your data belongs to you.

1. Who we are

Shea is operated by Partnox LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. You can reach us anytime at hello@partnox.com.

2. What we collect

• Account: your name and email address. Signing in with Apple or Google sends us a verified email from that provider.
• Your hair profile: your answers, like curl pattern, porosity and goals. You can edit them anytime in the app.
• Your hair content: wash days, styles, products and ratings, habits, length measurements, notes and the photos you add.
• The Circle: your Circle name, picture, posts and comments. Other members can see what you post.
• Purchases: your plan and purchase history, handled by Apple, Google or Stripe. We never see or store your card details.
• Device and usage: things like your device model, app version, IP address, approximate location, the features you use and crash reports. We never ask for your precise GPS location.

Shea does not collect advertising identifiers (no IDFA, no Google Advertising ID), and the app contains no advertising or attribution SDKs.

3. How we use it

• To run Shea and recommend products that fit your hair.
• To process purchases and refund requests.
• To keep Shea and the Circle safe.
• To understand which features are used and where people get stuck, and to fix bugs.
• To measure and improve our ads.
• To send you reminders and updates. You can turn reminders off anytime in the app.

4. Your photos

• Face blur on your device: faces are detected and blurred on your phone before a hair photo or Circle photo is uploaded, unless you choose to keep your face visible. When a photo is blurred, the unblurred version never leaves your phone.
• Private by default: your hair photos belong to you and are stored privately. Photos you post in the Circle can be seen by other members.
• Ingredient labels: to read a label, we send the label photo to a Google service that reads the text on it. Barcodes are read on your phone. Your hair profile and results stay in Shea.

5. Companies that help us run Shea

Advertising partners: we work with partners like Meta, TikTok and Pinterest to measure how our ads perform. We may share limited information with them, such as your IP address, device information, a scrambled (hashed) version of your email address, and actions like signing up or making a purchase. We never share your hair profile, photos, notes or Circle posts with them.

Refund requests: if you ask Apple or Google for a refund of an in-app purchase, we may share information with them about your purchase and how you have used Shea, such as how long you have had your account, how much you have used Premium since buying it, and your past purchases and refunds. This helps them decide on your request.

We may also share information when the law requires it, or to protect Shea and its members.

6. Our website and cookies

This policy also covers shea.one. Our website uses cookies and similar tools from partners like Google, Meta, TikTok, Pinterest and PostHog to understand visits and measure our ads. You can block or delete cookies with your browser's privacy controls or an ad blocker. Our website does not respond to Do Not Track signals.

7. Keeping and deleting your data

We keep your data while you have an account. You can delete your account anytime in the app (Profile, then Delete account) or by emailing us. When you delete your account, we delete your account data. Some information may be kept afterwards, for example in backups, in records we need for security, accounting or legal reasons, and information already shared with the partners above.

8. Your rights

• Access: see what data we hold about you. Email us and we will send you a copy.
• Correct: fix anything that is wrong. You can edit most of it directly in the app.
• Delete: delete your account in the app, or email us.
• Portability: ask for a machine-readable copy of your hair-care data.

California residents have the right to know what personal information we collect, to request its deletion or correction, and to opt out of any "sale" or "sharing" of personal information. EEA and UK residents can also restrict or object to the use of their data, and complain to their local data protection authority. To use any of these rights, email hello@partnox.com.

9. Children

You must be at least 13 years old to use Shea. If you are between 13 and 17, you should have a parent or guardian's permission. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has created an account, email hello@partnox.com and we will delete it.

10. Security

Your data is encrypted in transit and encrypted at rest in Supabase. Your private data is protected by row-level security, so only you can access it. No system is perfectly secure, but we follow industry-standard practices to protect your information.

11. International users

Our infrastructure is operated in the United States, so your data may be processed in the US and in other countries where our providers operate.

12. Changes to this policy

If we update this policy, we will change the date at the top of this page. Continued use of Shea after a change means you accept the updated policy. If you do not accept it, you can delete your account at any time.

13. Contact

Partnox LLC
30 N Gould St Ste N, Sheridan, WY 82801, USA
hello@partnox.com