1. Summary

2. Data we collect

CurlCast collects only what it needs to work. Specifically:

2.1 Location

When you tap Use my location, we request your device's approximate coordinates through the operating system. If you type a city name instead, we use that city. Your coordinates are sent to our weather provider (Open-Meteo) to retrieve local humidity, dew point, temperature, and precipitation. We do not store your precise coordinates on our servers.

2.2 Hair profile

Your curl pattern (1A–4C) and porosity (low, medium, high) are stored locally on your device so the app remembers them between sessions. This profile is not tied to an account and is not uploaded to our servers.

2.3 Subscription status

If you subscribe to CurlCast+, your purchase is processed entirely by Apple. We never see or store your payment card, billing address, or Apple Account credentials. We receive an anonymous identifier and your subscription status — active, expired, or in trial — so the app knows whether to unlock paid features. This is handled by RevenueCat, our subscription management provider.

2.4 Diagnostic data

The app records anonymous crash reports and basic performance metrics through the platform's built-in tools (Apple App Analytics). These reports are aggregated and do not identify individual users. You can disable diagnostic sharing in your device's system settings.

2.5 What we do not collect

• We do not collect photos, contacts, calendar, microphone, or camera data.
• We do not use advertising identifiers or run cross-site trackers.
• We do not build a marketing profile about you.

3. How we use your data

We use the limited data we collect to:

• Fetch the weather forecast for your location.
• Calculate a hair-specific hold score based on your curl pattern and porosity.
• Verify your CurlCast+ subscription status so paid features unlock correctly.
• Diagnose crashes and improve app reliability through anonymized diagnostic reports.
• Respond to your support requests.

We do not use your data for advertising, profiling, or resale.

4. Sharing with third parties

We share only what is necessary to run the service, and only with providers who are contractually bound to protect your data:

• Open-Meteo — receives your approximate coordinates or city name to return weather data. See Open-Meteo's terms.
• RevenueCat — processes an anonymous subscriber identifier and your subscription status so the app can verify entitlements. See RevenueCat's privacy policy.
• Apple — as the platform distributing the app and processing subscription payments, Apple collects standard analytics on downloads, crashes, and device information under its own privacy policy.

We do not sell or rent personal information to anyone. We do not share personal information with advertisers or data brokers.

5. How long we keep data

• Hair profile and city stored on your device — until you delete the app or clear it in settings.
• Subscription status — retained while your subscription is active and for up to 24 months after it ends, for billing and support records.
• Anonymized diagnostic data — retained for up to 12 months, then purged.
• Support conversations — kept for up to 24 months, then deleted.

6. Your rights and choices

You always have control over your data. You can:

• Access — request a copy of any personal information we hold about you.
• Correct — ask us to fix inaccurate information.
• Delete — deleting the app removes the hair profile stored on your device. Email us to delete any subscription or support records we hold.
• Withdraw consent — revoke location permission in your device settings at any time.
• Portability — request an export of your data in a structured, common format.
• Object or restrict — ask us to stop or limit certain processing.

Depending on where you live, you may have additional rights under laws such as the EU General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA). To exercise any right, email gillianelyse@gmail.com. We respond within 30 days.

Do Not Track and Global Privacy Control

CurlCast does not track you across other apps or websites, so there is nothing to opt out of. We honor Global Privacy Control (GPC) signals for any website surfaces where applicable.

7. Children

CurlCast is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Security

We use industry-standard measures — encryption in transit (HTTPS/TLS), encryption at rest for stored data, and access controls limited to necessary personnel — to protect your information. No system is perfectly secure, but we treat your data like we'd want ours treated.

9. Changes to this policy

If we make material changes, we'll update the “last updated” date at the top and, where required by law, notify you in the app or by email. Continued use of CurlCast after changes means you accept the revised policy.

10. Contact us

Questions, requests, or complaints about privacy? Email gillianelyse@gmail.com. We aim to reply within two business days.