Privacy Policy

Last Updated: March 6, 2026

Introduction

Haair is designed with privacy in mind. Your photos and generated images stay on your device. Your photo is sent for processing only when you explicitly tap Generate. It is used solely to create the requested AI hairstyle preview and is automatically deleted within one hour.

Summary

  • No accounts required. Anonymous authentication only.
  • Your photos and generated images are stored locally on your device.
  • Photos are sent to Replicate (replicate.com), a third-party AI service, for processing only when you tap Generate and are automatically deleted within one hour.
  • We use RevenueCat for in-app purchases; only purchase-related data is shared.
  • You can delete your generation history at any time in the app.

What Data Stays on Your Device

  • Photos you select or capture
  • Generated hairstyle preview images
  • Generation history (including hairstyle name, hair color, and timestamps)
  • App preferences (theme, language)
  • Onboarding progress

This data is stored locally using SQLite and your device's file system. It is not transmitted for processing unless you initiate a generation.

When Data Is Sent (Only on Your Action)

Hairstyle Generation

  • Triggered by you: Your photo is sent only when you tap Generate.
  • What is sent: Your photo (encoded), the selected hairstyle name, the selected hair color, and an anonymous user ID.
  • Processing: Your photo is sent to our secure backend and forwarded to Replicate (replicate.com), a third-party AI service, solely to generate the requested hairstyle preview.
  • Processing lifecycle: Your photo is used only to process your request and is automatically deleted from Replicate's servers within one hour per their data retention policy. We do not use your photos to train AI models.
  • Result: The generated hairstyle image is returned to your device and saved locally.

Face Data and Photo Processing

Your photos may contain facial features ("face data").

  • Collection: Only when you voluntarily provide photos via camera or photo library.
  • Use: Solely to generate AI hairstyle previews.
  • Sharing: Only with Replicate (replicate.com), a third-party AI service, for image generation.
  • Server processing: Photos are processed to generate the image and automatically deleted from Replicate's servers within one hour.
  • Local storage: Photos and generated images remain on your device until you delete them.
  • Retention: Server-side — automatically deleted within one hour. Device-side — until deleted by you.
  • AI training: We do not use your photos to train AI models. Photos are automatically deleted from Replicate's servers within one hour per their data retention policy.

AI Data Sharing Consent

On first use, you are asked to consent to AI processing of your photos. If you decline, the generation feature is unavailable, but you can still browse hairstyles and hair colors. Your consent choice is stored locally and can be changed at any time in Settings.

By consenting, you agree that your selected photo will be shared with Replicate (replicate.com), a third-party AI service, solely to generate the requested hairstyle preview. You can review Replicate's privacy policy at https://replicate.com/privacy.

Authentication

We use Firebase Anonymous Authentication. No email, password, or personal information is required. A random anonymous ID is created automatically and used only to manage purchases and credits.

Purchases and Subscriptions

We use RevenueCat to manage in-app purchases and subscriptions. Data involved includes purchase receipts, product identifiers, credit balance, and an anonymous user ID. RevenueCat processes this data according to its privacy policy: https://www.revenuecat.com/privacy

Permissions

The app may request photo library access to select photos and camera access to take photos directly in the app for AI hairstyle generation. These permissions are optional and required only to use the generation feature.

Diagnostics

We do not use advertising or analytics SDKs. Optional platform-level crash reports may be shared with Apple if you opt in at the OS level and are not linked to your photos or generations.

Data Sharing and Selling

We do not sell your data or share personal data with advertisers. Service providers receive only the data necessary to provide their services and are bound by their own privacy terms.

Security

All data transfers use HTTPS with modern encryption. Photos and generated images remain on your device. Authentication credentials are stored securely in the iOS Keychain.

Your Choices

You can delete generated images from the History section, control AI processing by choosing when to tap Generate, and manage AI processing consent in Settings.

Children's Privacy

Haair is not intended for children under the age of 13. We do not knowingly collect personal data from children under the age of 13.

Changes to This Policy

We may update this Privacy Policy as features evolve. The "Last Updated" date reflects the latest version.

Contact

Email: vasgo.apps@gmail.com

In-app: Settings → Contact Us