Summary
This page is the long-form version of Barette's Google Play Data safety declaration, and of the App Privacy details (Apple's "nutrition label") App Store Connect will show for the iOS app. Both consoles ask for the same underlying answers in their own shape; this is where they are written down once, so the three cannot quietly drift apart.
- Data is encrypted in transit. Everything between the app and our API goes over HTTPS/TLS.
- You can request deletion. From inside the app, or from our deletion page without installing it.
- No data is sold. Not to advertisers, not to data brokers, not to anyone.
- No advertising or analytics SDKs. The app ships without them.
- Committed to the Play Families policy where it applies — though Barette is rated for adults, not for children.
Data the app collects
| Play category | Data types | Purpose | Required or optional |
|---|---|---|---|
| Personal info | Name, email address, phone number, profile photo | Account creation and sign-in, order and booking contact details, and the public profile other people see on Reels. | Required to hold an account. |
| Photos and videos | Hair and scalp images, Reels videos and their audio | Producing an analysis result, keeping your scan history, and publishing the Reels you choose to post. | Optional — the app works without scanning or posting. |
| Location | Approximate or precise device location | The Near You feed, finding specialists and on-site stores close to you, and delivery estimates. | Optional — deny the permission and those views fall back to a manual search. |
| Purchases | Orders, order status, delivery address, wishlist and cart | Fulfilling marketplace orders and showing you your history. | Only collected if you buy something. |
| App activity | Views, likes, comments, follows, bookings and notifications | Ranking the For You and Near You feeds, keeping both sides of a booking in sync, and sending in-app notifications. | Generated as you use the app. |
| Device and diagnostics | App version, device model, OS version, crash and error logs | Diagnosing crashes and keeping the API compatible with the versions people are running. | Collected automatically when something fails. |
| Barette device | Pairing state, battery level, firmware version, captured images | Pairing the capture board with your account and moving the images it takes into your scan history. | Only if you own and pair a device. |
All of it is collected in Play's sense — it leaves the device and reaches our servers — because the app is an account-based service whose history follows you between devices.
Data sharing
| Data | Shared with whom, and when |
|---|---|
| Personal info | Shared with a partner store or specialist only when you place an order or book with them. |
| Photos and videos | Scan images are never published. Reels are public to other users once you post them. |
| Location | Not shared. Coarse location is indexed as an H3 cell, not stored as a trail of coordinates. |
| Purchases | Shared with the store fulfilling the order. |
| App activity | Not shared outside Barette. |
| Device and diagnostics | Not shared outside Barette. |
| Barette device | Not shared. |
Service providers who process data on our instructions — hosting, email, maps — are listed in the privacy policy. Under Play's definitions, handing data to a processor acting on our behalf is not "sharing", but we list them anyway.
Data we do not collect
- Payment card numbers or bank details — marketplace orders are settled cash on delivery or arranged directly with the store.
- Contacts, calendar, SMS or call logs.
- Audio recordings taken outside a Reel you record yourself.
- Advertising identifiers — the app carries no advertising SDK.
- Third-party analytics or tracking SDKs of any kind.
- Health records, or any data used to infer a medical condition. A hair analysis is cosmetic guidance, not a diagnosis.
Permissions the app requests
| Permission | Android identifier | iOS identifier | Why it is requested | What happens if you say no |
|---|---|---|---|---|
| Camera | android.permission.CAMERA |
NSCameraUsageDescription |
Capturing a hair or scalp photo and recording a Reel. | Asked for the first time you scan or record; deny it and you can still pick an existing photo from your gallery. |
| Photos and media | READ_MEDIA_IMAGES / READ_MEDIA_VIDEO |
NSPhotoLibraryUsageDescription |
Choosing an existing photo to analyse, or a video and audio track for a Reel. | Asked at the moment you pick a file. Barette reads only the file you select. |
| Location | ACCESS_COARSE_LOCATION / ACCESS_FINE_LOCATION |
NSLocationWhenInUseUsageDescription |
The Near You feed, nearby specialists and on-site stores, and delivery estimates. | Optional, foreground only. Barette never asks for background location and does not track you between sessions. |
| Notifications | POST_NOTIFICATIONS |
Requested at runtime via UNUserNotificationCenter — no Info.plist key required. |
Booking confirmations, order status and replies to your Reels. | Optional, and switchable per category in the app settings. |
| Network and Wi-Fi state | INTERNET / ACCESS_NETWORK_STATE |
NSLocalNetworkUsageDescription (device pairing only — plain internet access needs no iOS permission) |
Talking to the Barette API and pairing with the capture device over your local network. | Required for the app to function at all. |
Barette requests no restricted permissions beyond these: no background
location, no SMS or call log access, no accessibility APIs, no
QUERY_ALL_PACKAGES, and no all-files access on Android; no
Bluetooth, contacts, calendar, motion or health access on iOS.
Apple Privacy Nutrition Label
App Store Connect's App Privacy questionnaire sorts the same facts above into three buckets instead of Play's single table: whether data is used to track you across other companies' apps and websites, linked to your identity, or collected without being linked to you.
| Bucket | Data types | Notes |
|---|---|---|
| Used to track you | — | None. Barette carries no advertising or analytics SDK, so nothing is linked to a third party's data for tracking and the App Tracking Transparency prompt never appears. |
| Linked to your identity | Contact info, photos and videos, precise or coarse location, purchase history, user content, identifiers and usage data. | Everything tied to your account, because Barette is an account-based service whose history follows you between devices. |
| Not linked to you | Crash logs and diagnostics collected before an account can be attributed to them. | Collected automatically, without being tied back to your account. |
Because nothing is used to track you, Barette never shows the App Tracking Transparency prompt — there is nothing to ask permission for.
Security practices
- Data is encrypted in transit with TLS.
- Session tokens are short-lived JWTs, stored in the Android Keystore.
- Passwords are stored only as salted hashes.
- Users can request that their data be deleted, and the request is completed within 30 days.
- The app is reviewed against the Play developer programme policies before each release.
Contact us about this policy
Write to privacy@barette-ai-app.com for anything on this page, or use the contact form. Postal mail reaches us at Barette AI LLC, 3320 Treble Ct, Charlotte, NC 28262-2058, United States.
We answer every message from a person, not a template, and we aim to do it within two working days.