Privacy Policy

Last updated: 21 October 2026

This policy explains what we collect when you use Coileen Curl Coach, why we collect it, who else sees it, and what you can ask us to do about it. We have tried to write it in plain language rather than legal boilerplate.

If anything here is unclear, email hello@coileen.com and we will explain it.

1. Who we are

Coileen Curl Coach is an AI hair coaching app for people with curly, coily and textured hair. It is a product of Marching Brands LLC, a limited liability company formed in Delaware, United States.

Marching Brands LLC ("Coileen", "we", "us") is the data controller for the personal data described in this policy.

We serve customers in the United States and in Europe. Where you live decides which rights in Section 10 apply to you.

Contact for any privacy question or request: hello@coileen.com

2. Who can use Coileen

Coileen is for adults. You must be 18 or over to create an account. We do not knowingly collect data from anyone under 18, and if we find out that an account belongs to someone under 18 we will close it and delete the data.

3. What we collect

Information you give us

Account details — your email address, a display name if you choose one, and your password or, if you sign in with Google, the fact that you used Google to sign in. We never see your Google password.
Your hair profile — your curl pattern, porosity, strand thickness, density, scalp type (dry, normal, oily or combination), wash and styling frequency, routine preference, heat tool use, chemical treatments, the concerns you select, and your hair goals.
Product scans — the photo you take of a product label, and the analysis we generate from it.
Conversations with Coileen — what you type to the AI coach, so it can answer and so your plan can take it into account.
Photos for the AI Hair Styler — a photo of yourself, if you choose to use that feature.
Reviews you write — the product, your rating, your review text, and the display name you choose.
Messages you send us — through the contact or feedback form, including any screenshot you attach.
Quiz answers before you sign up — if you take the quiz and give us your email but do not subscribe, we keep your email and your quiz answers so we can follow up.

Information collected automatically

Funnel events — that someone reached a quiz, finished it, signed up, or started or completed checkout. These records do not contain your name or email.
Email engagement — whether you opened our quiz result email and whether you clicked the link in it. We do this with a small invisible image and a unique link.
Technical data — standard web server information such as your IP address and browser, handled by our hosting provider.

What stays on your device and never reaches us

Some versions of our quiz save your answers in your own browser so you can close the tab and pick up where you left off. Those answers stay on your device. Only a specific, limited set of fields is ever sent to us and saved to your profile — the rest is discarded. If you clear your browser data, that saved progress is gone.

4. What we do not collect

We do not ask for, or want, medical information. Our quiz asks about cosmetic qualities of your hair and scalp — dryness, oiliness, buildup — not about medical conditions, diagnoses, medication or treatment. Please don't send us medical details; we are not qualified to act on them.
We do not store your full card number. Payments are handled entirely by Stripe.
We do not sell your personal data, and we do not share it with anyone for their own marketing.

Some profiles created before October 2026 contain two concern options we no longer offer, relating to hair loss and scalp issues. We stopped collecting them. Email hello@coileen.com if you would like those removed from your profile.

5. Why we use it, and our legal basis

To provide the app you signed up for — building your hair profile, analysing scans, generating your plan, running the coach, saving your shelf. Legal basis: performance of our contract with you.

To take payment and manage your subscription, including refunds under our guarantee. Legal basis: performance of our contract, and our legal obligation to keep accounting records.

To send you service emails — your quiz result, your receipt, changes to these terms. Legal basis: performance of our contract.

To improve the app — understanding where people drop out of the quiz, which features get used. Legal basis: our legitimate interest in making the product work better. You can object at any time.

To measure our advertising — only if you accept advertising cookies. Legal basis: your consent, which you can withdraw whenever you like.

To keep the service secure and prevent abuse. Legal basis: our legitimate interest.

6. Who else sees your data

We use the following companies to run Coileen. They process data on our instructions and are not allowed to use it for their own purposes.

