Privacy Policy — WhatHaircut

How WhatHaircut handles your selfie, face data, email address and usage data: what we collect, why, who processes it, and when it is deleted.

Last updated: 2026-10-27

1. Who we are

WhatHaircut ("WhatHaircut", "we", "us") at whathaircut.com is operated by INERTIA PRIME LLC, a Wyoming limited liability company, 30 N Gould St STE R, Sheridan, WY 82801, USA. INERTIA PRIME LLC is the controller of the personal data described in this policy.

2. Your selfie: the short version

  • Today, your photo is not uploaded. The AI selfie analysis is not open yet. If you choose a photo in the tool, it is displayed only inside your own browser and is never sent to our servers.
  • When the analysis opens, a selfie you upload will be used only to produce your haircut analysis and, if you ask for one, a try-on preview. It will not be sold, it will not be used to train AI models (ours or anyone else's), and it will not be used to identify you.
  • Automatic deletion. Uploaded selfies used for the free analysis are planned to be deleted automatically within 24 hours. If you buy a try-on preview, the source photo and the generated images are planned to be kept for up to 30 days so you can download them, then deleted automatically. You will be able to delete them sooner. We will confirm the final retention periods on this page before the feature opens.

3. Face data

The analysis looks at a photo of your face to estimate general features such as face shape (for example "oval" or "round"), whether the front hairline is receding, and how dense the hair looks. We keep only these text labels with your result. We do not create or store a faceprint or any other biometric identifier, and we do not use photos to recognize or identify people.

If you live in a place with specific laws about biometric or face data (for example Illinois, Texas, or Washington in the United States, or the European Union), you will be asked for consent before any upload, and you can withdraw it at any time by deleting your photo or contacting us.

4. Information we collect

  1. Email address — if you join the launch list or contact us. We use it only to send the launch announcement or to reply to you.
  2. Photos — only after the analysis opens and only when you upload one (see sections 2 and 3).
  3. Account details — if accounts are offered later: name, email, and sign-in identifiers from Google or email sign-in.
  4. Payment data — if paid previews are offered later, payments are handled by our payment processor (Stripe). We never see or store your full card number.
  5. Technical data — IP address, browser type, pages viewed, and timestamps, used for security, abuse prevention, and basic site statistics.
  6. Cookies and local storage — see our Cookie Policy.

5. Who processes your data

When the analysis and try-on features open, photos will be processed by AI providers acting on our instructions (for example an AI model gateway and an image-generation provider). They receive the photo only to return a result, under terms that do not allow them to use it for model training. Our site runs on Cloudflare (hosting, storage, and email forwarding). We will list the active AI providers on this page before the feature opens. We do not sell personal data.

6. Retention

  • Launch-list emails: until the launch email is sent and for up to 12 months after, or until you ask us to delete it.
  • Selfies and previews: see section 2.
  • Support emails: as long as needed to handle your request, then up to 24 months.
  • Server logs: short-term, for security.

7. Your rights

Depending on where you live (including under the GDPR and US state privacy laws such as the CCPA), you can ask to access, correct, delete, or export your personal data, and withdraw consent. Email support@whathaircut.com from the address you used with us. We may need to verify your identity, and we will reply within the time the law requires.

8. Children

WhatHaircut is not intended for children under 13 (or under 16 in the EU), and we do not knowingly collect their data. Please do not upload photos of children.

9. Security

We use HTTPS, private storage with access controls, and limited access by staff. No system is perfectly secure, but we work to protect your data.

10. Changes

We will update this page, including the "Last updated" date, before any change in how photos are handled takes effect.

11. Contact