Skip to content
Hairdaze

Your Consumer Health Data Privacy Policy

Last updated: 17 September 2026

This notice supplements our Privacy Policy and applies specifically to consumer health data as defined by the Washington My Health My Data Act and Nevada Revised Statutes Chapter 603A. It applies to residents of Washington and Nevada, and to anyone whose consumer health data is collected in those states.

Where this notice and our general Privacy Policy differ, this notice governs consumer health data.

Hairdaze is operated by Dude Development LLC, doing business as Hairdaze. You can reach us at [email protected].

Contents
  1. What consumer health data we collect
  2. Where it comes from
  3. Why we collect it
  4. Who we share it with
  5. We do not sell consumer health data
  6. Consent
  7. Your rights
  8. How to appeal
  9. Changes to this notice

1. What consumer health data we collect

In short: Observations about your hair and scalp that you enter yourself, and a small number of wellness signals derived on your device from Apple Health.

Data you enter

  • Hair and scalp condition. Optional observations recorded with a daily log: greasiness, breakage, frizz, dryness, tangling, and scalp itchiness.
  • Hair profile. Hair type and texture, porosity, density, scalp characteristics, length, and chemical treatment history.
  • Goals and concerns. The haircare outcomes you tell us you are working toward.
  • Products and routines. The haircare products you use, their ingredients, and what you do to your hair.
  • Free-text notes you choose to add to a log.

Every condition observation is optional, and a question you skip is not stored as an answer of any kind.

Data derived from Apple Health

If you connect Apple Health, Hairdaze reads health data on your device and converts it there into four simple signals. Only these four are transmitted to us:

  • poor_sleep — whether sleep was short
  • good_sleep — whether sleep was adequate
  • low_hydration — whether fluid intake was low
  • sweat_load — how physically demanding the day was, from 0 to 1

Raw health measurements never leave your device. Exact sleep hours, heart rate variability, basal body temperature, body mass, and menstrual cycle information are read on your iPhone and are not transmitted to us in any form. This is enforced in our application code and verified by an automated test that fails our build if any such value appears in what the app sends.

Data we do not collect

We do not collect precise information about your reproductive or sexual health, gender-affirming care, diagnoses, medications, treatments, genetic data, or biometric data. We do not attempt to infer any of these from what you record.

2. Where consumer health data comes from

  • Directly from you, when you complete your profile or record a log.
  • From your device, where you have connected Apple Health and granted read access, converted into signals before transmission as described above.
  • Generated by us, as inferences drawn from your own logs — the patterns and insights the app shows you.

We do not purchase consumer health data, and we do not obtain it from data brokers, advertising networks, or other third-party sources.

3. Why we collect it

  • To provide the Services. Recording and displaying your haircare history is what the app is for.
  • To produce insights for you. We analyse your own history statistically to identify patterns between what you do and how your hair responds, and show those patterns back to you.
  • To provide safety-related prompts. For example, pausing suggestions that would add heat or tension when you have repeatedly logged significant breakage, and suggesting you see someone in person.
  • To support you when you contact us about a problem.

We do not use consumer health data for advertising, marketing, profiling for advertising purposes, or any form of targeted content from third parties.

4. Who we share it with

In short: Only processors who host or operate the Services on our instructions, and only to the extent necessary.

RecipientRoleConsumer health data received
Supabase Inc.Database, authentication, and storage providerAll consumer health data you record, stored on our behalf
Google LLC (Google Cloud)Hosting for our analysis service (Cloud Run); language model used to word insights (Vertex AI)Your logs during analysis. The language model receives statistical findings only, with no user identifier attached.
Apple Inc.App distribution, authentication, paymentsNone. Apple Health data is read on your device under your control and is not sent back to Apple by us.
RevenueCat, Inc.Subscription managementNone
Open Beauty FactsPublic cosmetic ingredient databaseNone. We send product names or barcodes only.

We have no affiliates with whom we share consumer health data. Each recipient above is contractually bound to process data only on our instructions and may not use it for its own purposes.

We may also disclose consumer health data where required by law, or where necessary to protect against fraud or to establish, exercise, or defend legal claims.

5. We do not sell consumer health data

We do not sell consumer health data, and we will not. We have never collected a valid authorization to sell consumer health data, because we do not engage in such sales. If this ever changed, we would be required to obtain your separate, written, signed authorization first — and we would ask you plainly rather than burying it in a policy update.

We also do not share consumer health data for cross-context behavioural advertising.

6. Consent

We collect consumer health data only after you have affirmatively agreed to it, separately from your agreement to our general Terms of Service and Privacy Policy. In practice:

  • You consent by choosing to record an observation. Every condition question is optional and can be skipped without consequence.
  • Connecting Apple Health requires a separate, explicit permission granted through iOS.
  • Sharing with the processors listed in Section 4 is necessary to provide the Services and is covered by the same consent; we obtain separate consent before any sharing that is not necessary to provide the Services.

You may withdraw consent at any time by emailing [email protected], by disconnecting Apple Health in iOS Settings › Privacy & Security › Health › Hairdaze, or by deleting your account in Profile › Privacy & Data. Withdrawal stops further collection and processing. It does not affect processing already carried out lawfully before the withdrawal.

7. Your rights

If you are a Washington or Nevada resident, you have the right to:

  • Confirm whether we are collecting, sharing, or selling your consumer health data, and access that data — including a list of all third parties with whom we have shared it, and an active email address or other contact by which you can reach each of them.
  • Withdraw consent to our collection and sharing of your consumer health data.
  • Delete your consumer health data.

How to exercise them

Email [email protected] with “Consumer Health Data Request” in the subject line, or use the tools in Profile › Privacy & Data inside the app to export or delete your data directly.

We will respond within 45 days of receiving your request. If we need more time, we will tell you within that period and may extend by a further 45 days. There is no charge for your first two requests in any twelve-month period.

We may need to verify your identity before acting on a request, and we will use the information you provide for that purpose only. If we cannot verify your identity, we will tell you why.

What deletion means

On a verified deletion request, we delete your consumer health data from our active systems and instruct each processor listed in Section 4 to do the same. Data may persist for a limited period in encrypted backups, from which it is removed on the normal backup rotation and is not restored to active systems in the meantime.

8. How to appeal

If we decline to act on your request, we will tell you why. You may appeal by emailing [email protected] with “Consumer Health Data Appeal” in the subject line. We will respond in writing within 45 days with our decision and reasoning.

If your appeal is denied, you may submit a complaint to:

  • Washington residents: the Washington State Attorney General.
  • Nevada residents: the Nevada Attorney General.

9. Changes to this notice

We will update this notice when our practices change, and will indicate the change with a revised “Last updated” date. We will not apply a material change retroactively to consumer health data already collected without first obtaining your consent.

Hairdaze

Good hair days, planned in advance.

  • Home
  • Privacy
  • Terms
  • Your Consumer Health Data Privacy Policy
  • [email protected]

© 2026 Hairdaze. Guidance for planning, not medical advice.