Privacy Policy

Effective Date: August 01, 2024

Last Updated: September 07, 2026

hair2hair (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “App”). Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.

1. Information We Collect

We may collect the following types of information when you use our App:

1.1 Personal Information

We may collect personal information that you voluntarily provide to us, such as:

• Name
• Email Address
• Profile Information (e.g., your hair type, hair care routine, and goals)

1.2 Usage Data

We may collect information that your device automatically sends when you use the App (“Usage Data”). This may include:

• Device Information (e.g., device type, operating system)
• Log Information (e.g., IP address, access times, pages viewed)
• App Performance Data

1.3 Health Data

Our App may collect information related to your hair care routine. This may include:

• Hair care products used
• Frequency and timing of hair care routines
• Photos of your hair
• Messages and photos you send to Hannah, our AI hair coach
• Photos of products you scan

Important: We do not collect or store sensitive health data such as medical conditions, treatment details, or health measurements.

2. How We Use Your Information

We use the information we collect in the following ways:

• To provide and maintain the App.
• To improve the App and enhance user experience.
• To communicate with you regarding updates, security alerts, and support.
• To analyze usage patterns and user behavior to improve our services.
• To comply with legal obligations and protect our legal rights.

3. Sharing Your Information

We do not sell, trade, or rent your personal information to others. We may share your information in the following situations:

• With Service Providers: We may share your information with third-party service providers who perform services on our behalf (e.g., cloud storage providers, analytics services).
• With AI Service Providers: With your permission, we send certain information to third-party artificial intelligence services (OpenAI and Google) to generate the responses, analyses, and recommendations you request. Section 4 explains exactly what is sent, to whom, and why.
• For Legal Purposes: We may disclose your information if required by law or to protect our rights and interests.
• With Your Consent: We may share your information with third parties if you have given your explicit consent.

4. Artificial Intelligence Services

Several features of the App are powered by third-party artificial intelligence (“AI”) services: Hannah (our AI hair coach), hair photo analysis, personalized routine suggestions, and product scanning. We do not send any information to these services until you have reviewed an in-app disclosure and tapped “Agree and continue.”

4.1 What we send

• Your first name and hair profile answers (hair type, texture, scalp condition, goals, routine details) and the hair care products you log
• Messages you send to Hannah, and any photos you choose to attach to those messages
• Photos of products you scan

We do not send your email address, login credentials, payment details, device identifiers, or contact information to AI service providers.

4.2 Who receives it

• OpenAI, L.L.C. (privacy policy) — powers Hannah conversations, hair photo analysis, and routine suggestions.
• Google LLC (Gemini API) (privacy policy) — identifies products from the photos you scan.

4.3 How it is used

This information is used only to generate the response, analysis, or recommendation you asked for. We access these services through their business APIs under terms that restrict the providers to processing the data on our behalf and require them to protect it with safeguards at least equivalent to those described in this policy. We do not sell this information, and we do not allow AI service providers to use it for advertising.

4.4 Your choices

You may withdraw this permission at any time in the App under Settings › AI & Your Data. When permission is withdrawn, AI-powered features are unavailable until you grant it again; all other features of the App continue to work. To request deletion of conversations or photos already processed, contact [email protected] or delete your account from Settings.

5. Ad Attribution and Creator Crediting

When you tap one of our ads or a creator’s link, and again when you install and open the app, we automatically collect your IP address, device model, operating system version, screen size, time zone, language setting, and a browser or in-app WebView identifier (user-agent string). We use this information only to determine whether your app install resulted from a specific ad or creator video, so we can measure ad performance and pay the creator who referred you. We do not use this information to build an advertising profile of you across other companies’ apps or websites.

When we determine that your install came from an ad, we share limited information about that purchase, your IP address, user-agent string, the ad click identifier, and the purchase amount, with Meta (Facebook and Instagram’s parent company), so Meta can measure the ad’s performance. We do not share this information with any other advertising company or data broker.

We retain click and install records for 24 months from your first purchase, or 180 days if you never purchase, after which purchase records are anonymized by removing the IP address and user-agent string. To request deletion of this information sooner, contact [email protected].

6. Data Security

We implement appropriate technical and organizational measures to protect your information from unauthorized access, use, or disclosure. However, please be aware that no method of data transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We will retain your information only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After that, we will delete or anonymize your information.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can request that we correct any inaccuracies in your personal information.
• Deletion: You can request that we delete your personal information.
• Restriction: You can request that we restrict the processing of your personal information.
• Data Portability: You can request a copy of your personal information in a structured, machine-readable format.

To exercise any of these rights, please contact us at [email protected].

9. Children's Privacy

Our App is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information from our records.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy within the App. You are advised to review this Privacy Policy periodically for any changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Email: [email protected]

Address: 1660 Soldiers Field Road, STE 7 #1069, Brighton, MA 02135

By using the App, you acknowledge that you have read and understood this Privacy Policy.