Privacy Policy

Last Updated: May 26, 2026

At Toolups LLC ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our website and our mobile applications, including Frizzy (hair analysis) and MessyCal (calendar event extraction).

1. Information We Collect

A. Hair Analysis Data (Frizzy)

When you use Frizzy, we collect:

  • Hair photos you take or upload for analysis.
  • Survey answers you provide about your hair type, concerns, and preferences.
  • Product save events — when you tap the heart on a recommended product, we log an anonymous record (analysis ID and product reference) so we can understand which recommendations are most useful. No personal information is attached.

These are sent to our secure servers at toolups.com and processed using third-party AI services (see Section 5) to provide hair characteristics and personalized product recommendations. We do not store your photos permanently or share them with advertisers.

B. Calendar Data (MessyCal)

When you use MessyCal — on the web at toolups.com/tools/messy-cal or in the mobile app — we process the content you submit to extract calendar events. The content can be:

  • Text you paste or type (e.g. an email, meeting agenda, or notes).
  • Images you take with the camera or pick from your photo library (e.g. flyers, schedules, screenshots).
  • URLs you paste, which we fetch on the server to read the page contents.
  • Custom instructions you optionally provide to guide extraction.

This content is sent to our servers at toolups.com and processed in-memory by third-party AI services (see Section 5) to identify event names, dates, times, locations, and notes. The original text and images are not stored after the request completes; only the extracted event JSON is kept for the duration needed to render and download your results. Request identifiers are retained in our server logs for up to 30 days for debugging.

The MessyCal mobile app generates an anonymous device identifier (a UUID stored locally on your device) on first launch. This identifier is sent as the X-Device-Id header on each extraction request so we can rate-limit per device (currently 50 extractions/hour) without requiring you to create an account. It is not derived from any Apple identifier, is not used for advertising or cross-app tracking, and is reset whenever you delete the app.

C. Technical Data

We may collect basic technical information such as IP addresses, browser types, and device identifiers to improve our services and ensure security.

2. How We Use Your Information

  • To provide AI-powered hair analysis and personalized product recommendations (Frizzy).
  • To extract calendar events from the text, images, and URLs you submit (MessyCal).
  • To improve our analysis accuracy and service quality.
  • To enforce per-device rate limits and ensure the security and integrity of our platform.
  • To comply with legal obligations.

3. Data Retention & Security

We implement industry-standard security measures to protect your data.

  • Frizzy: photos uploaded for analysis are processed on our servers and are not retained after analysis is complete. Survey answers are stored only for the duration of the analysis session.
  • MessyCal: text, images, and URL contents you submit are processed in-memory and are not stored after the extraction completes. The extracted event JSON is retained only for the duration needed to render and download your results. Request identifiers and minimal metadata (provider used, event count) are kept in server logs for up to 30 days for debugging.

We do not sell your personal data, photos, or extracted content to third parties.

4. Analytics

To understand how features are used and where users encounter friction, the Frizzy mobile app records anonymous product analytics events (such as opening the survey, viewing recommendations, saving a product, or tapping a product link) via PostHog. Events are tied to an anonymous device identifier (Apple's IDFV) that resets when the app is uninstalled. We do not collect names, email addresses, hair photos, or any other personally identifying information through analytics. Data is processed in PostHog's US region under PostHog's Privacy Policy.

MessyCal v1.0 does not collect product analytics or crash reports. If we enable telemetry in a future release, we will update this Privacy Policy and the App Privacy disclosure in App Store Connect prior to the release.

5. Third-Party AI Services

Frizzy

To perform hair analysis and generate product recommendations, your hair photos and survey answers are shared with:

MessyCal

To extract calendar events from the text, images, and URL contents you submit, the data is shared with:

  • OpenAI — the sole AI provider used by MessyCal. Submitted text and image contents are sent to OpenAI's API for event extraction. Data is processed under OpenAI’s Privacy Policy. We use OpenAI's API offering, which (per OpenAI's policy at the time of this update) does not use API submissions to train OpenAI's models.

Your data is shared with these providers solely for the purpose of performing the requested analysis or extraction. These providers process the data in accordance with their respective privacy policies and do not use it for advertising. We do not authorize any third-party provider to retain your photos, text, or personal data beyond what is necessary to complete the request.

We have reviewed the privacy practices of these AI providers and confirm they offer protection for your data that is substantially equivalent to the protections described in this Privacy Policy — they receive your data solely to fulfill the request, do not use it for advertising, do not train their general-purpose models on it via API submissions, and do not retain it beyond what is necessary to complete the request.

6. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete your information. To exercise these rights, please contact us.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@toolups.com.

Return to Home