Privacy Policy

Overview

Hairoine ("Hairoine", "we", "us", or "our") operates the Hairoine mobile application and the related web service at hairai.bondrift.com (together, the "Service").

The Service lets you upload a photo of yourself, optionally add a reference photo and a text prompt describing a hairstyle, and receive AI-generated hairstyle previews.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

Information We Collect

Photos and prompts. When you request a hairstyle preview, we collect the photo you upload of yourself, any optional reference photo you add, and the text prompt or selected style you choose. This content is used to generate your requested preview.

Account and sign-in service data. If you continue with Apple or Google, Hairoine receives the provider's stable account identifier and the verified email address the provider makes available. The Google Sign-In software included in the iOS app declares that it may process linked name, email address, phone number, coarse location, user and device identifiers, and authentication or usage data for sign-in, service operation, security, and analytics. Hairoine's backend stores only the provider identifier and verified email from the identity token; it does not request or store your phone number or location for the Hairoine account. A device or session identifier is used to associate your generations, purchases, and saved looks with the same Hairoine account across the app and web service.

Purchase information. In the iOS app, credits and subscriptions are sold through Apple's In-App Purchase service. On the web service, checkout may be handled by Stripe. We receive the transaction identifier, product, offer or introductory-trial status, subscription status and expiration, and payment status needed to grant credits or membership. Your payment card details are handled by Apple or Stripe and are not shared with us.

Paywall and subscription service data. Superwall and RevenueCat may receive a pseudonymous Hairoine app user identifier, product identifiers, purchase history and subscription status, app and device details, and product-interaction events such as onboarding or paywall views, taps, selections, and purchase-flow results. Because the app user identifier is associated with your Hairoine session or account, these records may be linked to you for App Store privacy-disclosure purposes. Superwall and RevenueCat do not receive your uploaded photos, reference photos, generated images, prompts, or payment card number.

Advertising measurement data. Where enabled, Hairoine uses limited Meta and TikTok attribution to measure its own advertising. On iOS, Hairoine asks for Apple's tracking permission before any Meta or TikTok attribution starts; if you decline, the app works normally and sends no Meta or TikTok activation, install, launch, trial, purchase, or retention events. If you allow it, Meta may receive manual app-activation, trial, and verified purchase events, purchase value and currency, and basic app or device details. TikTok may receive automatic install, launch, and retention events, plus manual verified trial and purchase events. On hairai.bondrift.com, Meta Pixel receives page views, checkout starts, completed purchases after Stripe verification, and basic browser or network details. TikTok Pixel receives the same web measurement events on hairai.bondrift.com: page views, checkout starts, completed purchases after Stripe verification, and basic browser or network details. Automatic event logging and advertiser-ID collection remain disabled for Meta in iOS. We do not send photos, prompts, generated media, email addresses, or payment card details to Meta or TikTok.

Install and campaign attribution data. Hairoine uses Tenjin to measure app installs, sessions, advertising campaigns, and approved web-to-app links. Tenjin may process an analytics installation identifier, app and device details, IP address and standard network data, campaign, ad, creative and click information, and a pseudonymous Hairoine customer identifier after sign-in. Tenjin connects without the advertising identifier to record an install or session; the Apple advertising identifier is collected only after you allow tracking. Hairoine does not send Tenjin your photos, prompts, generated media, email address, name, or payment card details.

Product analytics, surveys, and crash data. Hairoine uses PostHog to understand app use, collect optional in-app feedback, and diagnose failures. PostHog may receive a pseudonymous Hairoine account identifier after sign-in, app version and build, device and operating-system class, locale, standard request data such as IP address, an approximate region derived from that network connection, app state, connection state, selected screen and action names, onboarding, sign-in, upload, generation, Saved Looks, paywall, purchase and restore results, coarse timing buckets, controlled error categories, optional survey choices or text you submit, and technical fatal-crash stack data. Session replay, screenshots, UI text capture, request and response payload capture, crash breadcrumbs, and arbitrary free-form analytics properties are disabled; optional survey text is sent only when you choose to submit it. Hairoine does not send PostHog your photos, videos, hairstyle prompts, generated media, email address, name, URLs, file paths, payment card details, or raw job identifiers.

