Privacy Policy

Effective Date: April 10, 2026

StyleCE ("we," "us," or "our") is operated by Anthony Fontana, an individual. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the StyleCE application and website (collectively, the "Service"). StyleCE is a continuing education (CE) hour tracker designed for cosmetologists and licensed beauty professionals.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: name, email address, and password when you create an account.
• License Information: state of licensure, license type (e.g., cosmetology, barber, esthetician), license number, and expiration date.
• CE Course Data: course name, provider, completion date, hours earned, category, and any notes you add.
• Certificate Photos: images of CE completion certificates that you upload.
• Payment Information: if you subscribe to StyleCE Pro, payment is processed by Stripe. We do not store your credit card number, CVV, or full payment card details on our servers. We receive only a transaction identifier, subscription status, and the last four digits of your card from Stripe.

1.2 Information Collected Automatically

• Usage Analytics: we use PostHog, a privacy-first analytics platform, to collect anonymized usage data such as pages visited, features used, and session duration. PostHog does not sell your data and is configured to respect Do Not Track signals.
• Device Information: device type, operating system, and browser type for the purpose of delivering and improving the Service.
• Log Data: server logs may record your IP address, request timestamps, and referring URLs. This data is used for security monitoring and debugging and is not linked to your account for profiling purposes.

1.3 Information We Do Not Collect

• We do not collect Social Security numbers, government-issued ID photos, or financial account numbers.
• We do not collect precise geolocation data.
• We do not access your device contacts, camera, or microphone without your explicit action (e.g., you choose to upload a certificate photo).

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including CE hour tracking, license expiration monitoring, and renewal reminders.
• Process your subscription and manage billing through Stripe.
• Send transactional emails (account verification, password resets, subscription receipts).
• Send renewal reminder notifications that you have opted into.
• Respond to support requests and communicate with you about the Service.
• Analyze anonymized usage patterns to improve features and user experience.
• Detect, prevent, and address technical issues, fraud, or security threats.

3. How We Store and Protect Your Data

• Database: your data is stored in Supabase, a managed PostgreSQL database platform hosted on Amazon Web Services (AWS) infrastructure in the United States.
• Row-Level Security: we enforce PostgreSQL row-level security (RLS) policies so that each user can access only their own data at the database level.
• Encryption: data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption provided by the hosting infrastructure.
• Access Controls: access to production systems is restricted to authorized personnel and protected with multi-factor authentication.
• Certificate Images: uploaded certificate photos are stored in Supabase Storage with access controls. Only you and authorized system processes can access your files.

While we implement commercially reasonable security measures, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We share information with the following third-party service providers only as necessary to operate the Service:

Each third-party provider is bound by their own privacy policy and data processing agreements. We do not sell, rent, or trade your personal information to any third party.

5. Data Sharing and Disclosure

We do not sell your personal data. We do not share your data with third-party advertisers. We may disclose your information only in the following limited circumstances:

• Service Providers: as described in Section 4 above, solely to operate the Service.
• Legal Requirements: if required by law, regulation, subpoena, court order, or governmental request.
• Safety: if we believe disclosure is necessary to protect the rights, property, or safety of StyleCE, our users, or the public.
• Business Transfer: in connection with a merger, acquisition, or sale of assets, in which case you would be notified of any change in data handling practices.

6. Your Rights and Choices

6.1 Access and Portability

You can view all personal data associated with your account within the app at any time. Pro subscribers can export their CE records as PDF or CSV files.

6.2 Correction

You can update your account information, license details, and CE records directly within the app.

6.3 Deletion

You may delete your account and all associated data at any time from within the app settings. Upon account deletion, we will permanently remove your personal data, license information, CE records, and uploaded certificate images from our systems within 30 days. Some anonymized, aggregated data that cannot be linked back to you may be retained for analytical purposes.

6.4 Communication Preferences

You can opt out of non-essential emails at any time. Transactional emails related to your account (e.g., password resets, subscription confirmations) cannot be opted out of while your account is active.

6.5 Push Notifications

Renewal reminder notifications require your opt-in consent. You can enable or disable push notifications at any time through the app or your device settings.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, your data will be permanently removed within 30 days, except where retention is required by law (e.g., financial transaction records as required for tax and accounting purposes).

8. Children's Privacy

StyleCE is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us and we will promptly delete that information.

9. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion of your personal information.
• Opt out of the sale or sharing of your personal information (we do not sell or share your data).
• Non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at the email address below.

10. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We process data in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice within the app at least 30 days before the changes take effect. Your continued use of the Service after the effective date of the revised policy constitutes acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• StyleCE
• Operated by Anthony Fontana
• Email: [email protected]