Privacy Policy
Draft, last updated 21 September 2026. This policy will be reviewed before the app is published.
Every Hair Day is made by Pataroxa (contact: everyhairday@pataroxa.com). It is designed for children to use, and it is built so that as little as possible about a child ever leaves the phone.
What stays on the phone
Everything the app needs works without an account and is stored only on the device:
- the child's chosen name, hair description (length, texture, fringe), morning time and whether someone helps;
- the styles she liked, the week's plan, what was worn each day, grades and notes;
- photos of how a hairstyle went. Photos are stored in the app's private folder, are never uploaded, are excluded from Android backup, and are deleted if the app is uninstalled.
What is sent to a server, and only if an adult signs in
An adult may create an account to keep the data in sync between devices. Accounts are for adults only; the app never asks a child to sign in. Before any child profile is synced, the adult sees exactly what will be stored and gives explicit consent for that profile.
| About the adult | email address, sign-in identity, language |
|---|---|
| About each child profile, with the adult's consent | the chosen display name, hair description, liked styles, the week's plan, days worn with grades and notes |
| Never | photos, date of birth, contact details, location, device identifiers, advertising identifiers |
Synced data is stored with Supabase in the United States and protected so that each account can only read and write its own rows.
No tracking, no ads
The app contains no advertising, no analytics and no third-party tracking. Purchase links for hair accessories, when they exist, appear only in the adult's area behind a parental gate and never on a child's screen.
Deleting data
Removing a profile in the app deletes its data on the phone. Deleting the account deletes everything stored on the server. Uninstalling the app deletes everything on the phone, including photos.
Legal basis and your rights
Data about an adult account holder is processed on the basis of the account relationship. Data about a child profile is processed only with the specific, highlighted consent of the account holder, who is the child's parent or guardian, in line with Brazil's General Data Protection Law (LGPD, article 14). You may access, correct, export or delete the data at any time from the app or by writing to the address above.
Changes
If this policy changes, the new version is published here with a new date.