Privacy Policy

HairAnalyst ("we", "us") helps you track changes in your hair and scalp over time. We take privacy seriously because the data you share with us, including photos of your scalp, is personal. This policy explains what we collect, why we collect it, and the controls you have.

1. Information we collect

• Account information. Email address and authentication identifiers when you sign up.
• Scalp photos and check-in data. Photos you upload, dates of check-ins, and any notes you add.
• Treatment information. Treatments you choose to log, including names and start dates.
• Usage data. Device, browser, and basic analytics needed to operate the service.

2. How we use your information

• To generate your clinical scores, trend charts, and treatment effectiveness reads.
• To operate, secure, and improve the HairAnalyst service.
• To communicate with you about your account, billing, and product updates you opt into.

We do not sell your data. We do not share your photos with advertisers. We do not use your photos to train third-party advertising or generative models.

3. Where your photos live

Photos are stored in a private storage bucket scoped to your account. Access is restricted by authentication, and no HairAnalyst employee browses your photos as part of normal operation. We may access specific files only when you request support or as required to investigate abuse or comply with law.

4. Service providers

We rely on a small set of vetted providers to deliver the product, including cloud hosting, database, file storage, authentication, AI inference, payment processing, and analytics. These providers process data only on our instructions and under contractual confidentiality and security obligations.

5. Your choices and rights

• Access and export. You can request a copy of the data associated with your account.
• Deletion. One-click deletion in your account removes your photos and check-in data. We retain minimal records only where required by law (for example, billing records).
• Marketing preferences. You can opt out of non-essential email at any time.
• Regional rights. Depending on where you live, you may have additional rights under GDPR, UK GDPR, or US state privacy laws (including the right to access, correct, or restrict processing). Contact us to exercise them.

6. Security

We use encryption in transit and at rest, scoped access controls, and routine security reviews. No service can guarantee perfect security, but we work hard to keep your data safe and to disclose incidents promptly if they ever occur.

7. Children

HairAnalyst is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

8. Changes to this policy

We may update this policy as the product evolves. If we make material changes, we will notify you by email or in-app notice before they take effect.

9. Contact

Questions or requests about your data? Email privacy@hairanalyst.app.