Skip to content

HairFit

Privacy Policy

How HairFit processes, protects, retains, and deletes photos, generated results, account data, and payment records.

Updated: 2026-10-07

01

What we process

We process the photo you choose, visible haircut-related cues, your three styling preferences, generated results, account details when you sign in, and transaction records when you buy credits. HairTry mobile may also process camera or gallery photos, app interactions, device and crash diagnostics, and purchase status verified by Apple or Google. We do not use a photo to identify you or infer age, ethnicity, health, attractiveness, or gender identity. Photos may contain your face. Analysis derives face shape, hair texture, density and hairline, with confidence scores and explanatory notes. We store these cues and your corrections to recommend hairstyles, not to recognize your identity.

02

Why we process it

We use this information to check an upload, provide requested analysis and previews on web or mobile, operate and improve app reliability, prevent abuse, verify store entitlements, settle credits and refunds, save results you choose to keep, and answer support or deletion requests.

03

Service providers

We use Cloudflare R2 to store photos and generated images, and our service database to store account and analysis records. Analysis and image generation are handled by third-party AI model providers acting as data processors. These providers receive the photo and instructions needed for your request. Their retention practices can differ from our own storage limits; contact us for details. Authentication, payment and security providers also support the service. These AI providers may forward your photo and instructions to downstream model providers they select. Routing, including fallback routes, can vary, and processing and retention practices also depend on the downstream provider.

04

Retention and deletion

Photos uploaded for HairFit analysis, including analysis in HairTry, are scheduled for deletion from our storage within 24 hours. HairFit web results and share links expire after 30 days unless deleted sooner. Separate uploads and results used for HairTry mobile image generation may remain until you request deletion; these web expiry limits do not apply to those copies. Structured analysis remains until you delete it. Payment records may be retained for accounting, fraud prevention or legal obligations. Provider retention follows each provider’s own policies; contact us for details. After account deletion, minimal anti-abuse records remain: a one-way hash of the device identifier and a flag recording that the initial free credits were claimed, plus a one-way hash based on an IP address or guest identifier for a claimed HairFit free preview. These records are detached from the deleted account, photos, analysis and sessions. Device credit markers have no automatic expiry. Preview markers keep their original 30-day expiry and are removed by scheduled cleanup after expiry; errors can delay cleanup. Limited credit-ledger and deletion-receipt records may also remain for settlement, fraud prevention or legal obligations. For initial free credits claimed using Google or Apple, we also retain a one-way hash of the provider account identifier and a claimed flag. These markers have no automatic expiry, contain no original provider identifier or email address, and are detached from the deleted account, photos, analysis and sessions.

05

No unrelated training or sale

HairFit does not sell uploaded photos and does not use them to train unrelated models or for advertising. A generated result may be used as a public example only with separate, explicit permission.

06

Your choices and rights

You can delete a session immediately, revoke a share link, delete HairFit product data, or request full account deletion. Depending on where you live, you may also request access, correction, portability, restriction, or objection.

07

Adults only

HairFit is intended for adults. Do not upload a child’s photo or a photo you do not have permission to use.

08

International processing

Service providers may process data in countries outside your own. Where required, we use contractual and technical safeguards for international transfers.

Questions: [email protected]