Privacy Policy

Last updated: 9 June 2026

1. Who We Are

Lasha is a product of Studio Hove. When this policy refers to "we", "us" or "our", it means Studio Hove, the company responsible for the Lasha website (lasha.app) and the Lasha iPhone app.

If you have any questions about this policy, contact us at contact@lasha.app.

2. What Data We Collect and Why

We only collect what is necessary. Here is exactly what we collect, and the reason for each:

Waitlist sign-ups

When you submit your email address on our waitlist page, we collect:

• Your email address — so we can notify you when Lasha launches on the App Store. We will only send you that one notification email unless you explicitly opt in to further communication.

Contact form messages

When you use the contact form on our website, we collect:

• Your email address — so we can reply to you.
• Your subject and message — to understand and respond to your enquiry.

The Lasha app (once launched)

The Lasha iPhone app is designed with privacy by default. All client records you create inside the app — including profiles, lash maps, session photos, notes and signed consent forms — are stored exclusively in your personal iCloud account via Apple CloudKit. Studio Hove has no access to this data and it never passes through our servers.

3. How We Use Your Data

• Waitlist email addresses are used solely to send you a single launch notification.
• Contact form data is used solely to respond to your message.
• We do not use any of this data for advertising, profiling or any other purpose.
• We will never sell, rent or trade your personal data to third parties.

4. Third-Party Services We Use

We use a small number of third-party services to operate this website. Each has access only to the data necessary to perform their function:

• Formspree (privacy policy) — processes form submissions from our waitlist and contact forms. Your submitted data is transmitted to Formspree's servers and then forwarded to us by email. Formspree is based in the United States.
• Google Fonts (privacy policy) — serves the Inter typeface used on this site. Your browser may send a request to Google's servers when loading this font, which may include your IP address.
• Cloudflare (privacy policy) — hosts and delivers this website. Cloudflare may process standard server-level data (IP address, browser type, request timestamps) to deliver pages securely and efficiently.
• Apple CloudKit — the Lasha app stores your client data in your own iCloud account. Apple's privacy policy governs that relationship, not ours.

We do not use any advertising, tracking or analytics services.

5. Cookies and Tracking

We do not use cookies on this website beyond what may be set by Formspree or Cloudflare as part of their technical operation (for example, security or caching cookies). We do not place any tracking or analytics cookies ourselves and we do not use third-party advertising cookies.

6. Data Retention

We retain waitlist email addresses until Lasha launches and the launch notification is sent, or until you ask us to remove your address — whichever comes first. Contact form messages are retained for as long as needed to respond to and resolve your enquiry, and then deleted.

7. CASL — Waitlist Emails

By submitting your email address on our waitlist page, you expressly consent to receiving a single commercial electronic message notifying you when Lasha launches, in accordance with Canada's Anti-Spam Legislation (CASL). Every email we send will include a clear and easy way to withdraw your consent. We will honour all unsubscribe requests promptly and without charge.

8. Your Rights (PIPEDA)

Studio Hove complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable laws of Ontario. You have the right to:

• Know what personal information we hold about you and how it is used.
• Access the personal information we hold about you.
• Request that we correct inaccurate or incomplete information.
• Withdraw your consent at any time (for example, to be removed from the waitlist), subject to legal or contractual restrictions.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, email us at contact@lasha.app. We will respond within 30 days.

9. Children's Privacy

This website and the Lasha app are intended for professional use by adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as the product evolves or as legal requirements change. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to waitlist subscribers by email.

11. Contact

Privacy questions or requests: contact@lasha.app