Novaire Digital / Strand / Privacy

Privacy Policy

Strand · Last updated 13 October 2026

Strand ("the App", "we", "our") is a hair-tracking app developed by Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268), in Australia. This policy explains what the App keeps on your phone, what leaves it and when, and what you control.

1. The short version

  • Your photos and history live on your phone, in a private vault inside the App. There is no account.
  • They are kept out of iCloud and Google cloud backups.
  • Your photos leave your phone only if you turn on AI analysis and tap Analyse. Then the four photos from that check-in, and nothing else about you, go through our server to OpenAI in the United States to be scored. Our server does not keep them. OpenAI may keep them for up to 30 days to check for misuse, or longer only if the law requires it, and does not train its models on them.
  • Our server keeps anonymous daily counts (how many analyses, what they cost) against a one-way code made from a random install ID. It deletes them 90 days after your last analysis.
  • If you open Strand Pro, buy it or restore it, the App asks RevenueCat in the United States, which handles subscriptions for us, for the store's prices and your subscription status (section 4.3). If you never open Strand Pro, the App never contacts RevenueCat.
  • Apart from these and what you choose to share (section 4.4), the App sends nothing.
  • We do not sell your data, show ads or use third-party analytics.

2. Who we are and how to reach us

Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268), Australia. Email: support@novairedigital.com

3. What stays on your phone

  • Photos you take in the App (hairline, crown, temples, part line). Used for: Your photo timeline and comparisons. Kept in: The App's private storage. Not in your photo library unless you share a card or export.
  • Scores and analyses (Hair Score, zone estimates, short written observations). Used for: Your trend and history. Kept in: The App's database.
  • Your profile: the areas you said you are watching, and your confirmation that you are 18 or over. Used for: To weight the score towards the areas you care about. Never sent anywhere. We do not ask for your sex, age, family history or anything else we would not use. Kept in: The App's database.
  • Routine items, logs and reminder settings. Used for: Routine tracking and reminders. Kept in: The App's database and your phone's notification scheduler.
  • A local event log (for example "analysis completed"). Used for: Troubleshooting and improving the App. Kept in: The App's database, newest 5,000 events only. Never sent to us.

Backups. The App excludes its photo vault and database from iCloud and computer backups on iPhone, and from Google cloud backup on Android. On Android 12 and later, when you move to a new phone with a cable or Wi-Fi transfer, Android may copy the App's data directly to the new phone; nothing goes to the cloud. To keep your history when changing phones in any other way, use Export everything (section 7) first.

4. What leaves your phone, and when

4.1 AI analysis (only if you turn it on)

AI analysis is off until you choose to turn it on, during set-up or in Settings, and it only runs when you tap Analyse on a check-in. Each time, the App sends the four photos from that check-in, resized and with their metadata (such as camera details) removed. It sends nothing else about you: not your profile, and not your earlier scores (each check-in is scored on its own).

They travel over an encrypted connection to our server (a Cloudflare Worker operated by Novaire Digital), which sends them to OpenAI, L.L.C. in the United States to produce zone estimates and short written observations, then returns the result to your phone.

  • Our server handles the photos in memory only for the time it takes to get the result. It does not store photos, your profile or your results, and does not write them to logs.
  • OpenAI does not use data sent through its API to train its models. By default it keeps API inputs and outputs in abuse monitoring logs for up to 30 days, then deletes them, unless it must keep them longer by law. We ask OpenAI not to store the request for any other purpose.
  • The AI service returns zone estimates and short codes for what it can see (for example, scalp showing at the crown). Every sentence you read is written by us, not generated, so the result never names a condition, a treatment or a medicine.

You can turn AI analysis off at any time in You, Privacy and data. Photos then never leave your phone.

4.2 Anonymous usage counts on our server

To keep the service fair and its costs under control, our server records, for each install of the App:

  • a one-way code (a SHA-256 hash) made from a random install ID that the App creates on your phone. The install ID is not linked to your name, email, phone number or advertising ID, and the code cannot be turned back into it;
  • per day: how many analyses were requested, how many succeeded or failed, how many processing units (tokens) they used and what they cost us;
  • the dates of the install's first and latest successful analysis.

We delete these rows automatically 90 days after the last analysis from that install; rows for requests that never succeeded and cost us nothing go after two days. Because they are anonymous, we cannot find or delete a particular person's rows earlier.

To stop floods of requests, our server also counts the requests that come from each internet (IP) address over one minute. Cloudflare keeps that count in memory only, against a one-way code made from the address; we never store the address.

