Privacy Policy
Last updated: September 2, 2026
Replant is made by Marius Labs ("we", "us"). This policy explains exactly what happens to your photos, your answers and the visualizations we create for you when you use the Replant iOS app (the "Service"). It is the long version of the "Your photos & AI" sheet shown in the app before your first scan.
The short version
- No account, no email. Replant signs you in anonymously. We never ask for your name, email address or phone number.
- Your photos are processed by Google AI (Gemini) to create illustrative visualizations of your own photo.
- Stored in your private space on EU servers (Google Cloud, europe-west1 and eur3 regions), scoped to your anonymous user only.
- Used only for your triptych and your dossier. We do not use your photos to train AI models, and we do not sell or share them for advertising.
- Delete everything anytime from Settings. Photos, visualizations, dossier and records are removed from our servers.
Information we collect
Information you provide
- Appearance-reference photos: up to four photos of your head (front, left, right, top) that you capture in the app or import from your photo library.
- Questionnaire answers: your age range, when you first noticed changes, the pattern in your family, the products you use, whether you have had a transplant, and what you want from Replant.
- Consent records: the fact and time you agreed to the photo processing described here.
- Support messages: if you email us, we keep the correspondence to answer you.
Information we create for you
- Illustrative visualizations: images derived from your front photo showing how your hair may look today, five years on, and after a transplant, including hairline variants.
- Pre-op dossier: a written document compiled from your answers, your appearance reference and published data.
Information collected automatically
- Anonymous identifier: a random user id created on first launch and a device flag stored in the iOS Keychain, used to keep your data separate from other users and to limit the free visualization to one per device.
- Purchase status: whether your Replant Pro subscription is active, received from Apple through RevenueCat. We never see your card details.
- Usage and technical data: app events (for example "scan completed" or "dossier opened"), device model, iOS version, app version, crash reports and approximate country, collected through Firebase Analytics in anonymized form.
How we use your information
- To create your visualizations and your dossier.
- To run, secure and support the Service, including limiting abuse of the free tier.
- To manage your subscription and restore your purchases.
- To understand how the app is used and improve it, using aggregated statistics.
- To answer your support requests.
We do not use your photos, answers or visualizations for advertising, profiling or to train machine-learning models.
AI processing of your photos
When a visualization is generated, our server sends your front appearance-reference photo, together with the descriptive parameters from your answers, to Google's Gemini API. Gemini returns the rendered image, which is stored in your private space. The transfer is encrypted (TLS). We use Google's paid API service, under which Google states that customer content is not used to improve or train its models. See Google's Gemini API terms.
Your pre-op dossier is prepared by our team. We use an AI writing assistant (Anthropic's Claude) to draft it from your questionnaire answers and appearance reference, and a person reviews every dossier before it is delivered to you. Anthropic states that content sent through its commercial API is not used to train its models. See Anthropic's model training policy.
You must accept the "Your photos & AI" sheet in the app before any photo is processed. You can review it at any time in Settings.
Where your data lives and how it is protected
We use Firebase, a Google Cloud service. Photos and visualizations are stored in a private storage bucket in the europe-west1 region; records are stored in a Firestore database in the eur3 (EU) region. Access rules restrict every file and record to the anonymous user that created it. Data is encrypted in transit (TLS) and at rest.
Third-party services
- Google Firebase and Google Cloud: anonymous authentication, database, storage, cloud functions, push notifications and analytics. Firebase Privacy.
- Google Gemini API: renders the visualizations (see above).
- Anthropic: assists the drafting of the dossier (see above).
- Apple: processes subscription payments through the App Store.
- RevenueCat: manages subscription status and purchase restoration. RevenueCat Privacy.
We do not sell, rent or trade your personal information. We may disclose information only when required by law, to protect the rights and safety of our users, or in connection with a merger or acquisition (in which case this policy continues to apply).
How long we keep your data
Your photos, visualizations, dossier and records are kept for as long as your anonymous account exists, so you can come back to them. When you use Delete everything in Settings, they are removed from our servers right away and from backups within 30 days. If you delete the app without deleting your data, your data stays in your private space until you reinstall and delete it, or until you ask us to.
Aggregated analytics that cannot identify you may be kept longer.
Your rights
Wherever you live, you can:
- Access your photos, visualizations and dossier directly in the app, and save or share them from the app.
- Delete everything at any time from Settings. Deleting your data does not cancel an App Store subscription: manage it in your Apple ID settings.
- Withdraw consent to photo processing by deleting your data.
- Ask us anything about your data at the address below.
If you are in the European Economic Area or the United Kingdom, you also have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, and the right to lodge a complaint with your data protection authority. If you are a California resident, you have the rights granted by the CCPA, including the right to know and the right to delete. We do not sell personal information.
Because Replant does not collect your identity, a request made by email can only be honored for data you can point us to (for example by sending it from the device that holds the anonymous account). The reliable way to exercise your rights is the in-app deletion.
Age
Replant is intended for adults. You must be at least 18 years old to use the Service. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.
Changes to this policy
We may update this policy. The "Last updated" date above changes with it, and material changes are announced in the app.