Last Updated: 2026 | GDPR & KVKK Compliant
HairCraft Health Technologies Inc. ("HairCraft") acts as the data controller.
Address: Maslak Mah. Buyukdere Cad. No:120 Sariyer / Istanbul, Turkey
Contact & DPO: privacy@haircraft.app | support@haircraft.app
• Identity & Contact: Full name, email address, international phone number, age, gender, country, and city.
• Special Category Health & Scalp Imagery: User-submitted 5-angle scalp photos, Norwood scale hair loss stage, density scores, and family history genetic risk questionnaires.
• Voice Data: Audio inputs and transcriptions when utilizing the AI voice assistant.
• Commercial & Transactional: In-App Purchase verification tokens (Apple/Google), clinic consultation inquiries, and chat interactions.
• Technical & Telemetry: IP address, device specs, Expo push notification tokens, and immutable server access logs.
Processing is grounded on Contractual Performance (GDPR Art. 6(1)(b)), Explicit Consent for sensitive biometric/health data (GDPR Art. 9(2)(a)), and Legal Compliance (Art. 6(1)(c)). Photos processed for simulation are securely transferred with user consent to specialized inference servers (Replicate Inc., USA) and encrypted cloud storage (Cloudflare R2 / AWS S3) with Standard Contractual Clauses (SCCs).
You maintain the right to access, rectify, port, or request permanent erasure of your personal data at any time via Profile Settings or by emailing privacy@haircraft.app.