Who We Are and What This Policy Covers
TENSHN (“TENSHN,” “we,” “us,” or “our”), 8735 Dunwoody Place Ste. R, Atlanta, GA 30350, sells scalp-care products at tenshn.com (the “Site”) and publishes the Scalp Passport mobile application (the “App”). This policy explains what personal information we collect, how we use and disclose it, and the choices you have.
Checkout on our Site is completed on a page operated by Shopify, which has its own privacy policy. This policy does not cover other companies’ websites or services.
The Short Version
- Your scan photos, readings, and habit logs stay on your phone. The App analyzes photos on your device and does not keep them. TENSHN does not receive them.
- When you buy from us, we collect the order details we need to ship and support your purchase. Your payment card details go directly to Shopify’s payment system, not to us.
- We do not sell or share your personal information, and we do not run ads or ad trackers.
- Website analytics load only if you click Accept on our cookie banner. Declining, or a Global Privacy Control signal from your browser, means they never load.
Information We Collect
This list is our notice at collection. It shows the categories of personal information we collected in the last 12 months, using the categories California law uses, where each comes from, why we use it, and how long we keep it.
- Identifiers and contact information — name, email address, phone number, shipping and billing address. Source: you, at checkout or when you contact us (through Shopify). Purpose: fulfil and support orders and communicate with you. Kept: up to 7 years for order records.
- Commercial information — the products you purchased, order history, and subscription status. Source: you and Shopify. Purpose: fulfil orders, manage subscriptions and App access. Kept: up to 7 years.
- Payment information — card details are collected directly by Shopify Payments; we do not receive your full card number. Kept: by Shopify under its policies.
- Internet or network activity — pages viewed, referring page, and device and browser type, only if you accept analytics; and the IP address and browser details our hosting provider receives whenever your browser requests a page. Purpose: operate and secure the Site and, with your consent, understand aggregate usage. Kept: analytics are aggregate only; hosting logs for the short periods our host sets.
- Customer-service communications — emails and messages you send us. Kept: up to 3 years.
- Records of your agreement to our terms — the time you accepted, and which version of the terms and subscription terms you saw, saved with your order so we can show you agreed. Kept: 3 years after your last order or renewal.
What we do not receive. The App keeps your photos, readings, habit logs, and step counts on your device. We do not receive them, so they are not personal information we collect on our servers. See “The Scalp Passport App” below.
Sensitive personal information. Because the App’s information stays on your device, we do not collect sensitive personal information (for example, health or biometric information) on our servers.
How We Use Information
- To process, ship, and support orders and returns, and to manage subscriptions.
- To communicate with you about your order, account, or request.
- To provide App features that are tied to a TENSHN purchase.
- To secure and maintain the Site and to detect and prevent fraud or abuse.
- To understand how the Site is used, in aggregate, if you accept analytics.
- To comply with law and to enforce our terms.
How We Disclose Information
We disclose personal information only to these kinds of recipients, and only as needed:
- Commerce and payment providers — Shopify Inc. and its payment partners, to take payment, calculate tax and shipping, and manage orders and subscriptions. When you continue to checkout, your browser also contacts Shopify to set up your cart.
- Shipping carriers — to deliver your order.
- Hosting and infrastructure providers — to serve the Site.
- Analytics provider (only if you accept) — Plausible Analytics, a cookie-free tool that reports aggregate statistics.
- Professional advisers and authorities — lawyers, accountants, insurers, and government bodies where the law requires or to protect rights and safety.
- A buyer or successor — if TENSHN is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. Any successor must honor this policy or give you notice and choices before using your information differently.
We do not sell or share your personal information. In the last 12 months we have not sold personal information or shared it for cross-context behavioral advertising, as those terms are defined under California law. We do not knowingly sell or share the personal information of anyone under 16.
Cookies, Analytics, and Tracking on the Site
The Site sets no advertising or tracking cookies, and we do not use advertising pixels, session-recording tools, or cross-site trackers. It stores one item in your browser, your cookie choice, so we do not ask again. The fonts on the Site are hosted on our own server, so loading a page does not send your device information to a font provider.
If you click Accept on the cookie banner, we use Plausible Analytics to count visits. Plausible does not use cookies and does not build a profile of you. Like any service your browser connects to, it receives your IP address and browser details with the request; according to Plausible’s published policy it uses them only to produce a daily-rotating anonymous identifier and does not store your IP address. It reports aggregate statistics only.
If you click Decline, or your browser sends a Global Privacy Control signal, the analytics script is never loaded and nothing is sent to Plausible. You can change your choice at any time using “Your privacy choices” in the footer of the home page. Treating the Global Privacy Control signal as a decline is how we respond to browser opt-out signals; we do not otherwise respond to “Do Not Track” signals. We do not allow third parties to collect personal information about your online activities over time and across other sites through our Site.
When you continue to checkout, you are taken to a page operated by Shopify, which may set its own cookies under its own policy.
The Scalp Passport App
The App is built to keep your information on your device.
- Photos are analyzed on your phone and are not kept. After the analysis is done, the App does not retain the image. TENSHN does not receive, view, or store your photos.
- Readings and logs stay on your device. The App keeps numeric readings and your habit entries (massage routine, sleep, time outside, exercise, meditation, and nutrition) on your device, encrypted while your phone is locked and excluded from device backups. If you allow Motion & Fitness access, the App reads your daily step count from your phone’s motion sensor and shows it to you; it does not send it to us.
- No ads or third-party trackers. The App contains no advertising software and no third-party analytics or tracking components, and it makes no network requests of its own.
- Permissions. The App asks for camera access (to take scan photos and, if you use it, to read barcodes for nutrition logging) and, optionally, Motion & Fitness access (for step counts) and notifications (for reminders generated on your phone).