Base44 (a Wix company) — hosting, our database, file storage, and sending our emails. This is where your account and profile live.
Anthropic — the AI that analyses ingredient lists and powers the Coileen coach. When you scan a product or chat with Coileen, the relevant content is sent to Anthropic to generate the response.
Stripe — payment processing.
Google — advertising measurement, only if you accept advertising cookies.
Meta (Facebook and Instagram) — advertising measurement, only if you accept advertising cookies.

We never send your hair concerns, hair goals or profile details to Google or Meta.

We and all of these providers are based in the United States, so your data is stored and processed there. If you are in the EU or EEA, that is a transfer outside your region. Those transfers rely on the European Commission's approved safeguards — Standard Contractual Clauses, or the EU–US Data Privacy Framework where the provider is certified under it.

We may also disclose data if the law requires it, or to protect our rights or someone's safety.

7. How long we keep it

Your account, hair profile, plan, scans and coach conversations — while your account is open, and for 30 days after you ask us to delete it, so an accidental deletion can be undone.
Quiz answers from people who did not subscribe — 24 months, then deleted.
Payment and invoice records — 7 years, to meet US tax and accounting requirements. This is the one thing we cannot delete on request.
Funnel and advertising measurement data — 26 months.
Email open and click records — 12 months.
Messages you send us — 24 months after the matter is resolved.
Photos you upload — product label photos stay with the scan. AI Hair Styler photos are kept while your account is open; ask us and we will delete them sooner.

8. What is visible to other people

Two things you create are public by design, so please treat them as published:

Reviews you write appear on our public reviews page under the display name you choose. Use a first name or nickname if you would rather not be identifiable.
Scan results have a shareable public link, so anyone with that link can see the product and its analysis.

Images you upload are stored by our hosting provider and served from a long, unlisted web address. Anyone who has that exact address can open the file, so please don't share it if the image is personal. Your hair profile, your plan and your conversations with Coileen are never public.

9. Cookies and tracking

We use two kinds:

Essential — needed to keep you signed in, remember your consent choice, and save quiz progress on your device. These are always on, because the app cannot work without them.
Advertising — Google Ads and Meta, used to measure whether our ads work. These load only if you accept them. If you choose "Only essential", they are never loaded.

You can change your mind at any time using the Cookie settings link in the footer of any page.

10. Your rights

Wherever you live, you can ask us to:

Give you a copy of the personal data we hold about you
Correct anything that is wrong
Delete your account and data
Restrict or object to how we use it
Port your data to another service in a machine-readable format
Withdraw consent you previously gave, including for advertising cookies

Email hello@coileen.com and we will respond within one month. We will not charge you, and we will not treat you differently for asking.

If you are in the United States

Depending on your state, you may have the right to know what we collect, to get a copy, to have it deleted, to correct it, and to opt out of its sale or of targeted advertising.

We do not sell your personal information, and we have not in the past 12 months.
To opt out of targeted advertising, choose "Only essential" in our cookie banner, or use the Cookie settings link in the footer of any page. We also honour the Global Privacy Control signal if your browser sends one.
You may use an authorised agent to make a request on your behalf.
If we refuse a request, you may appeal by replying to our response. If we refuse your appeal you can complain to your state attorney general or to the Federal Trade Commission.

If you are in the EU, EEA or UK

The rights above are your rights under the GDPR. You can also complain to the data protection authority in the country where you live or work. A list of EU authorities is published by the European Data Protection Board at edpb.europa.eu.

Because we are based in the United States, your data is processed there — see Section 6 for the safeguards that transfer relies on.

11. Security

Your data is held in access-controlled systems with rules that stop one user reading another user's profile, scans, plan or conversations. Connections are encrypted in transit. No system is perfectly secure, so if a breach ever affects you we will tell you and the relevant authority as the law requires.

12. Changes to this policy

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.

13. Contact

Questions, requests, or complaints: hello@coileen.com

We would rather hear from you directly than have you go to a regulator, and we will try to put things right.