Privacy Policy

• Your scalp photos and health answers are stored privately and belong to you.
• We never sell your data, never share it for advertising, and never use your photos to train AI models.
• Photos are served only through links that expire within minutes.
• You can export everything or delete your account at any time.
• We use no advertising or tracking cookies — only cookies essential for signing you in.

• Account: email address, display name, password (stored as a cryptographic hash), country, timezone.
• Health information you choose to provide: questionnaire answers about your hair, scalp, treatments, side effects, shedding, and related history.
• Images: the scalp photographs you capture or upload, and measurements derived from them.
• Tracking logs: treatments, adherence, side effects, shedding levels, and costs you record.
• Payment: handled by Stripe. We receive subscription status and a customer reference — never your card number.
• Technical: essential session cookies and standard security logs. Consent records store a salted one-way hash of your IP address, not the address itself.

• To provide the Service: standardize captures, compare matched scans, and generate your reports.
• To run safety screening you request and show appropriate guidance.
• To operate billing, support, security, and abuse prevention.
• Product analytics use only coded events (for example “scan completed”) — never images, free-text notes, or health details.

We do not sell personal information, share it for cross-context behavioral advertising, or train AI models on your photographs.

Image measurements are computed by our own analysis service, which processes images transiently and does not retain originals. Report wording is drafted by a language model that receives only derived measurements and summaries — never your photographs, name, or contact details — and cannot alter the underlying findings. You consent to this processing explicitly during onboarding and may decline (declining prevents scan features from operating).

We share personal information only with processors that host or operate the Service under contract, and only as needed: cloud database/storage and authentication (Supabase), payments (Stripe), report drafting (OpenAI, derived metrics only), and web hosting (Vercel). We may disclose information if required by law, and would notify you unless legally prohibited. If HairProof is ever acquired, your data remains protected by this policy or you will be offered deletion first.

• Your data is retained while your account is active, so comparisons remain possible.
• Request deletion in Settings: removal is scheduled with a 30-day grace period (so you can change your mind), after which account records and images are permanently purged. An audit record of the request itself is kept.
• Encrypted backups age out on a rolling basis within 60 days of purge.
• See the Biometric Data Notice for the image-specific retention schedule.

Images live in private storage reachable only through signed links that expire within minutes. Database records are isolated per user with row-level security enforced by the database itself. Data is encrypted in transit and at rest by our infrastructure providers. Staff access is role-restricted and audit-logged. No system is perfectly secure; if a breach affecting your data ever occurs, we will notify you consistent with applicable law, including the FTC Health Breach Notification Rule.

• Export: download everything from Settings in a portable JSON format, anytime.
• Deletion: one click in Settings, with the schedule described above.
• Correction: edit your profile and logs in the app, or contact us.
• Consent: recorded by version; you can see exactly what you agreed to in Settings.
• Residents of certain states have additional rights — see the Consumer Health Data Privacy Policy. We honor rights requests regardless of your state and never discriminate for exercising them.

We use only cookies strictly necessary to operate the Service: keeping you signed in and remembering security state. We set no advertising cookies, no analytics cookies, and no third-party trackers — which is why you don't see a cookie banner.

The Service is for adults 18+. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.

Material changes to this policy will be announced in the app or by email, and where required we will ask for renewed consent. Questions or rights requests: support@hairproof.ai.