once:

  • Your profile disappears: your name, email address, phone number, username, bio, profile photo, salon address, password and your link with Apple or Google are deleted or cleared. If you signed in with Apple or Google, we also delete your sign-in account at Google Firebase.
  • Your portfolio and banner photos, the photos you sent in chats and the photos on your own reviews are deleted.
  • Your services are deactivated and can no longer be booked or seen.
  • The chat messages you sent yourself are deleted. The other party keeps the conversation with their own messages and sees you as "Deleted user"; writing is then no longer possible.
  • Your conversations with Glam AI are deleted.
  • A running Premium subscription through Google Play or your payment card is cancelled at once; the running period is not refunded. A Premium subscription through Apple keeps running until you cancel it yourself in the App Store (Settings › your name › Subscriptions). Payment cards saved with our payment partner are detached, so nothing can be charged to them any more.
  • All your sessions are ended.

What stays:

  • Your reviews, both the ones you wrote and the ones you received, stay without your name and photo. A review matters to the other party and to other users.
  • Your booking history stays as anonymous history, so the other party can keep seeing their appointments and payments.
  • We keep payment data (deposits, service fees, payouts, refunds and payments for Premium and promotions) for seven years, because tax law requires it.
  • Our payment partner Stripe keeps payment data for its own legal periods. A makeup artist's Stripe account is closed once no balance is left on it.
  • We keep a record of which version of the terms and conditions you accepted and which version of this privacy policy you were shown, and when, as proof.

What remains can no longer be traced to you as a person, except where the law obliges us to keep it.

Retention Periods

  • Account data: as long as your Account exists; deleted or anonymised at once when you delete your Account.
  • Photos, chat messages and Glam AI conversations: as long as your Account exists; deleted at once when you delete your Account. You can also delete Glam AI conversations yourself earlier.
  • Reviews: visible as long as the reviewed makeup artist has an Account; without your name and photo after you delete your Account.
  • Bookings and payment data: seven years after the Booking (tax retention duty); after that we delete or anonymise them.
  • The record of the accepted terms and privacy policy: seven years after you delete your Account.
  • Glam AI without an Account: we keep your IP address and device code for at most 30 days.
  • Conversations with our support (Crisp): at most twelve months after the last message.
  • Sessions and login tokens: until you sign out, delete your Account or the token expires.
  • Technical log files of our servers: at most three months.
  • Backups: deleted data may remain in our secured backups for at most 35 days. We use those backups only to restore data after an outage.

Access, Correction or Deletion

To request access, correction or deletion of your data, send an email from your Account's email address to info@muamatch.com. Only if we cannot recognise you that way will we ask for additional confirmation; never send a copy of your ID unasked. We respond within one month; if that is not possible, we tell you within that month why and when we will (at the latest two months later).

6. Data Security

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include encryption, firewalls, and secure servers.

7. Your Rights

You have the right to access, rectify, erase, restrict processing, data portability, object to processing, withdraw consent, and lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can delete your Account yourself in the app via Settings › Delete Account (see section 5).

8. Privacy of Minors

MUA Match is intended for users aged 18 and older. We do not knowingly collect personal data from individuals under the age of 18.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes are published on our website and in our app; we tell you about important changes in advance. We recommend that you review this privacy policy regularly.

10. Contact Information

For questions or comments regarding this privacy policy, you can contact us at:

MUA Match B.V.

KvK number: 91422876

info@muamatch.com

Previous versions of this privacy policy are available upon request.

Our cookie policy is at www.muamatch.com/cookiemessage.

Final Statement

This privacy policy informs you; you do not need to agree to it. We thank you for your trust in MUA Match B.V.

Last updated: 14 October 2026