1. Who we are

Qoyl is a free hair care intelligence platform operated by Qoyl LLC, based in Chicago, Illinois. Our consumer app is available at qoyl-beta-alpha.vercel.app and our marketing site is at qoyl.live. Our brand intelligence platform is available at business.qoyl.live.

Qoyl provides cosmetic hair care recommendations only and does not provide medical advice, diagnose conditions, or address health-related hair loss or scalp disorders.

This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to all Qoyl products and services.

2. What information we collect

Information you give us directly

• Account information: Your email address and password when you create an account
• Hair profile data: Curl type, porosity level, scalp condition, strand thickness, zip code, hair concerns, shower filter use, color treatment status, extension use, budget range, and any notes you choose to provide
• Name: First and last name if you choose to provide them
• Payment information: Processed by Stripe. We do not store your full card number — Stripe handles payment data under their own privacy policy
• Product evaluation requests: Product name, brand, where purchased, ingredient list, and email when you submit a product for evaluation
• Survey responses: Optional feedback you submit through in-app surveys

Information we collect automatically

• Product search logs: The products you search, the brands you look up, the compatibility scores returned, and your hair profile variables at the time of search
• Usage data: Pages visited, features used, and general interaction patterns within the app
• Device information: Browser type, operating system, and general location derived from your IP address

3. How we use your information

To provide the service

• Generate personalized hair product compatibility scores based on your hair profile
• Create personalized routine recommendations and wash day calendars
• Build and deliver your travel kit product recommendations
• Process payments for subscription and one-time purchases via Stripe
• Respond to product evaluation requests you submit

To improve the platform

• Understand which products and ingredients are most frequently searched
• Identify gaps in our ingredient database and prioritize expansion
• Improve the accuracy of our compatibility scoring algorithm
• Develop new features based on usage patterns

To communicate with you

• Send your personalized routine via email when you subscribe
• Respond to product evaluation requests within 48 hours
• Send important updates about the service or your account
• Send optional seasonal hair care updates if you opt in

For brand intelligence (B2B)

• Provide brand partners with aggregated, anonymized data about how their products score across different hair profile segments
• Generate consumer demand signals showing which product types and ingredients are most searched — never tied to individual users

4. How we share your information

We do not sell your personal information. We share information only in these limited circumstances:

Service providers

• Supabase: Our database provider — stores your account, hair profile, and app data
• Stripe: Payment processing for subscriptions and one-time purchases
• Vercel: Hosts the Qoyl application
• Resend: Email delivery for routine emails and notifications
• Open Beauty Facts: An open-source cosmetic product database we query to retrieve ingredient lists for products you search. Your search queries are sent to their API.

Brand partners (B2B dashboard)

Brands who subscribe to our intelligence dashboard see aggregated, anonymized data about how products in their category score across different hair profile segments. This data never identifies individual users. For example, a brand may see "34% of high-porosity users in humid climates scored your product below 50" — but never which specific users those are.

Legal requirements

We may disclose your information if required by law, court order, or to protect the safety of our users or the public.

5. Data retention

• Account and hair profile data: Retained while your account is active. You can request deletion at any time by emailing support@qoyl.live
• Product search logs: Retained for up to 24 months to improve our scoring algorithm
• Payment records: Retained as required by Stripe and applicable tax laws
• Deleted accounts: We delete your personal data within 30 days of an account deletion request

6. Your choices and rights

Access and correction

You can view and update your hair profile at any time by logging into your account and visiting the My Profile page. You can update your profile once every 30 days.

Deletion

You can request deletion of your account and all associated personal data by emailing support@qoyl.live. We will process your request within 30 days.

Email communications

You can unsubscribe from non-essential emails at any time using the unsubscribe link in any email we send, or by emailing support@qoyl.live. We will still send essential account communications such as password resets.

California residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@qoyl.live.

European residents (GDPR)

If you are located in the European Economic Area, you have rights including access, rectification, erasure, restriction of processing, and data portability. Our legal basis for processing your data is your consent (given when you create an account and hair profile) and the performance of our contract with you (delivering the service you signed up for). To exercise your rights, contact us at support@qoyl.live.

7. Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS), row-level security on our database ensuring users can only access their own data, and secure third-party payment processing through Stripe. No system is perfectly secure — if you believe your account has been compromised, contact us immediately at support@qoyl.live.

8. Children's privacy

Qoyl is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, contact us at support@qoyl.live and we will delete it promptly. Qoyl does provide hair care content and recommendations relevant to babies and children — this content is directed at parents and caregivers, not children themselves.

9. Third-party links

Qoyl's product search results and recommendations include links to third-party retailers and affiliate shopping platforms including Shopper.com, Ulta Beauty, and Sephora. These sites have their own privacy policies and we are not responsible for their practices. We recommend reviewing the privacy policy of any third-party site you visit through our links.

10. Cookies and tracking

We use essential cookies and local storage to maintain your login session and remember your hair profile ID between visits. We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking.

11. Changes to this policy

We may update this Privacy Policy as Qoyl grows and our practices evolve. We will notify you of material changes by email (if you have an account) or by posting a notice in the app. The effective date at the top of this page always reflects when the policy was last updated.

12. Contact us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data:

• Email: support@qoyl.live
• Mailing address: Qoyl LLC, Chicago, Illinois
• Response time: We aim to respond to all privacy-related requests within 5 business days