Privacy Policy
How HairFall Guard handles your data
Plainly stated: what we collect when you scan your scalp, why, and which outside services ever see it.
Read the Terms of Service →Overview
HairFall Guard is a hair and scalp analysis app: you photograph your hair, the app scores it and tracks how that score changes over time, and it can generate a personalized care routine. This policy covers every place your data goes to make that work — your device, our backend, and the small set of outside services we rely on.
We built HairFall Guard to need as little of your data as possible. Where something is optional — Apple Health, for instance — the app tells you exactly why it's asking and what changes if you say no.
What we collect
| Data | When | Why |
|---|---|---|
| Name, email & password | You create an account with Apple, Google, or email and password | Create and identify your account |
| Hair & scalp photos | Each scan you run | AI analysis, your score history, before/after comparisons |
| Ingredient-label photos | You use the label scanner | One-time AI read of a product's ingredients — not saved to your history |
| Chat messages | You message the AI assistant | Generate a reply — your message and recent chat history (up to the last 10 messages) are sent with each request; kept only in that session, never saved to our servers |
| Scan results, hair goal & routine | You use the chat assistant or AI routine generator | Personalize the reply or routine — hair type, porosity, density, scalp condition, hair-loss severity, scores, your stated goal, and your current routine steps |
| Sleep & heart-rate data | You connect Apple Health | Show a sleep/recovery correlation — never leaves your device (see §05) |
| Routine & reminder settings | You build a routine | Sync your routine across your own devices |
| Subscription status | You purchase Premium | Unlock paid features — billing itself is handled entirely by Apple |
What we don't collect
HairFall Guard has no advertising or analytics SDK linked into the app — no ad identifiers, no third-party trackers, no data broker relationships. We built and verified the app this way; it isn't a policy promise layered on top of tracking code.
How we use it
- To run the app. Your account, scans, and routine exist so the app can function — that's the whole relationship.
- To generate your analysis. If you allow AI data sharing, photos are sent to Google's Gemini API to produce your hair health score, region breakdown, and recommendations.
- To answer your chat questions. Your message, recent chat history, and your latest scan results and routine are sent to Gemini so the reply fits your hair, not generic advice.
- To read ingredient labels. The label photo is sent to Gemini to flag ingredients.
- To personalize your routine. When you ask for an AI-generated routine, your latest scan results (not the photo itself), your hair goal, and your current routine are sent along with the request.
- To keep your history in sync. Scans and routine steps are stored in your account (Firebase) so they're there if you reinstall or switch devices.
Google processes AI requests under its Gemini API terms, solely to return your result. We never sell your data or use it for advertising, for any reason.
Third parties we rely on
HairFall Guard is built on a small number of named services. Each only sees what it needs to do its one job.
| Service | Provider | What it sees |
|---|---|---|
| Sign in with Apple / Google Sign-In | Apple / Google | Your name & email, to create your account |
| Firebase Auth, Firestore & Storage | Account records (including email/password sign-in), scan history, routine, and scan photos | |
| Gemini API (via Firebase AI Logic) | Only if you allow AI data sharing: scan photos, ingredient-label photos, chat messages and recent chat history, scan results, hair goal, and current routine — solely to generate that response | |
| Apple Health | Apple | Sleep & heart-rate data — read on-device only, see §05 |
| App Store / StoreKit | Apple | Your purchase & payment details — HairFall Guard never sees your card |
AI data sharing needs your permission
Nothing is sent to Google's Gemini AI until you allow it. Right after sign-in, the app shows a consent screen explaining what is sent, who it goes to, and why, with Allow and Not Now options. If you choose Not Now, no data is sent to Gemini, AI features stay off, and the rest of the app keeps working; each AI feature asks again before it runs. You can turn AI data sharing on or off at any time in Profile → Preferences → AI Data Sharing.
Google, which processes this data for us through Gemini and Firebase, provides the same or equal protection of user data as described in this policy.
Apple Health data
On-device only
If you connect Apple Health, your sleep and heart-rate readings are read directly from HealthKit, correlated against your scan scores, and shown to you — entirely on your device. That data is never uploaded to our servers, never sent to Gemini or any other third party, and never used for advertising or any purpose beyond showing you that correlation.
You can disconnect Apple Health at any time from Settings → Privacy → Health on your device, or by revoking access from within iOS Settings.
Storage & security
Scan photos are stored both locally on your device and in Firebase Cloud Storage, under a path scoped to your account and protected by Firebase's access rules — only your signed-in account can read or write it. If you sign up with email and password, your password is managed entirely by Firebase Authentication — it is never stored or visible to us in plaintext. All network traffic between the app and our backend uses standard TLS encryption; the app does not implement any additional custom encryption of its own.
Data retention
Your scans and routine stay in your account for as long as you keep it. Deleting your account (see §08) permanently removes your Firestore records, your uploaded photos in Cloud Storage, and every file kept locally on your device — this happens immediately and cannot be undone.
Your rights & choices
- Delete your account. In-app: Profile → Preferences → Account → Delete Account. This is permanent and immediate.
- Turn AI data sharing on or off at any time in Profile → Preferences → AI Data Sharing. When it's off, nothing is sent to Gemini.
- Disconnect Apple Health at any time without affecting the rest of the app.
- Turn off notifications (routine reminders, daily tips, scan reminders) individually from Profile → Preferences.
- Ask us directly. For an export of your data, or any question about what we hold, contact us at the address in §12.
Children's privacy
HairFall Guard is not directed at, and is not intended for, children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we'll delete it.
Subscriptions & payments
HairFall Guard Premium is sold and billed entirely through the Apple App Store. We receive only a confirmation that your account is entitled to Premium — never your card number or billing address. Refunds, billing history, and payment-method changes are all handled by Apple; see our Terms of Service (§06) for cancellation details.
Changes to this policy
If we materially change how we handle your data, we'll update the effective date above and, for significant changes, notify you in-app before they take effect.
Contact us
Questions about this policy or your data: rajbagri3214@gmail.com