Privacy Policy — HairCare

This Privacy Policy explains how HairCare, an app built by Aporam, collects, uses, shares and protects your information. By using HairCare, you agree to the practices described here.

HairCare is operated by Aporam (company registration no. 46.232.750/0001-90; "we", "us", "our"). For any privacy matter, reach us at contact@aporam.com.

1.Information we collect

We collect only what we need to provide the app:

• Account information: your email and authentication credentials if you choose to create an account. HairCare can also be used without an account.
• Quiz answers: hair type, porosity, thickness, needs and goals that you provide.
• Photos: if you choose to track your progress, the photos you add (for example, "before and after" records).
• Your routine: the steps, schedules and check-ins you create in the app.
• Conversations with Tina: the messages you send to the assistant.
• Usage and device data: technical information needed for the app to work (for example, device model, OS version, technical identifiers and error logs).

HairCare does not ask for — and should not be used to enter — sensitive health data. Only share what you need to care for your hair.

2.How we use your information

• Personalize your routine and product recommendations based on your hair profile.
• Send the reminders and notifications you set up.
• Answer your questions through the Tina assistant.
• Keep the app working, secure and free from fraud and abuse.
• Improve the product — for example, understanding which features are used most.
• Comply with legal obligations.

3.Legal bases (LGPD)

We process your data based on: (i) performance of a contract and preliminary steps, to provide the app you requested; (ii) consent, for example to access your camera and photos or to send notifications; (iii) legitimate interest, for security and product improvement; and (iv) compliance with legal obligations. You can withdraw consent at any time.

4.Sharing and providers

We do not sell your data. We share information only with providers that help us operate the app:

• Supabase — database and authentication infrastructure; data is stored on servers located in Brazil.
• OpenAI — processes the messages you send to the Tina assistant in order to generate responses.
• Apple and Google — app distribution and platform notifications.

We may also share data when required by law or to protect rights, safety and integrity.

Recommendations may link to third-party stores (such as Amazon). When you tap an external link, that site's privacy policy applies — not ours.

5.International data transfers

Some providers (such as OpenAI) process data outside Brazil, including in the United States. When this happens, we adopt safeguards so the transfer complies with the LGPD.

6.Photos and camera

Today, the photos you add are stored locally on your own device and used only for you to track your progress. As the app evolves, they may become synced to our servers (Supabase, in Brazil). The app accesses your camera and gallery only with your permission, and you can delete your photos at any time.

7.Notifications

With your permission, we send reminders for your routine. You can turn notifications off whenever you want, in the app or your device settings.

8.Storage and security

Today, much of your data — such as your routine and your photos — stays on your own device. When data is stored or processed by our providers, we use reasonable technical and organizational measures to protect it, such as encryption in transit and access controls. No system is 100% secure, but we work continuously to reduce risks.

9.How long we keep data

We keep your data while your account is active or as needed for the purposes in this policy. When you delete your account, or upon request, we delete or anonymize your data, except where the law requires retention.

10.Your rights (LGPD)

At any time, you may:

• confirm that processing exists and access your data;
• correct incomplete, inaccurate or outdated data;
• request anonymization, blocking or deletion of data;
• request data portability;
• obtain information about who we share data with;
• withdraw consent.

To exercise your rights, reach us at contact@aporam.com.

11.Children and teenagers

HairCare is not intended for children under 13. If you are between 13 and 18, use the app with the supervision and consent of a guardian. If we learn that we collected data from a child without proper consent, we will delete it.

12.Changes to this policy

We may update this policy from time to time. We will notify you of material changes in the app or by other means. The "last updated" date at the top indicates the current version.

13.Contact us

Questions or requests about privacy? Write to contact@aporam.com.