Privacy Policy

The short version

• We collect the minimum needed to run the app: your account info, your hair profile, your routines, the completions and events you log, and the product reviews you submit.
• We use that data only to operate Coildex, personalize your recommendations, and improve the product.
• We don’t sell your data. We don’t run third-party ad trackers on the app. We don’t share your profile with product brands.
• You can export everything, delete everything, or delete your account entirely — at any time.

Information we collect

Account information. When you sign up we store your email address and a password hash (we never store your plaintext password). If you sign in with Apple, we store the anonymized relay identifier Apple provides, plus a display name if you share one.

Hair profile. During onboarding you can tell us your hair type (2a–4c), porosity, density, texture, damage factors (heat styling, chemical treatments, tender scalp, etc.), and whether you want to avoid high-tension styles. This profile powers personalized ingredient verdicts and tension warnings. It is never shared with third parties.

App activity. Routines you build, completions you log, hair events you record (wash, deep condition, trim, protective style install/remove, etc.), product reviews you submit, hairstyle bookmarks, notes you attach to guides, and reminders you enable.

Device & technical data. We store the minimum needed to deliver notifications and keep the app working offline — notification tokens, local cache, and the date/time of your most recent sync. We do not embed third-party analytics SDKs inside the iOS app.

Contact form submissions. When you write to us via the contact page we store your name, email, message, and browser user-agent so we can reply.

How we use your data

• To run the app— authenticate you, sync your routines and completions, send reminders you’ve opted in to.
• To personalize recommendations— match ingredients and styles against your hair profile so Coildex only shows you what’s likely to work for your texture, porosity, and sensitivities.
• To filter community reviews — show you product ratings from people with a hair profile similar to yours instead of a generic average.
• To improve the product — aggregate, anonymized patterns (e.g., which templates are most commonly adopted) help us decide what to build next.

Who we share data with

We use a small number of service providers to run Coildex. They process your data only on our behalf and under data-processing terms:

• Supabase — database, authentication, and file storage for your profile, routines, and any images you upload.
• Apple — delivers push notifications you opt in to, and handles Sign in with Apple if you use that option.
• Vercel — hosts the website at coildex.app.
• Email delivery — if you email us, we receive that email through a standard email provider.

We do not share your data with advertisers, brands, data brokers, or any other third party. We do not sell your data.

Your rights and choices

• Access. You can see everything in your profile inside the app.
• Correction. Edit your hair profile, routines, reviews, and events at any time.
• Deletion. Delete individual items (routines, reviews, events) whenever you want. To delete your entire account and all associated data, use Profile → Delete account inside the app or email us at hi@hellogoodday.com. Account deletion is permanent.
• Export. To receive a copy of your data, email us at hi@hellogoodday.com and we’ll send you a machine-readable export.
• Notifications. You control reminders inside the app and at the OS level. Turning them off has no effect on your account or data.

If you’re in the EU, UK, or California, you have additional rights under GDPR / UK GDPR / CCPA — including the right to object to processing, restrict processing, and lodge a complaint with a supervisory authority. Email us to exercise any of these rights.

Data retention

We keep your account data for as long as you have an account. When you delete your account, we delete your profile, routines, reviews, events, and uploaded images within 30 days. We may retain anonymized, aggregate analytics that cannot be used to re-identify you, and a minimum amount of data required to comply with legal obligations (e.g., email logs to prove we honored a deletion request).

Security

Data in transit is encrypted with TLS. Data at rest is encrypted by our database provider. Access to production systems is limited and logged. No system is perfectly secure — if we become aware of a breach that affects you, we’ll notify you and the appropriate authorities as required by law.

Children

Coildex is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, email us and we will delete it.

International users

Coildex is operated in the United States. If you use Coildex from outside the US, you understand that your information will be transferred to and processed in the US, which may have different data protection rules than your country.

Changes to this policy

We may update this policy as Coildex evolves. When we do, we’ll change the “Last updated” date at the top, and for significant changes we’ll notify you in the app or by email before they take effect. Your continued use of Coildex after an update means you accept the revised policy.

Contact

Questions, requests, or privacy concerns? hi@hellogoodday.com — we read every message.