Privacy Policy for HairFit AI

Effective Date: September 22, 2025

At HairFit AI ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application, HairFit AI (the "Application"), with the package name com.hairai.stylechanger, available on the Apple App Store. By using the Application, you consent to the practices described in this policy.

This Privacy Policy is effective as of the date stated above and will remain in effect unless replaced by an updated version. Any future changes will be posted on this page, and the updated policy will take effect immediately upon posting. We encourage you to review this policy periodically.

1. Information We Collect

We may collect the following types of information when you use the Application:

• Personal Information: Information that can identify you, such as your name, email address, or other contact details, if you choose to provide them (e.g., when contacting us for support).
• Usage Data: Information about how you interact with the Application, including device type, operating system, and usage statistics.
• Photos and Camera Data: If you use the hairstyle simulation feature, the Application may access your camera or photo library to process images for previews. These images are processed locally on your device and are not stored or shared unless explicitly stated.
• Face Data (Biometric and Image Data): When you use hairstyle, hair color, makeup, beauty, or other face-related simulation features, the Application may collect a facial image to detect facial landmarks and apply visual effects. These images are securely transmitted to our third-party service provider (Volcengine) for real-time processing. The images are used only for generating style previews and visual effects. We do not use face data for identification, authentication, marketing, or analytics, and we do not permanently store or reuse this data.
• Analytics Data: We may collect anonymized usage data, crash reports, and technical information through trusted third-party services such as Google Firebase. These services help us understand app performance and improve user experience. Firebase does not process facial images.

Note: Face data is only used temporarily for hairstyle, hair color, beauty, or other style-related previews and is deleted immediately after processing.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and improve the Application’s functionality, including hairstyle, hair color, makeup, and other style simulation features.
• To detect facial features in order to apply hairstyle, hair color, makeup, beauty effects, or other style-related modifications. Face images are used only for generating these effects and are never used for identification, marketing, or analytics.
• To respond to your inquiries or provide customer support.
• To monitor app performance, improve stability, and enhance user experience through services such as Firebase.
• To comply with applicable laws, regulations, or legal requests.
• To protect the rights, property, or safety of HairFit AI, its users, or third parties.

We do not use your personal information for marketing purposes without your explicit consent.

3. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following cases:

• Image Processing: For face data processing, we use Volcengine to apply hairstyle, hair color, makeup, or other visual effects. This provider is contractually obligated to protect your data and use it only for the purposes we specify.
• Analytics & Crash Reporting: We use Google Firebase services for analytics and crash reporting. These services may collect device identifiers and usage information to help us improve app performance.
• Legal Compliance: We may disclose your information to comply with applicable laws, regulations, or governmental requests, or to protect our rights, property, or safety.
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you personally with affiliates or partners for statistical or analytical purposes.

4. Data Storage and Security

We take reasonable measures to protect your personal information from unauthorized access, loss, or misuse. These measures include encryption, secure servers, and access controls. However, no data transmission over the internet is 100% secure, and we cannot guarantee the absolute security of your information.

Images processed for hairstyle, hair color, makeup, or other style-related previews are not permanently stored on our servers. They are transmitted securely for real-time processing and discarded immediately after the request is completed, unless you explicitly choose to save or share them within the Application. Any stored data (e.g., user-saved style photos) is encrypted and protected in accordance with industry standards.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Opt-Out: Opt out of data collection by uninstalling the Application or contacting us to delete your account.

To exercise these rights, please contact us at the email address provided below. For California residents, under the California Consumer Privacy Act (CCPA), you have the right to request disclosure of the categories and specific pieces of personal data we collect, as well as the right to opt out of the sale of your data (note: we do not sell your data).

6. Third-Party Services

The Application integrates trusted third-party services, including:

• Volcengine: Used exclusively for real-time face image processing to apply hairstyle, hair color, makeup, or beauty effects.
• Google Firebase: Used for analytics and crash reporting to improve app performance. For more details, please see the Firebase Privacy and Security documentation.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where Firebase services are hosted) and regions where Volcengine operates. We ensure that such transfers comply with applicable data protection laws, including GDPR for EU users.

8. Compliance with Laws

This Privacy Policy is designed to comply with applicable privacy laws, including but not limited to:

• General Data Protection Regulation (GDPR) for EU residents.
• California Consumer Privacy Act (CCPA) and California Online Privacy Protection Act (CalOPPA) for California residents.
• Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian residents.

If you believe our practices do not comply with these laws, please contact us immediately.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: yifeng6727@gmail.com

For inquiries about updating, correcting, or deleting your personal information, please include “Privacy Request” in the subject line of your email.