Privacy Policy

Latest version: 2026-09-30

Content

1. Who we are
2. Data we collect
3. How we use your data
4. Legal bases for processing
5. Account & authentication
6. Payments & subscriptions
7. Third-party services
8. Data storage & security
9. Data retention & deletion
10. International data transfers
11. Your privacy rights
12. Children & age requirements
13. Changes to this Privacy Policy
14. Contact

Overview

HairWave respects your privacy and is committed to handling your personal data responsibly.

This Privacy Policy explains what personal data HairWave collects, why it is processed, how it may be shared with service providers, how long it may be retained, and the rights available to you.

HairWave is operated by Siyano Studio, which is responsible for the processing of personal data described in this Privacy Policy.

We do not sell your personal data.

1. Who we are

HairWave is operated by:

Siyano Studio
Dumolinlaan 1, box 13
8500 Kortrijk
Belgium

Email: contact@siyanostudio.com

For the processing described in this Privacy Policy, Siyano Studio acts as the data controller where applicable.

2. Data we collect

Depending on how you use HairWave, we may process the following categories of data:

• Account and identity information, such as your email address, user identifier, and information provided by the sign-in method you use
• Profile information you choose to provide in HairWave
• Hair-care routine information, completed rituals, streaks, and progress information
• Subscription information necessary to determine whether you have valid subscription access
• Technical information necessary to operate, secure, troubleshoot, and maintain the app
• Communications you send to us when requesting support or contacting us

During onboarding, HairWave may ask questions about your hair, hair loss, hair-care experiences, and related wellbeing. Your answers are used temporarily within the app to calculate and display your onboarding result. These quiz answers and the calculated result are not stored in your HairWave account or sent to our backend.

3. How we use your data

We process personal data where necessary to:

• Create, authenticate, and maintain your HairWave account
• Provide the HairWave features and services you request
• Save and display your hair-care routine and progress
• Personalize HairWave based on information and preferences you choose to save
• Verify and manage access associated with your subscription
• Maintain the security and integrity of HairWave
• Diagnose technical problems and maintain app functionality
• Respond to support requests and communications
• Comply with applicable legal obligations
• Establish, exercise, or defend legal claims where necessary

Onboarding quiz answers are used temporarily within the app to calculate and display your onboarding result. HairWave does not use these answers to make a medical diagnosis or medical treatment decision.

4. Legal bases for processing

Where the General Data Protection Regulation (GDPR) or similar laws apply, our legal basis depends on the purpose of the processing.

We may process personal data where it is necessary to perform our agreement with you, including creating and maintaining your account, providing HairWave features, saving your progress, and managing access to subscription features.

We may process certain data where necessary for our legitimate interests, such as maintaining the security, reliability, and functionality of HairWave, preventing misuse, and responding to support requests, provided that these interests are not overridden by your rights and freedoms.

We may also process data where necessary to comply with a legal obligation.

Where applicable law requires consent for a particular type of processing, we will rely on your consent and you may withdraw that consent as permitted by law.

5. Account & authentication

HairWave uses third-party authentication and backend services, including Supabase, to support account creation, authentication, and account management.

The sign-in methods available to you may depend on your device, platform, and version of HairWave. When you use a third-party sign-in provider, that provider may process information according to its own privacy policy.

HairWave receives only the information necessary from the authentication process to identify your account and provide access to the app.

We do not have access to the password for your external Google, Apple, or other third-party account.

6. Payments & subscriptions

HairWave offers access through paid subscriptions.

Subscription purchases are processed by the applicable app store or payment platform, such as Google Play or, where available, the Apple App Store. HairWave does not directly receive or store your full payment card details.

We may receive and process information necessary to verify and manage subscription access, such as subscription status, product or plan identifiers, purchase or transaction identifiers, purchase tokens, and subscription validity information.

HairWave may use Superwall to display paywalls and support the subscription purchase experience. Superwall is not used by HairWave as the sole source for determining whether a Google Play subscription is valid.

Deleting your HairWave account does not automatically cancel a subscription purchased through an app store. Subscriptions must be cancelled separately through the platform where they were purchased if you want to prevent future renewals.

7. Third-party services

HairWave relies on service providers and third-party platforms to operate certain features.

These may include:

• Supabase — account authentication, database, and backend infrastructure
• Google — Google Sign-In and, on Android, Google Play subscription purchasing and verification
• Apple — Apple services that may be used when HairWave is made available on Apple platforms
• Superwall — paywall and subscription purchase experience

These providers may process limited personal data where necessary to provide their services. Their processing may also be subject to their own privacy policies and terms.

These providers may process personal data according to their role in providing their services and in accordance with their own applicable privacy terms and legal obligations.

8. Data storage & security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

HairWave uses secured backend services and encrypted network connections where supported and appropriate.

No method of electronic storage or transmission can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of personal data.

9. Data retention & deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing HairWave, maintaining your account, complying with legal obligations, resolving disputes, preventing fraud or misuse, and enforcing agreements.

Account-related data and HairWave progress data are generally retained while your account remains active.

You may request deletion of your HairWave account and associated personal data through the account deletion functionality provided by HairWave or through the external account deletion method made available by Siyano Studio.

When an account is deleted, personal data associated with that HairWave account will be deleted, unless specific information must be retained for a legitimate reason such as legal compliance, fraud prevention, security, dispute resolution, or the establishment, exercise, or defense of legal claims.

Where data must be retained after account deletion, we will retain it only for as long as necessary for the applicable purpose.

Information processed independently by an app store, authentication provider, or other third party may remain subject to that provider's own retention and deletion practices.

Deleting your HairWave account does not automatically cancel an active app-store subscription.

10. International data transfers

Some service providers used by HairWave may process or store personal data outside Belgium or the European Economic Area.

Where personal data protected by the GDPR is transferred outside the European Economic Area, such transfers are subject to the transfer mechanisms and safeguards required by applicable data protection law.

Depending on the provider and destination, these may include an adequacy decision recognized by the European Commission or contractual safeguards such as Standard Contractual Clauses.

11. Your privacy rights

Depending on applicable law and your circumstances, you may have rights relating to your personal data.

Under the GDPR, these may include:

• The right to access your personal data
• The right to correct inaccurate or incomplete personal data
• The right to request deletion of your personal data
• The right to restrict certain processing
• The right to object to certain processing
• The right to data portability where applicable
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with a competent data protection authority

These rights are subject to the conditions and exceptions provided by applicable law.

You can contact us at contact@siyanostudio.com to exercise a privacy right or ask a question about the processing of your personal data.

If you are in Belgium, you also have the right to lodge a complaint with the Belgian Data Protection Authority.

12. Children & age requirements

HairWave is not intended to be used in violation of applicable minimum-age or parental-consent requirements.

Where applicable law requires permission from a parent or legal guardian for the processing of a user's personal data, HairWave should only be used with the required permission.

If we become aware that personal data has been collected in circumstances that do not comply with applicable age or consent requirements, we may take appropriate steps to delete the information or account, subject to applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to HairWave, our data practices, service providers, or legal requirements.

When this Privacy Policy is updated, we will update the latest version date.

Where required by applicable law, we will provide additional notice or request consent before material changes affecting your personal data take effect.

14. Contact

If you have questions, requests, or concerns about this Privacy Policy or the way HairWave processes personal data, contact:

Siyano Studio
Dumolinlaan 1, box 13
8500 Kortrijk
Belgium

Email: contact@siyanostudio.com