Support and bug reports. If you choose Support or Report a Bug in the app, Hairoine stores your selected category, written message, account and user identifiers, verified account email, app version and build, device class, operating-system version, locale, current form route, delivery state, and submission time. We use this linked information only to answer the request, diagnose the problem, and improve the Service. The report does not attach your photos, prompts, generated media, payment details, authentication cookies, or raw generation identifiers.

Remote configuration and app-update data. Firebase Remote Config supplies allowlisted home, library, and prompt settings and may process an app-installation identifier plus app, device, and network details needed to fetch configuration. Expo and EAS Update deliver signed JavaScript bundles and visual assets for Hairoine's Expo screens and may process standard network request details plus app, runtime, version, and update-channel information needed to select and deliver a compatible update. These services do not receive your uploaded photos, prompts, generated media, email address, or payment card details through Hairoine's configuration or update requests.

How We Use Information

To provide the Service: generate hairstyle previews from your photo, reference photo, and prompt, and to display your generation history inside your account.

To operate credits and subscriptions purchased through Apple's In-App Purchase service in the iOS app, and through Stripe where web checkout is offered.

To deliver remotely configured onboarding and paywall experiences, assign product experiments, and measure whether those experiences work correctly.

To deliver compatible remote app screens, visual assets, navigation choices, and configuration without requiring a new App Store download for every visual change.

To attribute installs and approved web-to-app journeys, measure campaign performance, understand product use, and diagnose app crashes and generation failures.

To respond to support requests and to investigate and prevent fraud, abuse, or violations of our terms.

To maintain and improve the performance, safety, and quality of the Service.

Face Data

Face data means the photos you upload that may show your face. We use those photos, optional reference photos, selected styles, and prompts only to create the hairstyle preview you request and, when live video is enabled, the hairstyle video you request.

We do not create or keep a facial template. We do not use face recognition, biometric identification, identity verification, or biometric inferences.

Third-party AI partners receive the source photo, optional reference photo, and prompt needed to generate an image preview. Temporary provider files used for multi-image edits are deleted by Hairoine after the edit attempt. These partners may retain limited abuse-monitoring logs under their data controls, currently up to 30 days by default unless stricter approved controls apply. When live video is enabled, a video-processing partner receives a short-lived Hairoine backend grant to the selected generated image needed to render that video. Vercel Blob stores face/source/reference/result/video files as private objects. Neon stores account, job, purchase-linkage, and media-reference metadata needed to operate your account.

Vercel Insights and Bondrift analytics receive website usage and technical data, such as page, browser, device, session, referral, and event information. We do not send uploaded photos, reference photos, generated images, or videos to those analytics services.

Saved Looks remain in Hairoine active systems until you delete your account. The in-app Delete Account control removes the account, active sessions, private Blob objects, generation jobs, saved history, and purchase linkage from active Hairoine systems. For deletion help or questions, contact paddyganto12@gmail.com.

After account deletion, we retain only a non-personal HMAC record of a StoreKit transaction key and its deletion time. This small fraud and financial-control record stops a deleted purchase from being replayed. It does not contain your name, email, photos, prompts, payment card data, or the raw transaction key.

How Your Hairstyle Content Is Processed

Choosing or uploading a photo sends it to the Hairoine backend for private storage, but does not by itself send it to third-party AI partners. When you affirmatively start a hairstyle generation, the selected photo, optional reference photo, selected style or prompt, and generation settings are sent to third-party AI partners to produce the preview you requested. Hairoine keeps the selected source, reference, generated result, and job record in private Saved Looks so you can find them later and use a generated result for a future video. If live video is enabled and you request a video, the selected generated image is also made available to a video-processing partner through a short-lived Hairoine backend grant for that render.

Third-party AI partners process image requests and may retain limited abuse-monitoring logs under their data controls. When live video is enabled, a video-processing partner processes the selected generated image for that video render. We do not share face data with advertising or analytics services.

Uploaded photos, reference photos, prompts, generated previews, and generated videos are retained as Saved Looks until you delete your account.

Third-Party Services

Third-party AI partners. Used to generate hairstyle previews from your source photo, optional reference photo, and prompt. Temporary provider files used for multi-image edits are deleted after the edit attempt; limited provider-side abuse-monitoring retention follows the partner's data controls.

