Privacy policy
This page explains what Hairnotes keeps about you and your clients, why, where it's stored, and what you can ask of us. The short version: we keep what the app needs to work, we never sell it, and you can ask for a copy or delete it at any time.
Who is responsible
Hairnotes is operated by a sole proprietor in Quebec, Canada. The person in charge of the protection of personal information is the owner of Hairnotes. You can reach them at info@myhairnotes.com.
What we keep
- Your account: your name and email address, and your password stored as a one-way hash (never the password itself). If you sign in with Google, we receive your name and email from Google.
- What you write down: your clients and their details (name, phone, email, birthday, preferences, hair type, photos), and your notes (what you did, formulas, prices, dates).
- Billing, if you subscribe to Pro: your billing country and your subscription and payment history. Stripe handles your card; we only receive the card type, its last four digits and its expiry date.
- How the app is used: the type of device, system and browser you sign in from, and a log of actions in your account (for example "added a note"). This helps us fix problems, answer support questions and decide what to improve.
- The newsletter: your email address, if you sign up. You can unsubscribe at any time.
- Homepage visits: to greet visitors with a line about their country, your IP address is sent to ipinfo.io and the result is kept for a day. Our server logs also record IP addresses for security, such as blocking automated sign-ups.
Your clients' information
You decide what you note about your clients. We keep it on your behalf, only to show it to you, and we never contact your clients or use their information for anything else. As with a paper card file, you're responsible for having your clients' permission to keep their details and photos.
What we don't do
- We don't sell or rent personal information.
- We don't use it for advertising, and we don't use advertising or tracking cookies.
- Only the owner of Hairnotes can access the data, and only to run the service, fix problems or answer you.
Where it's stored and who helps us
Your information is stored outside Quebec and Canada, in the United States. These providers handle it for us, only to provide their part of the service:
- Hetzner: the server that runs the app and its database (Ashburn, Virginia, USA).
- Cloudflare R2: photos and database backups.
- Stripe: payments, if you subscribe to Pro.
- Resend: sending emails such as password resets and receipts.
- Google: sign-in, if you choose "Sign in with Google".
- ipinfo.io: the country of homepage visitors, from their IP address.
Cookies
We only use the cookies the app needs to keep you signed in and to protect forms against forgery. No analytics or advertising cookies.
How long we keep it
- As long as your account exists.
- When you delete your account from your profile, your account, clients, notes and photos are deleted right away, and they're gone from our backups within a few days.
- Stripe keeps payment records for as long as the law requires.
Your rights
You can ask us at any time to:
- see the personal information we have about you, and get a copy of it;
- correct anything that's wrong;
- delete it, or withdraw your consent to a use of it.
Email info@myhairnotes.com and we'll answer within 30 days. If you're not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.
Security
Everything travels over HTTPS, passwords are hashed, and access to the servers is limited to the owner. If a security incident ever puts your information at risk of serious harm, we'll tell you and the Commission d'accès à l'information as the law requires.
Changes
If we change this policy in a way that matters, we'll email you before the change applies. The date at the top always shows the latest version.