Privacy Policy

Last updated: March 15, 2026

HairTransplantPlan.com ("we," "our," or "the Service") is operated by Tropic Flare LLC. This policy explains how we collect, use, and protect your information when you use our website and hair transplant analysis service.

Information We Collect

Information you provide directly:

When you use our analysis service, we collect your name, email address, country of residence, age range, the countries you are open to receiving a procedure in, and the photos you upload (front view and top/crown view of your head). Photos are automatically deleted after 6 months from our servers.

Payment information:

All payments are processed securely by Stripe. We never see, store, or have access to your full credit card number, CVV, or billing details. Stripe handles all payment data under their own privacy policy. We only receive confirmation of whether a payment succeeded and a transaction reference ID.

Information collected automatically:

We use Google Analytics (GA4) to understand how visitors use our website. This collects standard analytics data including pages visited, time on site, referral source, device type, browser, and approximate geographic location (city/country level). Google Analytics uses cookies. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

We also collect your IP address for rate limiting and abuse prevention.

How We Use Your Photos

When you submit photos for analysis (free or premium), your photos are:

1. Sent to Anthropic's Claude API for AI-powered hair loss classification and graft estimation. Anthropic processes these images under their privacy policy and does not use API inputs to train their models.

2. Sent to Replicate (which runs the Flux Kontext image generation model by Black Forest Labs) to generate AI before/after preview images. Replicate processes these images under their privacy policy.

3. Stored on our servers for up to 6 months, then automatically deleted. Your analysis data (graft estimates, Norwood stage, etc.) may be retained longer so you can reference your results.

Photos are never sent to clinics. When clinics receive your information (with your consent — see below), they receive only your name, email, hair loss stage, graft count, technique recommendation, and the countries you selected. Your photos remain private.

Photo Retention and Deletion

Photos uploaded for analysis (both free Basic and paid Premium) are automatically deleted from our servers within 6 months of your analysis completing. Your analysis data (graft estimates, Norwood stage, pricing, etc.) may be retained longer so you can access your results, but the original photos are removed on the 6-month schedule.

If you want your photos and data deleted sooner, email us at the address below and we will delete everything within 7 days.

Third-Party Services

We use the following third-party services to operate HairTransplantPlan:

Stripe — Payment processing. Handles all credit card and payment data. Stripe Privacy Policy

Anthropic (Claude API) — AI image analysis for hair loss classification and graft estimation. Your photos are sent to Anthropic's API for processing. Anthropic Privacy Policy

Replicate / Black Forest Labs (Flux Kontext) — AI image generation for hair transplant preview images. Your front-facing photo is sent to generate preview images. Replicate Privacy Policy

Google Analytics (GA4) — Website analytics and traffic measurement. Collects anonymized browsing data via cookies. Google Privacy Policy

DigitalOcean — Server hosting. Our application and temporary file storage runs on DigitalOcean infrastructure. DigitalOcean Privacy Policy

Clinic Data Sharing & Consent

When you submit photos on our upload page, you must check a consent checkbox that explicitly states: your hair loss data (Norwood stage, graft count, recommended technique, and the countries you selected) along with your name and email will be shared with matched clinics so they can reach out with consultation offers and quotes.

This sharing only happens because you explicitly consent to it at the time of upload. Without checking that box, you cannot submit. If you prefer not to receive clinic outreach, do not check the box. You can also choose to contact specific clinics yourself using the "Send my report to this clinic" button on your results page — this sends your details to that clinic only.

How We Use Your Email

Your email address is used to deliver your Premium Report PDF after purchase. We may also send a follow-up email asking about your experience. We do not add you to marketing email lists without explicit consent beyond what is described in this policy.

Data Security

We use HTTPS encryption for all data transmission. Payment processing is handled entirely by Stripe (PCI-DSS compliant). Photos are stored in access-restricted directories and automatically purged. However, no method of electronic storage or internet transmission is 100% secure, and we cannot guarantee absolute security.

Your Rights

You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise these rights, contact us at the email address below. We will respond within 30 days.

If you are located in the EU/EEA, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.

Children

Our service is not intended for anyone under 18 years of age. We do not knowingly collect information from children under 18.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions, data deletion requests, or concerns:

Email: hello@tropicflare.com

Operated by: Tropic Flare LLC