Video-processing partners. Used only when live video is enabled and you request a video; the partner receives a short-lived backend grant to the generated image selected for that render.

Vercel hosting and Vercel Blob. Vercel hosts the Hairoine website and backend and may process network and technical request data needed to deliver and secure them. Vercel Blob is used for private storage of source photos, reference photos, generated previews, and generated videos.

Neon. Used for account, session, job, credit, purchase-linkage, and media-reference metadata needed to operate the Service.

Vercel Insights and Bondrift analytics. Used for website usage and technical analytics; uploaded or generated media is not sent to these analytics services.

Apple In-App Purchase. Used to sell credits and subscriptions inside the iOS app and to verify the product, transaction, offer or introductory-trial status, subscription status, and expiration used to grant access. Payment information is processed by Apple and is not shared with Hairoine.

Sign in with Apple and Google Sign-In. Used to authenticate you and keep one Hairoine account in sync across iOS and the web service. Hairoine receives a provider account identifier and verified email. Google's included sign-in software may also process the linked profile, contact, approximate-location, device, and usage categories declared in its Apple privacy manifest for authentication, service operation, security, and analytics. Hairoine does not send photos, prompts, generated media, or payment-card details through login.

Superwall. Used to deliver remote onboarding and paywall experiences and measure product interactions. Superwall may process a pseudonymous Hairoine app user identifier, purchase and subscription status, product identifiers, app and device details, and onboarding or paywall events. The Hairoine identifier can link those records to your Hairoine session or account. Hairoine photos, prompts, generated media, and payment card details are not sent to Superwall.

RevenueCat. Used in observer mode to synchronize Apple purchase and subscription status with a pseudonymous Hairoine app user identifier. The Hairoine identifier can link that purchase history to your Hairoine session or account. Apple StoreKit and the Hairoine backend remain the purchase and entitlement source of truth. Hairoine photos, prompts, generated media, and payment card details are not sent to RevenueCat.

Meta. Used for limited measurement of Hairoine advertising where enabled. On iOS, Hairoine requests Apple's tracking permission before Meta attribution starts; a denial sends no Meta activation, trial, or purchase event and does not limit app features. If allowed, the iOS app may send manual activation, trial, and verified purchase events. The web service sends page views, checkout starts, and Stripe-verified purchases through Meta Pixel. Automatic event logging and advertiser-ID collection remain disabled in iOS. Hairoine photos, prompts, generated media, email addresses, and payment card details are not sent to Meta.

TikTok. Used for limited measurement of Hairoine advertising where enabled. On iOS, Hairoine requests Apple's tracking permission before TikTok attribution starts; a denial sends no TikTok install, launch, retention, trial, or purchase event and does not limit app features. If allowed, the iOS app may send automatic install, launch, and retention events, plus manual verified trial and purchase events. The web service sends page views, checkout starts, and Stripe-verified purchases through TikTok Pixel. Hairoine photos, prompts, generated media, email addresses, and payment card details are not sent to TikTok.

Tenjin. Used to attribute app installs, sessions, campaigns, and approved web-to-app links and to connect subscription outcomes supplied by RevenueCat with the campaign that produced the install. Tenjin may process an analytics installation identifier, app and device details, network data, campaign, ad, creative and click information, and a pseudonymous Hairoine customer identifier after sign-in. It does not receive Hairoine photos, prompts, generated media, email addresses, names, or payment card details. The Apple advertising identifier is collected only after tracking permission is allowed.

PostHog. Used for allowlisted product analytics, optional mobile surveys, and technical fatal-crash reporting. Hairoine sends controlled screen, action, onboarding, sign-in, upload, generation, Saved Looks, paywall, purchase, restore, app-state, connection-state, duration, and error-category events, while PostHog may process standard request data such as IP address and derive an approximate region for analytics and service security. PostHog also receives survey choices or text you choose to submit. Session replay, screenshots, UI text capture, request or response payload capture, crash breadcrumbs, and arbitrary free-form analytics properties are disabled. Uploaded or generated media, hairstyle prompts, email addresses, names, URLs, file paths, payment card details, and raw job identifiers are not sent to PostHog.

