ReHairPrivacy Policy
ReHair is a local-first mobile app. Your routines, completion history, and progress photos stay in the app's private storage on your device and are not sent to ReHair.
1. Scope and controller
This policy applies to the ReHair mobile app and this website. Ivan Egorov, Spain, controls the limited personal data described below. Contact rehairapp@gmail.com. The Android app is published by Ivan Egorov; the iOS app is published through the Apple developer account held by Enver Abkerimov. The store publisher name can therefore differ from the operator responsible for the service data described in this policy.
ReHair is intended for people aged 13 and older. If you are under the age of legal adulthood where you live, review this policy with a parent or guardian. A store age rating does not establish your ability to consent to data processing. Where processing requires parental consent under local law, that consent must be obtained before the processing begins. The current app does not verify a user's exact age or collect verifiable parental consent.
2. Data stored only on your device
Your name, routine names, notes, schedules, completion records, photo files, and photo-session metadata are stored in the app's private device storage. ReHair does not receive, host, synchronize, inspect, or analyze this content. Onboarding answers are also saved locally, but selected answers can be sent separately as product analytics when sharing is enabled, as explained in section 5. The app has no ReHair account or sign-in system. In addition, public educational content requests do not send your photos, routine records, or onboarding answers.
The app does not provide cloud synchronization, server backup, data export, or a remote deletion service for this device-only content. Uninstalling the app or clearing its data with operating-system tools removes this local content. Device loss, damage, or operating-system behavior can also make local content unavailable.
3. Limited service data
| Data | Purpose |
|---|---|
| Subscription and entitlement information | Apple or Google processes payment. Adapty receives purchase and subscription status, product and transaction identifiers, an app profile identifier, and device and connection information, including IP address, to verify access and manage subscriptions. ReHair does not receive your payment card details. |
| Sanitized crash and diagnostic information | Reliability and security troubleshooting through Sentry. |
| Product analytics (when enabled) | Understanding onboarding progression, selected questionnaire answers, feature use, purchase outcomes, and educational article engagement through PostHog Cloud EU using an install-scoped pseudonymous identifier. Some answers concern hair loss and care and may reveal health information. Photos, free text, and advertising identifiers are not sent. |
| Website analytics (when consented) | Measuring page visits and external referring domains for public website pages through PostHog Cloud EU using a random pseudonymous identifier; starts only after you choose Allow analytics. |
| Public educational content delivery | The mobile app downloads public educational article JSON and cover images from Vercel; Vercel receives standard request and connection metadata, such as IP address. |
| Support form details and correspondence | Responding to a request you voluntarily submit. |
| Website delivery and security logs | Serving and protecting the legal/support website and static assets. |
We do not sell personal data. ReHair does not use advertising pixels or behavioral session recording, and we do not use your photos for AI or medical analysis.
4. Photos and health-related context
Photos can be sensitive. They remain on your device and are used only for the comparisons you choose to view. ReHair does not perform AI analysis, diagnose a condition, or provide medical treatment.
5. Product analytics and privacy choices
When product analytics is enabled in production, ReHair uses PostHog Cloud EU (hosted in the European Union) to measure high-level product usage, such as completing onboarding steps, using the camera, responding to permission requests, opening the subscription screen, purchase and restore outcomes, and viewing educational articles. Events can include your app version, device platform, screen names, navigation source, and the public identifier of an article you open.
Product analytics can also include selected onboarding answers: age group, areas of hair concern, how long you have noticed changes, family history, whether you follow a routine, routine types (including medicine or procedure categories), how you track changes, and your goal. These answers may reveal health information. Your name, free-text entries, photos, local file paths, and the names and notes of routines or events you create are not sent to PostHog.
Events are linked to a randomly generated Analytics ID for this installation. This is pseudonymous data, not fully anonymous data: the ID allows events from the same installation to be associated. We do not link this ID to advertising identifiers or use it to track you across other companies' apps or websites. PostHog location lookup is disabled; network services still receive an IP address to handle a connection.
Website analytics starts only after you choose Allow analytics. We use PostHog Cloud EU to collect the page path, the external referring domain, and a random pseudonymous identifier stored in this browser. Query parameters, full referring URLs, form entries, email addresses, and advertising identifiers are not collected through website analytics.
You can change your choice at any time through Privacy choices in the website footer to withdraw your consent. Withdrawing consent stops future website analytics and removes the identifier from this browser. It does not automatically delete events already retained by PostHog.
In the current production app, product analytics is enabled by default and can begin during onboarding, before you reach Settings. A saved choice to turn it off is kept for this installation. Website analytics has a separate choice and starts only after you allow it in the browser. Turning off one does not turn off the other.
An enabled default or continued use of the app is not explicit consent to the processing of health information. An opt-out control does not replace consent, including parental consent, where applicable law requires it.
Open Settings > Privacy & analytics in the app to change product analytics sharing. Turning sharing off stops future product analytics and clears unsent events. Turning off analytics does not automatically delete historical events already stored on the analytics server. This choice does not stop subscription verification, public article delivery, or sanitized crash diagnostics, and does not affect access to paid features.
Support deletion workflow: Because ReHair has no user accounts, historical analytics events cannot be identified by email or name. If you wish to delete previously collected analytics events, copy your Analytics ID from Settings > Privacy & analytics and use Request data deletion to contact support, or email rehairapp@gmail.com with your deletion request. We will delete the associated data from PostHog Cloud EU in accordance with our support deletion process.
Separation of local and remote deletion: Deleting the app or clearing local device data removes your local photos, routines, and the local Analytics ID, but does not notify the remote analytics server. If you want historical server events deleted, copy your Analytics ID from Settings before uninstalling and submit a support deletion request.
6. Providers and recipients
Apple and Google provide app distribution and store billing; Adapty verifies subscription entitlements (direct Adapty-to-PostHog export is disabled); Sentry receives sanitized diagnostics; PostHog Cloud EU processes pseudonymous product analytics and consented website pageviews in the European Union; Expo/EAS supports app build and update delivery; Vercel hosts this website and delivers public educational article JSON and cover images; and Linear and Google/Gmail support manual request handling. These providers do not receive your locally stored routines or photos from ReHair. International transfers use legally required safeguards where applicable.
7. Retention
Local app content remains until the app or its data is removed from the device. Store and subscription records follow Apple, Google, and Adapty retention rules. Product and website analytics raw events in PostHog Cloud EU are retained for 12 months. Closed support records are deleted no later than 24 months after completion, unless law requires longer retention. Website security logs follow the hosting provider's configured retention.
8. Your choices and rights
ReHair cannot access, correct, export, or remotely delete content that exists only on your device. You control that content through the app and operating-system application controls. For subscription, diagnostic, product analytics, website analytics, website, or support data that we control, applicable law may give you access, correction, deletion, restriction, objection, and complaint rights. You can exercise your analytics opt-out in Settings or through Privacy choices in the website footer, or submit a deletion request with your Analytics ID to rehairapp@gmail.com.
9. Security
ReHair uses private app storage, platform data-protection controls, backup restrictions, sanitized diagnostics, and encrypted network connections for subscription, analytics, and support services. No device or service can be guaranteed absolutely secure.
10. Changes and contact
We may update this policy and will publish a revised date here. Contact Ivan Egorov at rehairapp@gmail.com. You may complain to Spain's AEPD or your local supervisory authority.