Privacy Policy

01Who we are

Norwood is developed by EitanX Labs, the independent app studio of Eitan Michaelevich. This policy covers the Norwood app for iOS and Android, and this website. Questions about it reach the developer directly at founder@eitanx.com.

02What Norwood stores, and where

Norwood keeps its data in the app's private, sandboxed storage on your device:

• Photos you capture or import, plus their thumbnails, stored as files in the app's documents directory.
• A local database holding photo metadata (region, capture date, optional notes), the schedules and reminders you enter, logs, and appointments.
• Preferences such as your reminder settings, chosen capture source, and whether the app lock is enabled.

None of this is personally identifying to us, because it never reaches us. We have no way to see, access, or recover any of it.

03What never happens

• No data is transmitted off your device by the app.
• No accounts, sign-ins, or registration of any kind.
• No analytics, crash reporting, advertising, or tracking SDKs are included in the app.
• No push notification tokens - reminders are scheduled locally on your device.
• No access to contacts, location, browsing history, financial information, or health records.
• Biometric unlock (Face ID on iPhone, fingerprint on Android) for the optional app lock is performed entirely by the operating system. The app receives only a yes-or-no result and never sees biometric data.

04Health-related information

Photos of your scalp and records of your treatments are sensitive, health-related information, and Norwood treats them that way: they are stored only on your device, are never transmitted or shared, and are never used for advertising, marketing, or any purpose other than showing you your own progress. Norwood is not a medical device and does not diagnose, treat, cure, or prevent any condition.

05The two features that reach beyond the app

Two features involve movement of data, both fully under your control, and neither sends anything to us or any third party:

• WiFi microscope (optional). If you connect a WiFi scalp microscope, video streams from the microscope into your phone over your local network. Nothing is sent out; the connection never leaves your network.
• Backup export. When you tap Export backup, the app builds a zip of your data and hands it to the system share sheet. You choose the destination. If you send it to a cloud storage or messaging service, that service's own privacy policy applies to the copy you placed there.

06Permissions the app asks for

Every permission is optional in practice: decline any of them and the rest of the app keeps working, and you can revoke any of them later in your system settings - the related feature simply stops working.

07Device backups

If you use your device's own backup features (such as iCloud Backup or Google's device backup), your device may include Norwood's data in those backups. Those backups are created and managed by your device and governed by Apple's or Google's privacy policies and your backup settings - not by Norwood.

08Deleting your data

You can delete individual photos inside the app at any time. Deleting the app removes everything it stored on your device - we never had a copy, so there is nothing for us to delete. Copies you control may still exist elsewhere: a backup zip you exported, or your own device backup if it includes app data. Those are yours to keep or delete. Restoring a backup replaces the app's current data with the backup's contents.

09Children

Norwood is not directed at children under 13 and is intended for adults tracking their own progress. It does not knowingly collect data from anyone - children included - because it collects no data at all.

10This website

This site is static and sets no cookies. Fonts and images are served from this site itself, and there are no advertising or cross-site tracking scripts. The one measurement in use is Vercel Web Analytics: cookieless, aggregate page-view counts served from this same domain, with no personal identifiers and no way to follow you across sites. Our hosting provider (Vercel) serves the site, processes those aggregate counts, and may keep standard, short-lived server logs (such as IP addresses in access logs) to operate the service; we do not use any of it to identify visitors.

11Changes to this policy

If Norwood ever changes what it does with data - for example, if an optional sync feature is added in the future - this policy will be updated first, the "effective" date above will change, and any new data use will be opt-in and clearly explained in the app before it happens.

12Contact

Questions about privacy or this policy:

Norwood is not a medical device. It does not diagnose, treat, cure, or prevent any disease or condition, and does not provide medical advice. Consult a qualified healthcare professional for medical advice, diagnosis, or treatment.