Privacy Policy

01Who we are

HairAgain ("HairAgain," "we," "us," or "our") provides a hair-loss treatment companion app that helps you track the regimen you're on, stay consistent with gentle reminders, and see whether it's working through aligned monthly progress photos. This Privacy Policy explains what we collect, why, and the choices you have. It applies to the HairAgain mobile app and this website.

HairAgain is a record-keeping and tracking tool. It is not a medical device and does not diagnose, prescribe, or score your hair. See our Terms of Service for the full disclaimer.

02Information we collect

We collect only what's needed to run your account and provide the app:

Account information

• Your email address, and a password if you create an email-and-password account. When you sign in with Google (or Apple, where offered), we receive a basic identifier, your name, and email from that provider (and, with Google, a profile photo) to create your account. Your name shows in Settings. We never see your provider password.
• A one-time verification code is emailed to confirm your address at sign-up and to confirm sensitive actions such as account deletion.

Content you create in the app

• The treatments and schedules you add (for example, a product name and how often you take it) and your daily check-ins.
• Progress photos you choose to capture or import, along with their capture date and the angle label you assign.
• Optional entries you choose to add, such as a self-rated shedding level or a density rating that you or your clinician enter. Any such number is entered by you, never derived by us.
• Your reminder and notification preferences.

Subscription information

• Whether your subscription or free trial is active. Purchases are handled by the Apple App Store or Google Play and managed through our subscription provider (RevenueCat), which uses a device identifier to keep your subscription in sync across your devices. It's used only to manage your subscription, never for advertising or cross-app tracking. We never receive or store your full payment-card details. The app stores process payment.

Technical information

• The minimal data needed to keep you signed in securely (session tokens) and to sync your content. Reminders are scheduled on your device.
• To understand and improve the app, we record a small set of first-party usage events (for example, which setup step you reached, or when you first viewed a photo comparison) in our own database. It's tied to your account, never sold or used for advertising, and deleted when you delete your account.
• We do not integrate third-party advertising or analytics SDKs, and we do not build advertising profiles about you. We also don't use a third-party crash- or error-reporting service: when something goes wrong, the app recovers on your device and nothing about the failure is sent to an outside company.

03What we never do

These are core commitments, not settings that can be toggled on:

• We never run your photos through an algorithm to produce a density score, hair count, or Norwood stage. The only numbers in HairAgain are ones you or your clinician enter.
• We never use your photos or your data to train machine-learning models.
• We never sell your personal information, and we don't share it for cross-context behavioral advertising.
• We don't show ads or embed third-party trackers.

04How we use your information

• To create and secure your account and keep you signed in.
• To store and sync your regimen, check-ins, and photos so they're available on your devices.
• To schedule the gentle reminders you've asked for.
• To provide the free trial and, afterward, your subscription, and to send essential service emails (for example, a verification code or a reminder before your trial ends).
• To keep the service working, fix bugs, prevent abuse, and meet legal obligations.

Our legal bases (where the GDPR applies) are performance of our contract with you (running the app), your consent (for example, notifications), and our legitimate interests in keeping the service secure and reliable.

05How your information is stored & secured

Your account data and photos are stored in our cloud database and file storage, hosted by Supabase. Data is encrypted in transit (HTTPS/TLS) and at rest. Access is restricted per user with row-level security, so your records and photos are tied to your account and not visible to other users.

No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information and limit access to it.

06Service providers

We rely on a small number of trusted providers to run the app. They process data only to provide their service to us, under their own security and privacy commitments:

07Sharing & disclosure

We do not sell or rent your personal information. We share it only:

• With the service providers listed above, to run the app.
• If required by law, or to protect the rights, safety, and security of our users or the public.
• In connection with a merger, acquisition, or sale of assets, in which case we'll notify you and this policy will continue to apply to your information.

Anything you actively export and share yourself (for example, saving a before/after image to your camera roll and sending it) is under your control, not ours.

08Data retention & deletion

We keep your information for as long as your account is active. You can delete your account at any time from Settings → Account in the app; we confirm the request with a one-time emailed code. Deleting your account removes your regimen, check-ins, photos, and profile from our systems. Some records may persist briefly in encrypted backups before being overwritten, and we may retain limited information where the law requires.

09Your rights & choices

Depending on where you live (including under the GDPR and California's CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Because we don't sell data or serve targeted ads, there is no such activity to opt out of.

• Access & correction: most of your data is visible and editable directly in the app.
• Deletion: delete your account in-app, or contact us.
• Notifications: turn reminders on or off in the app or in your device settings.

To exercise any right, contact us at the address below. We won't discriminate against you for exercising your rights.

10Children

HairAgain is intended for adults (18+) managing a hair-loss regimen. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we'll delete it.

11International users

We operate the app using cloud infrastructure that may process and store data in countries other than your own. Where we transfer personal information internationally, we rely on appropriate safeguards as required by applicable law. By using HairAgain, you understand your information may be processed in these locations.

12Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll change the "Last updated" date above, and for material changes we'll provide notice in the app. Your continued use after an update means you accept the revised policy.

13Contact

Questions about this policy or your data? Reach us at support@burnoutsoftware.com.