HairPlan AI
Privacy Policy

01 Scope and Controller

Anti Mobi ("we," "us," or "our") operates the HairPlan AI mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, retain, disclose, and protect information relating to you and how you may exercise your privacy rights.

This Policy applies to the iOS and Android versions of HairPlan AI and related pages that link to it. Third-party platforms and websites, including Apple, Google, and AI providers, apply their own privacy policies to processing they determine independently.

The controller/business responsible for the processing described here is Anti Mobi. Privacy and support email: minruli299@gmail.com.

02 Information We Process

Depending on the features you use, we may process:

• Photos and images: selfies, hairstyle reference photos, and generated results that you actively select or create.
• AI-derived attributes: face shape, hair length, volume, color, texture, presentation, image-quality flags, hairstyle structure, and generation prompts derived from submitted images.
• Preferences and app state: selected gender preference, hairstyle selections, policy acceptance, and onboarding status.
• Local drafts: draft ID, title, status, source, timestamps, and on-device file paths.
• Purchase information: product ID, purchase status, subscription type, expiry, and restore results supplied by Apple or Google. We do not receive full payment-card details.
• Network and technical information: IP address, request metadata, timestamps, error data, and operational or security logs ordinarily processed by service providers when network features are used. We currently do not integrate advertising or third-party behavioral analytics SDKs.
• Support information: email address, message, and attachments you provide when contacting us.

Photos may contain an identifiable face. We process photos and inferred appearance attributes only to deliver the hairstyle analysis and generation you request, not for authentication, unique identification, advertising profiles, law enforcement, or medical diagnosis. Where such data is treated as sensitive under applicable law, we will obtain separate express consent when required.

We currently do not require an account and do not intentionally collect names, contacts, precise location, health data, or advertising identifiers. If our practices change, we will update this Policy and applicable store disclosures and obtain consent where required.

03 Device Permissions

We request camera access only when you choose to take a photo and photo-library access only when you choose an image. You can withdraw permissions in device settings. Withdrawal does not affect prior lawful processing, but dependent features may stop working.

04 Purposes and Legal Bases

We process information as necessary to perform our contract with you (provide requested features and purchases), with your consent where required (including certain image or sensitive-data processing and device permissions), for our legitimate interests (security, troubleshooting, fraud prevention, and service reliability), and to comply with legal obligations.

We do not use your photos, AI analysis, or generated images to train our own general-purpose AI models, and we do not authorize service providers to use them for independent model training, unless we give clear additional notice and obtain express consent where legally required.

05 AI Processing

When you use AI Match, reference-style analysis, or hairstyle generation, selected images and related prompts are transmitted to our AI provider. Automated systems infer hairstyle-related appearance attributes and generate recommendations or images.

AI output may be inaccurate, incomplete, or biased. It is for styling reference only and is not medical advice or a professional-service guarantee. We do not make decisions based solely on this processing that produce legal or similarly significant effects. Do not upload images you lack the right to use or content containing identity documents, financial information, health records, or unrelated sensitive information.

06 Disclosure of Information

We do not sell or rent personal information and do not share it for cross-context behavioral advertising. We disclose only what is necessary to:

• AI and cloud providers: Beijing Volcano Engine Technology Co., Ltd. and related services (Volcengine Ark/Doubao Seedream and visual understanding) process submitted images, prompts, and results to provide AI analysis and image generation.
• App stores and payments: Apple and Google process distribution, payment, refund, subscription, and purchase verification.
• Service providers: hosting, storage, customer-support, security, legal, and audit providers may process information only as needed to provide services to us and subject to appropriate contractual safeguards.
• Legal, safety, and corporate matters: we may disclose information where reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, restructuring, bankruptcy, or asset transfer subject to continuing legal safeguards.

07 International Transfers

Our service providers may process personal information outside the country or region where you live. Where required by applicable law, we will conduct necessary assessments, provide required notices or obtain consent, and use Standard Contractual Clauses, the UK transfer mechanism, contractual safeguards, or another lawful transfer mechanism.

08 Retention and Deletion

We retain information only as long as necessary for the stated purposes, legal obligations, and disputes:

• On-device photos and drafts: remain in the app's private device storage. You may delete a draft in the app; uninstalling generally removes private app data. The current version removes draft-list records older than seven days, but we do not promise that the associated image file is physically deleted at exactly the same time until technical verification is complete.
• Preferences, policy acceptance, and local subscription state: remain on device until cleared, app data is reset, or the app is uninstalled.
• AI content and service logs: retained by our AI service provider for up to one month and then deleted or anonymized, unless a longer period is required by law or necessary to investigate security incidents or abuse.
• Payment records: retained by Apple or Google under their policies and legal duties; we retain only local status needed for access.
• Support and privacy requests: retained only as long as reasonably necessary to respond, maintain legally required records, resolve disputes, and enforce our agreements.

At expiry, we delete or anonymize data, or isolate and restrict it until secure deletion where immediate deletion is not possible, such as in protected backups.

09 Security

We use safeguards appropriate to risk, including encryption in transit, access controls, least privilege, secret separation, secure development, and provider management. Production builds route AI requests through controlled infrastructure and do not intentionally expose AI API keys. No system is completely secure. We will provide legally required breach notices.

10 Your Rights and Choices

Depending on where you live, you may have rights to know and access, correct, delete, restrict or object, receive portable data, withdraw consent, request human review of qualifying automated processing, appeal a refusal, and complain to a regulator. You also have a right not to be discriminated against for exercising applicable privacy rights.

Use in-app controls to delete drafts or email minruli299@gmail.com with the subject “Privacy Request.” We may reasonably verify identity and agent authority. We will respond within the period required by applicable law and notify you of any permitted extension.

11 U.S. State Privacy Notice

Section 2 describes the categories of personal information we may have processed in the preceding 12 months, their sources, purposes, and recipients. We do not sell personal information or share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics beyond what is reasonably necessary to provide the requested Service. If these practices change, we will update this notice and provide required opt-out mechanisms before the change.

12 Children's Privacy

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Users below the age at which they may independently consent in their location may use the Service only with a parent or legal guardian's permission and supervision.

If we learn that a child provided personal information without valid authorization, we will take reasonable steps to delete it. A parent or guardian may contact minruli299@gmail.com.

13 Third-Party Links and Uploaded Content

Third-party links are governed by the third party's practices. Upload only your own image or content for which you have sufficient authorization. Do not upload photos of children under 13, intimate images, or content that infringes another person's rights.

14 Changes to This Policy

We may update this Policy as features, providers, or laws change. We will update the dates above and provide prominent notice through the app, store page, or another appropriate channel for material changes. We will seek renewed consent where required and will not retroactively reduce existing rights.

15 Contact Us