Color Formula Vault LLC | Last updated: August 21, 2026

This Privacy Policy explains how Color Formula Vault LLC (“Color Formula Vault,” “we,” “us,” or “our”) collects, uses, shares, protects, and deletes information when you use the Color Formula Vault mobile application (the “App”) and related services.

Color Formula Vault is a professional tool for hair stylists and colorists. This policy applies to information associated with the stylist account and to information about clients that the stylist enters into the App.

There are two kinds of people whose information may appear in the App:

· You, the stylist — the person who holds the account.

· Your clients — the people whose color records you save in the App. You provide this information to us through your account.

If you are a stylist entering client information, you are responsible for providing any notices and obtaining any permissions, consents, or other lawful authority required to record and use that information and any client photographs, and for complying with professional and legal obligations that apply to you.

· Name, email address, and, if you choose to provide it, phone number.

· Password credentials. Where we manage password authentication directly, passwords are protected using one-way cryptographic hashing; where authentication is handled by a third-party identity provider, that provider handles the credential according to its own security practices.

· Profile photo, if you upload one.

· Preferences such as your preferred measurement unit.

· If you sign in with Apple or Google, the basic profile information and provider account identifier that the provider makes available to us.

· Client name and, if you choose to add them, phone number, email address, hair type, porosity, and notes.

· Color formulas, including service type, brand and shade, quantities, developer volume, mix ratio, processing time, service cost, next appointment, and your notes.

· Before and after photographs you attach to a client visit or formula.

· Device type and app version used to provide support and diagnose crashes or compatibility issues.

· A notification token if you enable push notifications.

· Server and security logs that may include request timestamps, IP addresses, and related technical information needed to operate, secure, and troubleshoot the service.

Subscriptions are purchased and billed through the Apple App Store or Google Play. We receive information necessary to provide the subscribed service, such as subscription status, product or plan information, and renewal or expiration information made available by the applicable store. We do not receive or store your full payment card number through the App.

· Provide the App and its core features, including storing, syncing, calculating, and displaying client and formula records.

· Create and secure accounts, authenticate users, and prevent unauthorized access or abuse.

· Sync information across authorized devices and restore account information when supported by the service.

· Send transactional communications such as password resets, verification messages, service notices, and support responses.

· Send optional notifications, such as appointment reminders, when you enable them.

· Provide, administer, and troubleshoot subscriptions and free trials.

· Monitor service reliability, diagnose bugs and crashes, maintain security, and improve the App.

· Comply with legal obligations and respond to lawful requests from authorities.

We do not sell your personal information. We do not use your client records or photographs for advertising.

We may share or make information available to service providers that process information for us solely as needed to operate and support the App. Depending on the services actually enabled for your account, these providers may include:

Provider                                                  Purpose

Amazon Web Services (AWS)         Hosting, database, storage, backups, and related infrastructure.

Google Firebase                                  Authentication and push-notification services, where enabled.

Apple App Store / Google Play     Processing subscription purchases, subscription status & store info                                                         

Email delivery provider Gmail     Sending account, verification, password-reset, and support-related email.

The specific service providers used by the App may change over time. We will update this policy as appropriate when those changes materially affect how personal information is handled.

We may also disclose information if required by law, legal process, or governmental request, or when reasonably necessary to protect the rights, safety, security, property, or integrity of Color Formula Vault, our users, or others.

We retain client and formula records while your account remains active so that the App can provide its core functionality. Records you delete in the App are placed into deletion processing and are removed from active systems within 30 days, unless a longer period is required or permitted for security, fraud prevention, backup restoration, dispute resolution, or legal compliance. Information retained for those limited purposes is protected and isolated from ordinary use where practicable.

When you delete your account, we initiate deletion of your account and associated personal information. Some information may remain temporarily in backups or logs and will be removed or overwritten according to our backup and retention cycles, subject to applicable legal requirements.

Server and security logs may be retained for up to 90 days for security, troubleshooting, and operational purposes, unless a longer period is needed for a security investigation or legal obligation.

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include encryption in transit using TLS, encryption at rest where supported by our infrastructure, access controls, authentication protections, and limited access to production systems based on business need. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If we determine that a security incident requires notification under applicable law, we will provide notices as required by law.

Depending on where you live and the laws that apply to you, you may have rights relating to your personal information, including rights to access, correct, export, delete, or otherwise control certain uses of your information. We will honor rights that apply to your request under applicable law.

· Access and correction — you can view and edit your account, client records, and formulas in the App.

· Export — email us from the address associated with your account and request a copy of your data.

· Notifications — you can disable push notifications in the App or your device settings, depending on the notification type.

· Deletion — delete your account in Settings → Delete Account or contact us if you cannot access the App.

Deleting your account permanently removes your profile, client records, formulas, and photos associated with the account from active systems, subject to the limited retention described above and any information we are legally required to retain. Account deletion cannot be undone after the deletion process has completed.

If you cannot access the App, email connect@colorformulavault.com from your account email address with “Account Deletion Request” in the subject line. We may ask for reasonable information to verify that you are authorized to make the request.

Deleting your account does not itself cancel a subscription purchased through Apple or Google. You must cancel that subscription through the applicable store account to prevent future renewal charges.

Color Formula Vault is a professional tool for hair stylists and colorists and is not directed to children. You must be at least 16 years old to create or use an account. We do not knowingly collect personal information from children under 16 in violation of applicable law. If you believe a child has created an account, contact us and we will take appropriate steps to investigate and remove the account where required.

Our service providers may process information in countries other than the country where you live. Where required by applicable law, we use appropriate safeguards for international transfers and processing.

We may update this Privacy Policy from time to time. When we make a material change, we will update the “Last updated” date and, where appropriate, provide notice through the App or another reasonable method. The updated policy will apply from its effective date. The current version will remain available at colorformulavault.com.

Questions about this Privacy Policy, your information, or a privacy request can be sent to connect@colorformulavault.com.