Effective Date: 1/23/2025 Welcome to WigFit, developed by Hairline Illusions ("we," "our," "us"). Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. By using WigFit, you agree to the collection and use of information in accordance with this policy. Quick Summary - We collect personal and measurement data to provide wig fitting services - Your data is securely encrypted and stored in the US, EU, and Singapore - You can access, modify, or delete your data at any time - We never sell your personal information - Contact us: info@hairlineillusions.com or (866)777-7567 Frequently Asked Questions Q: How is my data protected? A: We use advanced security technology (including military-grade encryption) to protect your information. Q: How long do you keep my photos? A: Photos are deleted immediately after processing your measurements. Q: Can I opt-out of data collection? A: Yes, through your app settings or by contacting us. Q: What happens if there's a data breach? A: We'll notify you via email and app notification within 72 hours. 1. Developer Information - Developer: Fenil Dobariya - Company: Hairline Illusions - Email: fenild@hairlineillusions.com - Website: https://www.hairlineillusions.com/ 2. Information We Collect When you use WigFit, we may collect the following types of information: Personal Information - Name (First and last name) - Email address - Phone number - Gender - Age - Contact details (if provided by you) - Hair-related information Biometric Data - Head measurements - Photos used for measurement purposes - 3D scan data - Facial recognition points for wig fitting Device Information - IP address - Device type - Operating system - Device permissions status 3. How We Use Your Information We restrict the processing and use of personal information to the minimum necessary to provide a seamless experience. This includes: - Provide accurate wig size recommendations - Improve our app functionality and user experience - Send important notifications and updates - Respond to inquiries and provide customer support - Comply with legal obligations and enforce our terms of service 4. Data Storage and Security Storage Duration - Personal information: Retained for the duration of account activity plus 30 days after account deletion - Biometric data: Stored for 24 hours after processing for measurement extraction - Photos: Deleted immediately after measurement processing - Account deletion: All associated data permanently deleted within 30 days Security Measures - End-to-end encryption for all biometric data - Military-grade encryption (AES-256) to protect your stored measurements - Extra security verification when accessing data - Regular security audits and penetration testing Cloud Services - AWS Services Used: - AWS S3 for secure file storage - AWS Lambda for measurement processing - AWS CloudFront for content delivery - Firebase Services: - Authentication - Real-time Database - Cloud Storage 5. International Data Transfer We may transfer your data to servers located outside your country of residence. We ensure appropriate safeguards through: - Standard contractual clauses - Data processing agreements - Privacy Shield certification where applicable - Local data protection law compliance 6. Data Breach Response In the event of a data breach, we will: - Notify affected users within 72 hours of discovery - Provide details of compromised data - Share steps taken to secure information - Offer guidance on protecting your privacy 7. Device Permissions The app requires the following permissions: - Camera: For head measurements and photo capture - Storage: To save measurement data locally - Internet: For cloud processing and updates - Location (optional): For size recommendation optimization You can modify these permissions through your device settings at any time. 8. Consent Management You can manage your privacy preferences by: - Accessing privacy settings in the app - Contacting us to modify consent - Requesting data deletion - Opting out of non-essential data collection 9. Children's Privacy WigFit is not intended for children under 13. We do not knowingly collect personal data from children in compliance with COPPA. If you believe we have collected information from a child, please contact us to remove it. 10. Changes to This Privacy Policy We may update our Privacy Policy from time to time. Changes will be communicated via: - Email notification - In-app alerts - Website updates 11. Contact Us For privacy concerns or requests: - Email: info@hairlineillusions.com - Website: https://www.hairlineillusions.com - Phone: (866)777-7567 By using WigFit, you acknowledge that you have read and understood this Privacy Policy. 12. Legal Basis and Regulatory Compliance Legal Basis for Data Processing We process your data based on: - Explicit consent for biometric data collection - Contractual necessity for service delivery - Legitimate business interests for app improvement - Legal obligations for regulatory compliance GDPR Compliance (EU Users) EU residents have rights under GDPR including: - Right to access personal data - Right to rectification - Right to erasure ("right to be forgotten") - Right to restrict processing - Right to data portability - Right to object to processing State Privacy Law Compliance California (CCPA) California residents have rights including: - Right to know what personal information is collected - Right to delete personal information - Right to opt-out of personal information sales - Right to non-discrimination for exercising rights Virginia (VCDPA) Virginia residents have rights including: - Right to access personal data - Right to correct inaccuracies - Right to delete personal data - Right to opt-out of targeted advertising Colorado (CPA) Colorado residents have rights including: - Right to opt-out of profiling - Right to access, correct, or delete personal data - Right to data portability - Right to appeal privacy decisions Connecticut (CTDPA) Connecticut residents have rights including: - Right to access personal data - Right to correct inaccuracies - Right to delete personal data - Right to opt-out of automated processing Utah (UCPA) Utah residents have rights including: - Right to access and delete personal data - Right to opt-out of targeted advertising - Right to data portability - Simplified consumer rights process Texas (TDPSA) Texas residents have rights including: - Right to access personal data - Right to correct or delete personal data - Right to data portability - Right to opt-out of data processing Data Retention for Inactive Accounts - Accounts inactive for 12 months: Notification sent - Accounts inactive for 18 months: Data archived - Accounts inactive for 24 months: Data deleted Extended Consent Management Users can modify consent preferences through: - App privacy settings dashboard - Email request to info@hairlineillusions.com - Written request to our physical address - Customer service: (866)777-7567 International Data Transfers - Primary data storage: United States - Secondary processing: EU (Ireland) - Backup storage: Singapore - All transfers comply with EU standard contractual clauses Accessibility - Screen reader compatible - High contrast mode available - Alternative text for images - Keyboard navigation support - Contact us for additional accessibility needs App Analytics and Tracking We use basic tracking tools to improve our app: - Performance monitoring through Firebase - System health checks through AWS - Anonymous usage data collection To opt-out of tracking: 1. Open app settings 2. Select "Privacy & Data" 3. Toggle off "Analytics Collection" Data Anonymization - Measurement data anonymized after 30 days - Aggregate data used for research - No personally identifiable information in research - Option to opt-out of anonymized data usage Third-Party Services - External payment processors - Cloud storage providers - Analytics services - We are not responsible for third-party privacy practices