Privacy Policy

Scalp Images

When you use the scanning feature, you upload four hair/scalp photos so we can create your report. These photos may reveal sensitive visual information about your appearance and scalp condition. They are stored in private Supabase scan storage and sent through our AI report processing flow only to generate your ScalpAnalysis AI report. Guest scan images are designed to be temporary and deleted within 24 hours. Registered users can save scans privately for progress tracking until they delete them or request account deletion.

Account Information

If you create an account with Google sign-in or email-based authentication, we collect your email address and basic authentication metadata needed to keep your account working. We do not require passwords, mailing addresses, or government IDs.

Device & Usage Data

We collect limited technical data such as browser type, device type, IP-derived region, page performance, security events, and error logs to keep the service reliable. Public marketing and legal pages may use aggregated analytics. Scan, result, dashboard, auth, and payment pages do not load behavior analytics.

Payment Information

If you choose a paid upgrade, payment is processed securely by Creem, our merchant of record. We never store your credit card details on our servers.

• To provide AI-powered hairline, density, hair attribute, and scalp appearance signals
• To save your scan history and track progress over time (registered users)
• To send you important service updates and notifications
• To improve our service quality, fix bugs, and develop new features

We use service providers to operate ScalpAnalysis AI. We share only the information needed for each provider to perform its function. Scalp photos are shared only with private scan storage and AI report processing systems, not with advertising networks, payment processors, email tools, or public-page analytics tools.

AI Report Processing

We send scalp photos and scan context through our secure third-party analysis provider, only to generate your report.

AI Hairstyle Style-Preview

If you use our optional hairstyle try-on feature, we process the front-facing photo from your scan to generate a simulated styling preview. To create it, we send that photo to a third-party AI service that generates the image on our behalf; we do not publicly identify this provider. The preview is a simulation — it is not a real photo of you and does not reflect your real hair. Generated previews are stored privately to your account, are not shared with other users or made public, and are kept until you delete them or close your account; the source scan photo follows the retention described elsewhere in this policy. We do not use your scan photo or the generated preview to train AI models without your consent. You can use the rest of the app without using this feature.

Supabase

Provides authentication, database records, and private scan image storage for saved baselines and account access controls.

Creem

Our merchant of record. Processes subscription payments and handles billing, applicable taxes, and refunds. It does not receive your scalp photos.

Vercel

Hosts the website, serves pages globally, and provides operational logs needed for reliability and security.

Resend / Email Support

Sends support and contact-form messages when you contact us. Email tools do not receive scalp photos.

Microsoft Clarity and Optional Plausible Analytics

Help us understand public marketing and legal page usage. Behavior analytics are not loaded on scan, result, dashboard, auth, or payment pages in the production default configuration.

Provider note: providers may process data in the United States or other countries where they or their subprocessors operate. We do not sell scalp photos or use them for third-party advertising.

ScalpAnalysis AI is operated primarily for users in the United States. If you access the Service from another country, your information may be processed in the United States and in other countries where our service providers operate. Privacy laws in those countries may differ from the laws where you live.

We use cross-border processing to provide hosting, authentication, private storage, AI report generation, payment processing, support email, security, and reliability. Where required by applicable law, we rely on appropriate contractual and organizational safeguards with our service providers.

If you are located outside the United States and do not want your scalp photos or account data processed through these providers, please do not use the scan feature.

Depending on where you live, including California and other US states, the EU, UK, or similar jurisdictions, you may have privacy rights such as:

To exercise these rights, email us at support@scalpanalysis.app. We will respond within 45 days where US privacy laws apply, or within the timeframe required by applicable law.

We do not sell scalp photos. We also do not use scalp photos for cross-context behavioral advertising. Public-page analytics are separate from scan data and are not loaded on scan, result, dashboard, auth, or payment pages.

We use minimal, privacy-respecting analytics to understand how users interact with our service:

• Essential Cookies: Required for authentication and basic functionality
• Analytics: We may use analytics and session replay on public marketing and legal pages to understand traffic, clicks, navigation, and page performance.
• Sensitive Pages Excluded: Scan, result, dashboard, auth, and payment pages do not load behavior analytics in the production default configuration
• No Third-Party Ads: We do not serve ads or share scan data with advertising networks

We use practical security controls to protect your data:

No internet service can guarantee perfect security. If we learn of a security incident involving your personal information, we will evaluate our notification obligations under applicable law and contact affected users when required.

ScalpAnalysis AI is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@scalpanalysis.app.

We may update this Privacy Policy periodically. Significant changes will be communicated via email (for registered users) or a prominent notice on our website. We encourage you to review this page regularly.

If you have questions about this Privacy Policy or want to exercise your rights, please contact us: