Continual Beauty, Inc. has established a formal privacy policy and supporting procedures for protecting personal data.
This policy and supporting procedures are designed to provide Continual Beauty, Inc. with formalized internal guidelines regarding the Privacy of personal data. All documented procedures will be followed and adhered to for any personal data processing-related activities within the Company.
This policy and supporting procedures cover all personal data processing activities within the Continual Beauty, Inc. system components.
System components are defined as those owned, operated, maintained, and controlled by Continual Beauty, Inc. The term “system components” refers to any application, server, and/or database involved in processing personal data.
As we work with you to build better relationships, we are committed to protecting your privacy. For any personal data we collect as part of your journey with us, this Privacy Policy (“Policy”) explains why we collect the data, what we do with the data, and your rights and choices regarding your personal data. For the avoidance of doubt, references in this Policy to data, personal information, or information are all references to personal data.
When you use our mobile application (“App”), access our website at www.hackherapp.ai (“Website”), or interact and communicate with us via our online or social media channels, this Policy will apply to you. For this policy, we will refer to all these touchpoints with you as our services (“Services”).
So we can remain transparent about how we use your personal data, we will notify you when this policy has significant or material updates. This Policy was last updated on March 3, 2025.
Continual Beauty, Inc., a company registered in the United States of America (“we”, “our”, “us”), is the data controller. We decide what personal data is collected from you and how this data will be used.
Our Services may contain external links. YOU, the user, will provide those links in your “Wishlist folder,” which might include e-commerce websites as well as Twitter, Facebook, and Instagram. We do not share your data with any of these third-party organizations. We share your Wishlist folder with your chosen guest. These organizations will have their own privacy policies, which you should read carefully before providing them with your personal data. We do not accept any responsibility or liability for them.
We may collect the following types of information:
Personal Information:
Non-Personal Information:
Identity Information
When you use the App, we collect: your name and a unique user code we supply you with to allow you and your partner to pair your App; your device ID so that we are able to identify you as one of our users. We also collect your email address to allow you to create an account with us.
Personal Information (username, profile photo, etc.)
You may decide to submit a cover profile photo, username, phone number, payment information, and other relationship information to personalize your profile.
We may use this data to improve the personalization of the App and the relevance of content for you and your partner.
Activity Information
When you use the App, we collect: your responses to our conversations so that we may share these answers and your progress with you, and your partner, whom you have chosen as a guest.
Demographic Information
We may present the option for you to provide demographic information so we can provide relevant recommendations and tailor the content we provide in the App. Where we do so, we collect personal data such as age, gender, preferences, interests, and lifestyle information.
If you chose to provide us with information for tailoring content in the App which may be considered special category data, such as your sexual orientation, race or ethnicity, or health information, we have done so on the basis of your consent, and you have agreed to it being processed in accordance with this Policy. You may withdraw your consent at any time by deleting your preferences, account, or contacting us at the email address provided at the end of this Policy.
Usage Information
When you use the Services, we collect: your responses to surveys so that we may improve the Services we offer; information about the time you spend and the activities you engage with in the App to better understand your needs and preferences and improve the user journey and experience; your IP address to know your general location so that we can manage the security of our platforms; and your device ID and email address so that we may communicate with you (via email or push notifications) about the activities you undertake as part of Services.
Support Information
When you use the Services, we collect your email address when you contact us for support so that we can respond to you, your device information so that we can understand and fix technical issues that may occur with our platforms, and other personal data you provide about yourself anytime you contact us for support or general queries.
Subscription and Registration Information
When you subscribe or register for an account, we collect: the details of your applicable subscription, registration information associated with setting up your account, which includes an email address and password. We use your registration information to set up your account and to allow you to backup and restore your activity information.
Marketing Information
When you use the Services, we collect your email address so that we can deliver offers and promotions that may be of interest to you. We may use personal data to market our products and services, which include sending you information about HackHer app updates and features, our newsletter, and discounts. We may combine your data with data we receive from our advertising partners to send you personalized marketing communications based on criteria, including your interactions with our content, items you view in the app, or information you give us about yourself in your profile. We do not and will not share your data with our advertising partners.
Technology Information
When you use our Services, we collect and store certain information using technologies such as device identifiers, pixels, and cookies. These technologies track information about you and enable us to (i) remember you when using your computer or device so that we can personalize your user journey and (ii) advertise our Services to you and other relevant audiences.
When your App is paired
We do not share your personal data with your partner but provide you with the ability to initiate this sharing. When you pair your instance of the App with your partner’s instance of the App, you will be exercising your control to share your name and information with your partner. While your App is paired, all your answers and provided information will be available for your partner to view until you choose to end the pairing or by deleting your account.
We may share your information in the following circumstances:
We do not sell your personal information to third parties.
Depending on your location, you may have the following rights:
To exercise these rights, please contact us at privacy@hackherapp.ai
Your personal data won’t be kept longer than is reasonably necessary, giving due regard to: the initial purpose of collection; the age of the data; any legal/regulatory reason for us to keep it; and whether needed to protect you or us. We may retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically reasonably feasible to remove it. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of personal data, potential risk of harm from unauthorized use or disclosure, and the purposes for which we process and whether we can achieve these purposes by other means in addition to the applicable legal and regulatory requirements.
Continual Beauty, Inc., will employ the following technical measures to ensure the security of any personal data that is processed:
Continual Beauty, Inc. has physical, electronic, and procedural safeguards that comply with regulations to protect personal information about you. However, data transmissions over the Internet cannot be guaranteed to be 100% secure. Consequently, Continual Beauty, Inc. cannot ensure or warrant the security of information you provide over the internet to us.
Continual Beauty, Inc. limits access to personal information about you to employees who Continual Beauty, Inc. reasonably believes need to come into contact with that information, to provide products or the Service to you, or in order to do their jobs.
Any personal data that is processed must be done on a lawful basis. Continual Beauty, Inc. will only process personal data based on the following lawful bases:
Children’s data
Continual Beauty, Inc. does not knowingly collect Personal Data from children under 18. If you are under the age of 18, do not send any information about yourself to us, including your name, address, telephone numbers, or email address, unless you have your parents’ or guardians’ permission. Should we become aware that we are processing the personal data of any children, we will delete such personal data as soon as possible in accordance with applicable law.
Any requests for parental/ guardian authorization to process personal data for subjects under 18 will be forwarded to our Data Protection Officer (DPO) at privacy@hackherapp.ai.
Advertising
We may partner with third-party ad networks to display advertising on our Website or Services or manage our advertising on other sites. Our ad network partner may use cookies and web beacons to collect non-personally identifiable information about your activities on our Website or Services to provide you with targeted advertising based on your interests.
This section of our Policy contains information required by certain U.S. state data privacy laws. If you reside in California, Colorado, Connecticut, Utah, or Virginia, this section applies to you and supplements the rest of our Policy. Please refer to the state in which you reside to learn more about additional terms and rights that may apply to you.
The California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), requires us to provide California consumers with some additional information regarding how we collect, use, and disclose your personal information, and the rights available to California consumers under the CCPA. The terms used in this section have the same meaning as in the CCPA.
As described above in How we collect and use your personal data, Continual Beauty, Inc may have collected the following categories of “personal information” (as that term is defined by the CCPA) about you through our Services within the last 12 months:
Identifiers, such as your name, email address, and username;
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as your contact information and profile photo;
Commercial information, such as transaction information and purchase history;
Internet or network activity information, such as your browsing history and interactions with our Website;
Geolocation data, such as your approximate location based on your IP address; Audio, electronic, visual, and similar information, such as video content you may have uploaded;
Your account log-in information, i.e., username and password to access your account (if you have a Continual Beauty, Inc account); and Inferences drawn from any of the above personal information to create a summary about you, for example, your preferences and characteristics.
The sources from which we collect personal information are described in this Policy. The business and commercial purposes for which we collect this information, the categories of third parties to whom we disclose this information for a business purpose, and the length of time for which we retain personal information are described above in this Policy.
Sales and Sharing of Personal Information
Continual Beauty, Inc. does not sell personal information as the term “sell” is traditionally understood (i.e., for money). However, like many websites and apps, our Services use cookies and other tracking technologies to provide you with a more personalized experience and advertise our Services to you if you choose to enable such cookies. The use of such cookies which disclose a California resident’s personal information (which includes IP addresses and cookie IDs) to third party service providers and advertisers may be considered a “sale” of personal information under the CCPA (given its broad definition of “sale”), or a “sharing” of personal information under the CCPA (which is defined as the disclosure of personal information for cross-context behavioral advertising).
You may opt out of such cookies at any time by adjusting your cookie choices in our cookie banner or by clicking the “Your Privacy Choices” link in the footer of our Website.
We do not knowingly sell or share the personal information of California residents under 18 years old.
If you are a California resident, you may have the following rights under the CCPA, subject to certain limitations and exceptions under applicable law:
Know and Access: You have the right to request to know and access the following information covering the 12 months preceding your request:
You have the right to receive your personal information in a portable and commonly used format.
Correct: You have the right to request that we correct any of your personal information that we have collected from you that is inaccurate.
Delete: You have the right to request that we delete personal information that we have collected from you.
Opt-Out of Sales and Sharing: You have the right to request that a business not “sell” or “share” your personal information with a third party, as those terms are defined under the CCPA. As described above, Continual Beauty, Inc uses cookies and other tracking technologies to make available certain personal information to third parties to display personalized ads to you. To the extent that such practice constitutes a “sale” or “share” of personal information under the CCPA, you may opt-out of such “sale” or “share” at any time by using our cookie banner to adjust your cookie choices or clicking the “Your Privacy Choices” link to adjust your cookie choices.
Limit the use and disclosure of sensitive personal information: Continual Beauty, Inc may collect certain “sensitive personal information,” as defined by the CCPA, from you if you choose to provide us with sensitive personal information such as your sexual orientation, race or ethnicity. However, Continual Beauty, Inc does not use or disclose such “sensitive personal information,” other than for the purposes described in “How we collect and use your personal data” above, or as otherwise permitted under applicable law. As a result, we do not offer an ability to limit the use and disclosure of sensitive personal information.
Non-Discrimination: You have the right to not be discriminated against for exercising any of your CCPA rights. We shall not discriminate against you for exercising any of your above rights.
You can exercise your right to stop email marketing messages from us at any time by contacting us at privacy@hackherapp.ai
The Colorado Privacy Act (“CPA”) and its implementing regulations define “consumer” as a Colorado resident who is acting in an individual or household context only, and does not include residents acting in a commercial or employment context. If you are a Colorado “consumer”, you may have the following rights concerning your personal data, subject to certain limitations and exceptions under applicable law:
Access: You have the right to request to confirm whether we are processing personal data about you and to access such personal data.
Data Portability: You have the right to obtain your personal data in a portable and readily usable format.
Correction: You have the right to request that we correct inaccuracies in the personal data we have collected about you, taking into account the nature of the personal data and the purposes of processing your personal data.
Deletion: You have the right to request the deletion of your personal data.
Opt-out of Data Processing for purposes of Targeted Advertising; Sales to Third Parties; and Profiling: As described in the section “Sales and Sharing of Personal Information” above, we do not sell personal data to third parties for money, nor the purpose of profiling in connection with decisions that produce legal or similarly significant effects. However, we do process personal data for the purpose of displaying targeted advertisements if you instruct us to do so. You have the right to opt out of the processing of personal data for targeted advertising purposes at any time by changing your cookie choices via our cookie banner or via the ‘Cookie Policy’ link in the footer of our website.
Appeal: You have the right to appeal a refusal to take action on your request. You may ask us to reconsider our decision within 45 days after we send you our decision. We will endeavor to respond to your appeal within 60 days of such an appeal, including a written explanation of the reasons for the decision, and any action taken or not taken in response to the appeal.
The Connecticut Data Privacy Act (“CDPA”) defines “consumer” as an individual who is a resident of Connecticut. If you are a Connecticut “consumer”, you may have the following rights concerning your personal data, subject to certain limitations and exceptions under applicable law:
Access: You have the right to request confirmation of whether we are processing personal data about you and to access such personal data.
Data Portability: You have the right to obtain your personal data in a portable and readily usable format.
Correction: You have the right to request that we correct inaccuracies in your personal data.
Deletion: You have the right to request that the personal data provided by you or obtained about you be deleted.
Opt-out of Data Processing for purposes of Targeted Advertising, Sales to Third Parties, and Profiling: We do not sell personal data to third parties, or process personal data for the purpose of profiling in connection with decisions that produce legal or similarly significant effects. As described in the section “Sales and Sharing of Personal Information” above, we process personal data to display targeted advertisements if you instruct us. You have the right to opt out of processing personal data for targeted advertising purposes at any time by changing your cookie choices via our cookie banner or the ‘Cookie Policy’ link in the footer of our website.
Appeal: You have the right to appeal a refusal to take action on your request. You may ask us to reconsider our decision within 45 days after we send you our decision. We will endeavor to respond to your appeal within 60 days of such an appeal, including a written explanation of the reasons for the decision, and any action taken or not taken in response to the appeal.
The Utah Consumer Privacy Act (“UCPA”) defines a “consumer” as an individual who is a resident of Utah and acts in an individual or household context only. It does not include residents acting in a commercial or employment context. If you are a Utah “consumer”, you may have the following rights concerning your personal data, subject to certain limitations and exceptions under applicable law:
Access: You have the right to request confirmation of whether we are processing personal data about you and to access such personal data.
Data Portability: You have the right to obtain your personal data in a portable and readily usable format.
Deletion: You have the right to request the deletion of the personal data provided by you or obtained about you.
Opt-out of Data Processing for purposes of Targeted Advertising and Sales to Third Parties: We do not sell Personal Information to third parties. As described in the section “Sales and Sharing of Personal Information” above, we do process Personal Information for the purpose of displaying targeted advertisements, if you instruct us to do so. You have the right to opt out of the processing of personal data for targeted advertising purposes at any time by changing your cookie choices via our cookie banner.
The Virginia Consumer Data Protection Act (“VCDPA”) defines “consumer” as a Virginia resident who is acting in an individual or household context only and does not include residents acting in a commercial or employment context. If you are a Virginia “consumer”, you may have the following rights concerning your personal data, subject to certain limitations and exceptions under applicable law:
Access: You have the right to request to confirm whether we are processing personal data about you, and to access such personal data.
Data Portability: You have the right to obtain your personal data in a portable and readily usable format.
Correction: You have the right to request that we correct inaccuracies in your personal data.
Deletion: You have the right to request the deletion of the personal data provided by you or obtained about you.
Opt-out of Data Processing for the purposes of Targeted Advertising; Sales to Third Parties; and Profiling: As described in the section “Sales and Sharing of Personal Information” above, we do not sell personal data to third parties for money, nor for the purpose of profiling in connection with decisions that produce legal or similarly significant effects. However, we do process personal data for the purpose of displaying targeted advertisements if you instruct us to do so. You have the right to opt out of the processing of personal data for targeted advertising purposes at any time by changing your cookie choices via our cookie banner.
Appeal: You have the right to appeal a refusal to take action on your request. You may ask us to reconsider our decision within 45 days after we send you our decision. We will endeavor to respond to your appeal within 60 days of such an appeal, including a written explanation of the reasons for the decision, and any action taken or not taken in response to the appeal.
Making Rights Requests
If you are a resident of one of the above U.S. states and would like to exercise one of the rights described above, please submit your rights request to privacy@hackherapp.ai. To protect the personal data we maintain, we may verify your identity when you make a request.
In certain states (such as California), an authorized agent may submit a rights request on your behalf. We may require an authorized agent to verify their authority to submit a request on your behalf, or we may require you to verify your identity or confirm with us that you provided the agent with permission to submit the request. We will only use the information provided for verification to confirm the requester’s identity or authority to make the request, and for our compliance records.
We endeavor to respond to a verifiable request within forty-five (45) days of receipt. If we require more time, we will inform you of the reason and extension period in writing.
This policy will be reviewed and approved by the DPO at least annually and updated as necessary to align with data protection laws and best practices. Any changes affecting data subject rights, data processing procedures, or data protection processes will be communicated to data subjects and stakeholders through appropriate channels.