Telegram. Used only to send Hairoine's operator an immediate private alert when you deliberately submit an in-app support request or bug report. The alert may include the report text, category, verified account email, shortened account and user identifiers, app version and build, device class, operating-system version, locale, and current form route. Hairoine stores the full report in its own database first, so Telegram is not the only copy. Photos, prompts, generated media, payment details, authentication cookies, and raw generation identifiers are not included.

Firebase Remote Config. Used to fetch allowlisted home, library, and prompt settings. Firebase may process an app-installation identifier and technical app, device, and network data needed to deliver and measure configuration. Hairoine account content and hairstyle media are not sent through Remote Config.

Expo and EAS Update. Used to deliver signed JavaScript bundles and visual assets for compatible Hairoine Expo screens. Update requests may include standard network data and technical app, runtime, version, and update-channel information. Hairoine account content, hairstyle media, and payment data are not sent through update delivery.

Stripe. Used for web checkout where offered. Payment information is processed by Stripe and is not shared with Hairoine.

Service Provider Safeguards

We require service providers that process information for Hairoine to use it only to provide, secure, support, or measure the Service as described in this policy, and to protect it to the same or an equivalent standard required of Hairoine. We do not authorize these providers to use Hairoine photos, prompts, or generated media for their own advertising or to sell that content.

Access to personal information is limited to the providers and personnel that need it for the purposes described in this policy. Provider processing may occur in the United States or other countries where those providers operate, subject to their contractual and legal safeguards.

Advertising and Tracking

Hairoine does not show third-party advertising inside the app.

We do not sell or rent your personal information or your hairstyle content to third parties.

We do not share your photos or prompts with third parties for their own advertising or tracking purposes.

Where Meta or TikTok attribution is enabled, Hairoine uses limited activation, install, launch, retention, trial, checkout, and verified purchase events to measure its own ads. The iOS app requests Apple's tracking permission first; declining keeps Meta and TikTok attribution off and leaves the app fully usable. Automatic event logging and advertiser-ID collection remain disabled for Meta in iOS.

Tenjin records app installs and sessions using non-advertising technical identifiers and campaign information where available. Tenjin receives Apple's advertising identifier only after you allow tracking. Declining tracking leaves the app fully usable and prevents Hairoine from giving Tenjin the advertising identifier.

Data Retention and Deletion

Uploaded photos, reference photos, prompts, generated previews, and generated videos are retained as Saved Looks until you delete your account. This Hairoine-owned retention supports Gallery and future video requests.

Temporary provider files used for a multi-image edit are deleted after the edit attempt. Third-party AI partners may retain limited abuse-monitoring logs under their data controls, currently up to 30 days by default unless stricter approved controls apply; Hairoine deletion cannot remove those provider-side logs.

Account deletion immediately removes the related private Vercel Blob objects, generation jobs, saved history, stored support and bug reports, account data, active sessions, and purchase linkage from active Hairoine systems. A previously delivered Telegram alert may remain in the operator's private Telegram chat until removed there.

Account deletion also removes account data, active sessions, and purchase linkage from Hairoine active systems. After account deletion only, we retain a minimal non-personal HMAC record of StoreKit transaction keys to prevent purchase replay and maintain fraud and financial controls. This record cannot be used to recover your photos, prompts, account profile, email address, or raw transaction identifier. Deleting your Hairoine account does not cancel an Apple subscription; subscriptions are managed through your Apple account.

Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's Privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Your Privacy Rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to object to or restrict certain processing.

You control whether to submit a photo, reference image, or prompt for AI generation. Selecting or uploading content does not by itself start third-party AI processing; you start that transfer by affirmatively requesting a hairstyle generation. You may withdraw from future AI processing by not starting another generation, or use the in-app Delete Account control to remove your account and active Hairoine data as described above.

You can also stop optional camera or photo-library access in iOS Settings. Revoking device permission does not delete content already submitted; use Hairoine's content or account deletion controls for that.

To exercise any of these rights, contact us at the email below. We will respond in line with applicable law.

International Users

The Service is hosted in the United States and may be used from other countries. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, and by using the Service you consent to that transfer where applicable law requires consent.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Service after a change means you accept the updated policy.

Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact Hairoine support at paddyganto12@gmail.com.