Biometric Data Notice & Retention Schedule

Some of the photographs you capture (for example, the front hairline view) include your face, and our software estimates head pose to check that each photo matches the required view. Depending on jurisdiction, this kind of processing can fall under biometric privacy laws such as the Illinois Biometric Information Privacy Act. We provide this notice — and obtain your written electronic consent during onboarding — so there is never ambiguity about what happens to these images.

• Images are used solely to measure visible hair and scalp change for you, including checking photo pose, angle, and quality.
• We do not identify or verify anyone's identity from images, and we do not create face templates for recognition.
• We never sell, lease, trade, or otherwise profit from your images or any data derived from them.
• We never disclose them to third parties except the storage/processing providers operating under contract, listed in the Privacy Policy.
• They are never used to train AI models.

• While your account is active: images are retained so month-to-month comparisons remain possible — that is the product.
• If you replace a photo (retake), the replaced file is overwritten.
• When you delete your account: deletion is scheduled with a 30-day grace period, then all images and derived measurements are permanently destroyed by deletion from primary storage.
• Backups: encrypted backups age out on a rolling basis within 60 days after purge.
• Outer limit: in all cases, images and derived measurements are destroyed within 3 years of your last interaction with the Service, or earlier as required by applicable law — whichever comes first.

We collect images only after you provide informed written (electronic) consent during onboarding. You may withdraw consent at any time by deleting your account in Settings, which triggers the destruction schedule above. Questions: support@hairproof.ai.