GroPrivacy Policy
The short version
- Your data stays on your iPhone. Gro has no accounts and no servers of its own. Your answers, your routine, your streaks, and your progress photos are stored locally on your device.
- One thing leaves your phone: when you run a head scan, those scan photos and a summary of your intake answers are sent to our AI provider to produce the estimate, then discarded.
- We don't sell your data. Not to anyone, for any price. There are no ads, no trackers, and no third-party analytics in the app.
- Deleting the app deletes your data. Because it lives on your device, removing Gro removes it.
This policy explains what the Gro mobile application ("Gro", the "App") does with your information. Gro is operated by Gro Hair App ("we", "us", "our"). If anything here is unclear, email us at admin@grohair.app.
1. Information in the App
Information you give us
During onboarding, Gro asks you a series of questions so it can build your plan. Depending on which you answer, this can include:
- Your age and gender
- Family history of hair loss
- When you first noticed thinning, and where on your scalp
- Your typical stress level
- Treatments you're currently using
- Scalp conditions you experience
- What you want out of the app — prevention, regrowth, or both
- How you heard about Gro
As you use the App, it also stores which routine items you've completed and when, your streak and adherence history, and any notes you attach to a progress photo.
Photos
Gro works with two kinds of images, both of which you choose to capture or select:
- Head scan photos — taken from several angles during onboarding, used to estimate your Norwood stage.
- Progress photos — added over time so you can compare your hair month to month.
Information collected automatically
The current version of Gro contains no analytics SDK, no advertising SDK, no crash-reporting SDK, and no third-party trackers. It does not collect your device identifiers, your location, your contacts, or your browsing activity.
Apple separately provides us with aggregate, anonymous App Store statistics — things like total downloads and crash counts — which we cannot connect to you as an individual. That is governed by Apple's privacy policy, not this one.
2. Where your information is stored
Everything described above is stored locally on your device, in the App's private storage. Gro has no user accounts, no login, and no database of its own. We cannot see your answers, your routine, your streaks, or your photos, because they never reach us.
If you have iCloud Backup enabled on your iPhone, your device backup may include Gro's local data. That backup is controlled by Apple under your iCloud settings and your agreement with Apple.
3. The head scan — the one time data leaves your device
This is the only part of Gro that transmits your information anywhere. Please read it carefully before you run a scan.
When you run a head scan, the App sends the following to Anthropic, PBC, the provider of the Claude AI model that performs the analysis:
- The head scan photographs you captured for that scan
- A plain-text recap of the intake answers you provided, so the estimate accounts for your situation
Anthropic processes that request, returns an estimated Norwood stage and related notes, and the App stores the result on your device. We do not keep a copy of the photos or the recap on any server we control, because we do not operate one.
Anthropic's handling of data submitted through its API is governed by its own terms and privacy policy. As of this policy's effective date, Anthropic states that it does not use data submitted through its commercial API to train its models by default. You can read their current terms at anthropic.com/legal/privacy.
If you would rather not send photographs to a third party, don't run a head scan. The rest of the App — your routine, your check-offs, your streaks, and your progress photos — works without it and involves no transmission of any kind.
4. Why we handle this information
| What | Why |
|---|---|
| Intake answers | To generate a routine matched to your stage, history, and goals |
| Head scan photos | To estimate your Norwood stage and set your starting baseline |
| Routine completions | To calculate your streak, weekly adherence, and projected milestones |
| Progress photos | To let you compare your hair over time, side by side |
For users in the EEA or UK, our legal basis is your consent (which you give by choosing to answer a question, run a scan, or add a photo) and performance of our agreement with you under the Terms of Service. You can withdraw consent at any time by deleting the relevant data or the App.
5. Health-related information
Some of what you enter — scalp conditions, treatments you're taking, your pattern of hair loss — may qualify as health-related or sensitive personal information in your jurisdiction. We treat it accordingly: it stays on your device, it is never sold, it is never used for advertising, and it is never shared with insurers, employers, data brokers, or marketers. The only outbound transmission of any of it is the head scan described in Section 3.
6. What we never do
- We do not sell your personal information, and we have not sold or shared it in the preceding twelve months.
- We do not use your information for targeted or cross-context behavioral advertising.
- We do not share your information with data brokers, insurers, or employers.
- We do not use your photographs to train any AI model of our own.
7. Device permissions
Gro asks for two permissions, both optional, both revocable at any time in iOS Settings → Privacy & Security:
- Camera — to capture head scan and progress photos.
- Photo Library — to let you choose an existing photo instead, and to save photos you capture.
Declining either won't lock you out of the App. You'll simply skip the features that need them.
8. Keeping and deleting your information
Your data stays on your device until you remove it. You are in full control:
- Delete individual items — remove a progress photo or reset your plan from within the App.
- Delete everything — uninstalling Gro removes the App's local data from your iPhone.
- Check your backups — if iCloud Backup was on, a copy may persist in your Apple backup until that backup is replaced or deleted in your iCloud settings.
Because we hold no copy of your information, there is nothing on our side for us to delete on your behalf.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal information, and to be free from discrimination for exercising those rights.
In Gro's case, you exercise nearly all of these directly. The information is on your device, visible to you in the App, and deletable by you at any time — no request to us required, and no waiting on us to act.
If you believe we hold information about you and want to make a formal request, or if you have a complaint, email admin@grohair.app. We'll respond within the period your law requires — generally 30 days for GDPR and 45 days for the CCPA. EEA and UK residents also have the right to lodge a complaint with their local data protection authority.
10. Children
Gro is intended for adults and is not directed to children. We do not knowingly collect personal information from anyone under 13, and the App is not appropriate for anyone under 18 given the subject matter. If you believe a child has provided information through the App, contact us and we'll help you remove it.
11. Security
Data on your device is protected by iOS's built-in app sandboxing and by your device passcode, Face ID, or Touch ID — so the strongest security step you can take is keeping a passcode on your phone. The head scan request in Section 3 is sent over an encrypted HTTPS connection.
No method of storage or transmission is perfectly secure, and we can't guarantee absolute security. What we can tell you is that the surface area is small by design: there is no account to breach and no central database of user data to steal.
12. International users
Gro is operated from the United States. If you run a head scan from outside the U.S., that request is processed on servers in the United States, which may have different data protection laws than your country. By running a scan you consent to that transfer.
13. Changes to this policy
If we change this policy, we'll update the date at the top. For material changes — particularly any that expand what we collect or who we share it with — we'll give you notice in the App before the change takes effect. Continuing to use Gro after that means you accept the updated policy.
Features not currently in the App. Gro does not presently offer user accounts, cloud sync, subscriptions, or analytics. If we add any of them, we will update this policy and notify you in the App before the feature turns on. We will not retroactively apply new collection to information gathered under this version of the policy.
14. Contact
Questions about this policy, or about your information:
Gro Hair App
Email: admin@grohair.app
Mailing address: [ADD YOUR BUSINESS MAILING ADDRESS]