Privacy Policy

1. Scope and controller

This policy applies to the ReHair mobile app and this website. Ivan Egorov, Spain, controls the limited personal data described below. Contact rehairapp@gmail.com. ReHair is for adults aged 18 or older.

2. Data stored only on your device

Routine names, notes, schedules, completion records, onboarding preferences, photo files, and photo-session metadata are stored in the app's private device storage. ReHair does not receive, host, synchronize, inspect, or analyze this content. The app has no ReHair account or sign-in system. In addition, public educational content requests do not send your photos, routine records, or onboarding answers.

The app does not provide cloud synchronization, server backup, data export, or a remote deletion service. Uninstalling the app or clearing its data with operating-system tools removes this local content. Device loss, damage, or operating-system behavior can also make local content unavailable.

3. Limited service data

We do not sell personal data. ReHair does not use advertising pixels or behavioral session recording, and we do not use your photos for AI or medical analysis.

4. Photos and health-related context

Photos can be sensitive. They remain on your device and are used only for the comparisons you choose to view. ReHair does not perform AI analysis, diagnose a condition, or provide medical treatment.

5. Product analytics and privacy choices

When product analytics is enabled in production, ReHair uses PostHog Cloud EU (hosted in the European Union) to measure high-level product usage, such as completing onboarding steps or viewing feature screens. Consent-governed analytics include knowledge_library_opened (when opening the educational library) and knowledge_article_opened (when viewing an article), reporting curated article_slug and navigation source (such as dashboard or library). Article body content, your routine data, photos, and any user-entered content are never sent with these analytics events. Telemetry uses a randomly generated, install-scoped pseudonymous identifier that is not linked across apps or to advertising IDs.

Website analytics starts only after you choose Allow analytics. We use PostHog Cloud EU to collect the page path, the external referring domain, and a random anonymous identifier stored in this browser. Query parameters, full referring URLs, form entries, email addresses, and advertising identifiers are not collected through website analytics.

You can change your choice at any time through Privacy choices in the website footer to withdraw your consent. Withdrawing consent stops future website analytics and removes the anonymous identifier from this browser. It does not automatically delete events already retained by PostHog.

Legal basis: Where required by applicable law (such as the EU/EEA and UK), analytics processing relies on your consent or legitimate interest as approved under our privacy governance. You may opt out of product analytics at any time in the app's Settings.

Opt-out behavior: Toggling analytics off immediately stops all future telemetry collection. Turning off analytics does not automatically delete historical events already stored on the analytics server.

Support deletion workflow: Because ReHair has no user accounts, historical analytics events cannot be identified by email or name. If you wish to delete previously collected analytics events, copy your anonymous Analytics ID from Settings and email rehairapp@gmail.com with your deletion request. We will delete the associated data from PostHog Cloud EU in accordance with our support deletion process.

Separation of local and remote deletion: Deleting the app or clearing local device data removes your local photos, routines, and the local Analytics ID, but does not notify the remote analytics server. If you want historical server events deleted, copy your anonymous Analytics ID from Settings before uninstalling and submit a support deletion request.

6. Providers and recipients

Apple and Google provide app distribution and store billing; Adapty verifies subscription entitlements (direct Adapty-to-PostHog export is disabled); Sentry receives sanitized diagnostics; PostHog Cloud EU processes pseudonymous product analytics and consented website pageviews in the European Union; Expo/EAS supports app build and update delivery; Vercel hosts this website and delivers public educational article JSON and cover images; and Linear and Google/Gmail support manual request handling. These providers do not receive your locally stored routines or photos from ReHair. International transfers use legally required safeguards where applicable.

7. Retention

Local app content remains until the app or its data is removed from the device. Store and subscription records follow Apple, Google, and Adapty retention rules. Product and website analytics raw events in PostHog Cloud EU are retained for 12 months. Closed support records are deleted no later than 24 months after completion, unless law requires longer retention. Website security logs follow the hosting provider's configured retention.

8. Your choices and rights

ReHair cannot access, correct, export, or remotely delete content that exists only on your device. You control that content through the app and operating-system application controls. For subscription, diagnostic, product analytics, website analytics, website, or support data that we control, applicable law may give you access, correction, deletion, restriction, objection, and complaint rights. You can exercise your analytics opt-out in Settings or through Privacy choices in the website footer, or submit a deletion request with your Analytics ID to rehairapp@gmail.com.

9. Security

ReHair uses private app storage, platform data-protection controls, backup restrictions, sanitized diagnostics, and encrypted network connections for subscription, analytics, and support services. No device or service can be guaranteed absolutely secure.

10. Changes and contact

We may update this policy and will publish a revised date here. Contact Ivan Egorovat rehairapp@gmail.com. You may complain to Spain's AEPD or your local supervisory authority.