Privacy
Last updated 14 August 2026
The short version: if you give us your email address, we store it to send you the one message you asked for. We run privacy-conscious analytics (one cookie, EU-hosted), no advertising, and sell or share nothing. And the photos you take in the SaveMyHair app never leave your phone: there is no server for them to be sent to. This page spells that out.
Who we are
SaveMyHairline is an independent directory of hair transplant doctors, and the publisher of the SaveMyHair iPhone app. For anything related to your data, contact [email protected].
The website: what we store, and why
- Your email address, if you submit it through a notify-me form: we store the address, which page you signed up on, and when. The only purpose is to send you a single email when the thing you signed up for is ready. No newsletter, no marketing, and the address is never shared. Legal basis: your consent, which you can withdraw at any time by asking us to delete the address.
- Ordinary traffic data: like every website, our servers and our network provider (Cloudflare) briefly process technical data such as your IP address to deliver pages and block abuse. We do not use it to identify or profile you.
- Usage analytics: we use PostHog, hosted in the EU, to understand which pages are used and how the site performs. It sets a cookie to recognise returning visitors. We use this only to improve the site; there is no advertising, no cross-site tracking, and the data is never sold or shared.
The SaveMyHair app
The app has no accounts and no server of its own. Your photos and the records you build up are written to your own device and stay there. Usage analytics do leave the device, and two of the onboarding answers travel with them. This section says exactly which.
- Your photos: the hairline photos you take are saved inside the app's private storage on your phone. We never receive them, they are not backed up to us, and nobody at SaveMyHairline can see them. They are not in your camera roll either, unless you switch that on in the app's settings, in which case they go to your own photo library, still on your device.
- Face detection during scans: while you line up a scan, the app uses Apple's Vision framework, running entirely on your phone, to find your face in the camera frame and read the angle of your head (how far it is turned, tilted and rolled). That is what positions the on-screen guide and fires the shutter at the right moment. It detects where a face is, not whose it is: the app performs no face recognition, creates no faceprint, and measures no facial features. With each photo the app stores the head angles it was taken at, where the face sat in the frame, and how the phone was held, so a later scan can be lined up against an earlier one. Those numbers are stored on your phone alongside the photo, are deleted with it, and are never sent to us, to our analytics, or to anyone else. No face data of any kind leaves your device.
- What stays on your device: your scans, the treatments you track and the schedule you set for them, and most of your onboarding answers: the stage closest to your hairline, when you first noticed, whether hair loss runs in your family, what you already take, and your exact age. Those are stored on your phone only. We hold no copy, and none of them are sent to our analytics.
- The two answers that do leave: your goals (which of tracking your hairline, preventing loss and regrowing hair you picked) and your age band (under 25, 25 to 34, 35 to 44, 45 to 54, or 55 and over, never the exact age) are sent to our analytics as one event when you finish onboarding, and are attached to the usage events below so we can tell which kind of person a number describes. Nothing else you answer is sent: not the stage, not the family history, not the treatments.
- Usage analytics: as on the website, the app sends usage events to PostHog in
the EU. The complete list is:
- the app being installed, updated, opened, and moved to and from the background;
- onboarding: that it started, which screen you are on, that a question was answered, skipped or stepped back from, and that the flow finished. Which screen, never the answer, apart from the two above, which are sent as one event at the end;
- your answer to the notification permission prompt, granted or not;
- a scan being saved, with the number of photos in it, and a scan being deleted;
- a treatment being ended, without its name;
- "Delete all my data" being used;
- crashes and unhandled errors, including the technical report of what failed and where.
- Camera and photo permissions: the camera is used only while a scan is in progress. Permission to add to your photo library is requested only if you turn on saving a copy there.
Deleting it: "Delete all my data" in the app's settings removes every photo, scan, treatment and onboarding answer from your phone immediately, and resets the analytics identifier, so nothing recorded afterwards is tied to anything recorded before. Deleting the app removes the same things. Neither one needs to involve us, and neither can be undone. The one thing a wipe does not reach is the usage events already sent: those sit with PostHog, and we will delete them on request.
Cookies
The only cookie we set is the PostHog analytics cookie described above. There are no advertising cookies. Our network provider may additionally set strictly necessary security cookies to protect the site from abuse.
Where your data lives, and for how long
Email addresses are stored on our own server in the EU (Finland). We keep an address until the notification it was left for has been sent, or until you ask us to delete it, whichever comes first. Analytics for both the site and the app are held by PostHog in the EU.
Your photos, scans, treatments and answers live on your device for as long as you keep them there. We hold no copy of any of that, so there is nothing for us to delete and nothing for us to lose. The app's usage events are the exception, and they sit with PostHog in the EU like the website's.
Your rights
You can ask what we hold about you, have it corrected, or have it deleted: email [email protected] and we will act on it promptly. If you are in the EU and believe we are mishandling your data, you can complain to your national data protection authority.
Changes
If we start collecting anything new, this page changes first and the date above moves.