Legal
This policy explains how Shade Diary handles personal information for the public website, waitlist, checkout interest flow, future web purchase flow, and future iOS app.
Shade Diary is a pre-dye planning product. The public site currently collects waitlist and checkout-interest information. Production photo uploads, production app accounts, production subscription billing, analytics, and AI color reads are not active on this website yet.
When those features are enabled, this policy already describes the intended categories and processors. If the product starts collecting materially different data, we will update this policy before that launch.
The current web funnel does not ask for hair photos, face photos, chemical history, allergy history, or scalp-health information. A future app may let you choose hair photos, formulas, receipts, and dye-day notes. Shade Diary should be treated as a beauty planning aid, not medical, dermatology, allergy, or professional colorist advice.
| Category | Examples | Purpose | Currently active? |
|---|---|---|---|
| Identifiers and contact details | Email address, normalized email hash, consent status. | Waitlist, launch updates, purchase redemption, support, deletion requests. | Yes, through the waitlist forms. |
| Pre-dye intent | Shade goal, source, mode, optional note. | Prioritize Color Read demand, segment launch invites, improve product messaging. | Yes, if you submit a form. |
| Checkout interest | Selected annual or weekly plan, timestamp, referrer, user agent. | Measure purchase intent and route to checkout when purchase links are configured. | Yes, when you press a checkout-intent button. |
| Account and entitlement data | Login email, Supabase user ID, app user ID, RevenueCat customer ID, entitlement status. | Authenticate users, restore purchases, redeem web purchases in the app. | Planned for the consumer product. |
| Commercial information | Product selected, subscription status, renewal/cancellation status, processor receipt identifiers. | Provide paid access, manage subscriptions, prevent fraud, support refunds. | Planned when RevenueCat, Stripe, and Apple billing are live. |
| User content | Hair photos you choose, formula notes, Hair Passport answers, Color Receipts, Day 3 proof. | Generate and save Color Reads, receipts, reminders, and privacy-controlled share cards. | Planned for the app. Not collected by the current web funnel. |
| Device, log, and diagnostic data | IP-derived request data, user agent, referrer, timestamps, error logs, app diagnostics. | Operate the service, secure the site, debug issues, improve reliability. | Partly active through Cloudflare request handling. |
| Support communications | Emails, requests, issue descriptions, attachments you choose to send. | Answer questions, resolve access issues, process privacy requests. | Active if you contact us. |
Shade Diary uses service providers to run the product. They process data on our behalf or under their own customer terms, depending on the feature.
Payment card numbers are handled by payment processors, not stored directly in the Shade Diary Worker or public waitlist database.
The current public landing page does not run an analytics SDK, ad pixel, or behavioral advertising cookie. The private workspace and future consumer account flows may use necessary authentication cookies or tokens. Stripe, RevenueCat, Apple, Supabase, or other providers may set necessary cookies on their own domains as part of checkout, login, fraud prevention, or subscription management.
We keep waitlist and checkout-interest records until they are no longer useful for launch operations, until you ask us to delete them, or until a longer period is needed for security, compliance, dispute resolution, or accounting. Future purchase, refund, and tax records may be retained by payment processors according to their legal and operational requirements.
We use reasonable technical and organizational safeguards for a small launch-stage product, including limited public data collection, Cloudflare infrastructure, protected workspace routes, and payment processors for card handling. No internet service can guarantee perfect security.
Shade Diary is currently built for a United States launch. If you use the site or future app from another country, your information may be processed in the United States and other countries where our providers operate.
Shade Diary is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 submitted information, contact us and we will delete it. Users under the age of majority should use Shade Diary only with permission from a parent or guardian.
We may update this policy as Shade Diary moves from waitlist to checkout, iOS app, subscriptions, and account features. The effective date will be updated when the policy changes materially.