- Deleting your data. Deleting the App removes the data stored on that device. If we remove, suspend, or discontinue the App, the data on your device remains yours, but we cannot restore or export it for you.
- Tutorial videos. Tutorial videos may carry a watermark that identifies your account, and we may detect screen recording to protect them.
Face Detection and Biometric Information
For one optional step, the Front photo, the App uses Apple’s Vision framework on your own iPhone or iPad to detect facial landmarks (such as your eyes, brows, and face outline) so it can measure how far your hairline sits above your brow. This may be considered a scan of face geometry.
- Purpose: only to calculate your own hairline reading and show it to you.
- What is stored: the photo and the landmarks exist only in your device’s memory while the reading is calculated and are then discarded. The App does not save the photo, the landmarks, or any face template. Only one number, your hairline reading, is kept, on your device.
- What TENSHN receives: nothing. The analysis runs entirely on your device. We do not sell, lease, trade, or otherwise profit from any biometric identifier or biometric information, and we do not disclose it.
- Retention and destruction: photo and landmarks are destroyed automatically within seconds. If we ever held a biometric identifier, we would permanently destroy it when the purpose for collecting it is satisfied or within three years of your last interaction with us, whichever comes first.
- Your agreement: before your first Front photo, the App shows you this information and asks for your agreement. The Front photo is optional; if you skip it, the other scan steps still work and only the hairline reading is unavailable.
Consumer Health Data
Some laws, such as Washington’s My Health My Data Act and similar laws in Nevada and Connecticut, give extra protection to “consumer health data.” Here is how they apply to the App.
- What the App processes and why: scalp-appearance readings (visible scalp coverage, redness, flaking, shine, hairline position); the photos and, for the Front photo, facial landmarks used to calculate them; and your habit and wellness logs (sleep, time outside, exercise, meditation, massage routine, nutrition, and daily step counts). Purpose: to show you your own trends.
- Where it is: on your device only. Source: you, through the App on your device.
- Sharing: we do not share consumer health data with any third party or affiliate, and we do not sell it. We would not sell it without your valid signed authorization, and we have no plans to.
- Consent: we process this data in the App only to provide the features you ask for. Before we collect any of it in any other way, or share any of it, we will ask for your separate, specific consent, and you will be able to withdraw it.
- Your rights: you may confirm whether we collect, share, or sell your consumer health data; access it and a list of third parties it was shared with; withdraw consent; and have it deleted. Email support@tenshn.com with the subject “Consumer health data request.” Because the data is on your device, you can also remove it yourself by deleting the App or its data. We respond within 45 days, and may extend once by 45 more days with notice. If we decline, you may appeal by replying with the subject “Appeal”; we will answer within 45 days in writing, and you may contact your state attorney general.
- Location: we do not collect location data, and we do not use geofences around places that provide health care.
Your Privacy Rights and Choices
California residents
California law gives you the following rights, subject to exceptions: to know and access the categories and specific pieces of personal information we collected about you, and the sources, purposes, and recipients; to delete personal information we collected from you; to correct inaccurate personal information; to opt out of sale or sharing (we do not sell or share personal information, so there is nothing to opt out of); to limit use of sensitive personal information (we do not use it in ways that trigger this right); and to non-discrimination — we will not deny you goods or services, charge different prices, or provide a different quality of service because you exercised a right.
How to make a request: email support@tenshn.com with the subject “Privacy request.” We will confirm receipt within 10 business days and respond within 45 days; if we need more time we will tell you why and may extend once by up to 45 more days. To protect you, we will ask you to confirm details that match our order records, such as the email address you used and an order number. You may use an authorized agent; we may ask for your written permission and to verify your identity directly.
Disclosures in the last 12 months: identifiers, commercial information, and payment information to our commerce and payment providers and carriers; internet or network activity (hosting logs) to our hosting provider; and, only for visitors who accepted analytics, internet or network activity to our analytics provider. We sold or shared no personal information. California Civil Code §1798.83 lets California residents ask about disclosures to third parties for their direct marketing; we make none.
Residents of other U.S. states
Depending on where you live, you may have rights to access, correct, delete, and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale, and certain profiling. We do not engage in targeted advertising, sale, or profiling. You can exercise these rights the same way as above. If we decline your request, you may appeal by replying to our response with the subject “Appeal.” We will respond within the time your state’s law requires and explain the outcome; if you are unhappy with it, you may contact your state attorney general.
Visitors and customers outside the United States
TENSHN is based in the United States and sells to customers in the United States only. If you visit the Site or use the App from another country, your information is processed in the United States. If you are in the European Economic Area or the United Kingdom and want to ask about information we hold about you, including to access, correct, or delete it, contact us at support@tenshn.com.
Marketing email
We send order and account emails as needed. We send marketing email only if you opt in, and every marketing email has an unsubscribe link.
Data Retention
We keep personal information only as long as needed for the purposes described, including to meet tax, accounting, and legal obligations, resolve disputes, and enforce our agreements. The periods are listed above. Privacy-request records are kept for 24 months. Data in the App stays on your device until you delete it or delete the App.
Security
We use reasonable safeguards. In the App, stored information is encrypted while your phone is locked and is excluded from backups, and the App makes no network requests. Our Site is served over HTTPS. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Children
The Site and the App are for adults 18 and older and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
Changes to This Policy
We may update this policy from time to time. The “Last updated” date above shows the most recent revision. If changes are material, we will give notice on the Site, and by email where the law requires, before they take effect.
Contact Us
TENSHN, 8735 Dunwoody Place Ste. R, Atlanta, GA 30350. Email: support@tenshn.com.
