Consumer Health Data Privacy Policy
Version 1.0 · Last updated July 18, 2026
This document reflects how HairProof is actually built and operated. It is pending final review by legal counsel and may be updated; material changes will be announced and re-consented where required.
Why this separate policy exists
Some states — including Washington (My Health My Data Act), Nevada, and Connecticut — give “consumer health data” specific protections. HairProof's core data is exactly that kind of data, so this policy states plainly what we collect, why, who sees it, and the rights you have. It supplements our Privacy Policy and applies to all users, not only residents of those states.
Consumer health data we collect
- Scalp and hair photographs you capture or upload, and measurements derived from them.
- Questionnaire answers about hair loss, scalp symptoms, health triggers, treatments, and medication side effects.
- Tracking logs: treatment use, adherence, side effects, shedding, and related costs.
- Safety-screening results generated from your answers.
Sources: you provide this data directly. We do not buy, infer from third parties, or collect health data from data brokers.
Why we collect it
Solely to provide services you request: standardizing captures, comparing matched scans over time, generating progress reports, running the safety screening, and maintaining your tracking history. We do not use consumer health data for advertising, and we do not develop unrelated products with it.
Sharing — and what we never do
- Shared only with processors that operate the Service under contract (hosting, storage, payments, report drafting with derived metrics only), listed in the Privacy Policy.
- We do not sell consumer health data.
- We do not share it for advertising or marketing by anyone.
- We do not permit third parties to collect it from our Service.
- No geofencing is used to collect or infer health data about you.
Your rights
- Right to know: confirm whether we collect your consumer health data and see it — your data is visible in the app, and fully exportable from Settings.
- Right to withdraw consent: stop future collection at any time by ceasing scans or deleting your account.
- Right to delete: request deletion in Settings; purge completes after a 30-day grace period, including images, with backups aging out within 60 days thereafter.
- No discrimination: exercising rights never affects the price or quality of the Service.
You may also submit any request to support@hairproof.ai; we respond within the timelines required by applicable law. If we decline a request, we will explain why and how to appeal by replying to our decision; unresolved appeals may be raised with your state Attorney General.
Contact
Privacy questions and rights requests: support@hairproof.ai.