The install ID itself, and the number of AI analyses used this month, stay in your phone's secure storage (the iOS Keychain or Android Keystore), including after Delete everything, so that daily and monthly limits cannot be reset by deleting the App's data. They hold nothing about you. An export also carries this month's count, so restoring it does not reset the limit.

4.3 Subscriptions

Strand Pro is bought through the App Store or Google Play. Apple or Google takes the payment; we never see your card details. We use RevenueCat, Inc. (United States) to show the store's prices and to check whether your subscription is active.

The App contacts RevenueCat only when you open Strand Pro, buy it or restore it and, while you are a subscriber (or for a week after a purchase the store has not confirmed yet), when you open the App, so that a cancelled or refunded subscription ends on time. If you never open Strand Pro, the App never contacts RevenueCat. Each request carries an anonymous ID that RevenueCat's software creates on your phone, your device model, operating system and app version, your language settings and your store country. On iPhone it also carries Apple's identifier for vendor, a code that is the same for every Novaire Digital app on that phone. RevenueCat also receives your purchase receipts from Apple or Google.

RevenueCat keeps the anonymous ID with your purchases, when you first and last used the App and a country worked out from your internet address (RevenueCat says it does not keep the address itself). We use this only to manage your subscription and to see sales figures that name nobody. RevenueCat never receives your photos, scores, routine or anything you type. Delete everything does not reach RevenueCat: to have its record deleted, email us and we will find and delete it with you.

4.4 Things you choose to share

  • Share cards. Photos are off by default. A card leaves the App only through the share sheet, to wherever you send it.
  • Exports. An export leaves the App only through the share sheet, to wherever you save it.
  • Emails to support. If you email us, we receive your email address and what you write. We use it only to reply, and delete the conversation when it is resolved, or within 12 months.

5. What we do not collect

No account, name, email address (unless you email us), phone number, location, contacts or advertising identifier. No third-party analytics, advertising or crash-reporting tools. No tracking across other apps or websites.

6. How the score is made (automated processing)

Your Hair Score is produced automatically: the AI model estimates density and scalp coverage for each zone, and the App combines them with a fixed formula on your phone. It is an estimate for tracking your own hair over time. It is not a diagnosis, nobody else sees it, and it is not used to make any decision about you, such as eligibility for anything. You can use the App without it by leaving AI analysis off. You, How the score works explains the method in plain English.

7. Your choices and rights

  • Turn AI analysis on or off: You, Privacy and data.
  • Export everything: You, Privacy and data. A single file with your photos and your history, saved wherever you choose.
  • Delete everything: You, Privacy and data. Erases every photo, score, routine and setting from your phone (keeping only the install ID and this month's count of AI analyses, section 4.2) and cancels reminders. Our server holds none of these; its anonymous counts expire as described in 4.2.
  • Access and correction: Your information is on your phone, where you can see, change, export or delete it. We hold no copy. If you have a question or a complaint about how we handle personal information, email support@novairedigital.com. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

8. Information sent overseas

When you use AI analysis, the photos described in 4.1 are sent to OpenAI in the United States. Our server runs on Cloudflare's network, which may handle a request in a data centre near you. If you open Strand Pro, the details in section 4.3 go to RevenueCat in the United States. By turning on AI analysis you consent to your photos being sent to OpenAI in the United States. OpenAI is not bound by the Australian Privacy Principles; if it mishandled your information, you might not be able to seek redress under Australian privacy law.

9. Health information

Photos of your scalp, your scores and your routine can reveal information about your health, which Australian law treats as sensitive. That is why the App keeps them on your phone, asks before sending anything for analysis, and keeps them out of cloud backups.

Strand provides general information and tracking only. It does not diagnose, treat or prevent any condition, and it does not recommend treatments. Talk to a doctor before starting, stopping or changing any treatment.

10. Security

Your information is protected by your phone's own security (passcode, biometrics and encryption) and by staying on the phone. Everything the App sends travels over encrypted connections (TLS). The key that unlocks the AI service lives only on our server, never in the App. No system is perfectly secure, so keep your phone's own protections switched on.

11. Children

Strand is for adults aged 18 and over. We do not knowingly collect information from anyone under 18.

12. Changes to this policy

If we change this policy, we will update the date above, and tell you in the App before a material change affects your information.

13. Contact

Benjamin Jacquet, trading as Novaire Digital (ABN 24 349 309 268) support@novairedigital.com