Your information.
Your choice.

About Time is testing a hair-loss treatment membership for US adults. This notice covers the current early-access list and private journal. Clinical care, prescriptions and dispensing are not available through this preview.

What you choose to save

Your account stores your name and email, intake, routines, check-ins, notes, questions and photos. These are saved on the service so you can sign in again on another device. Account details and journal content are encrypted in storage. The service decrypts them to show them to you after sign-in. This is not end-to-end encryption. Passwords, account recovery codes and MFA backup codes are stored as hashes. Authenticator setup secrets are encrypted in storage.

Uploaded photos are resized, converted to JPEG and stripped of camera and location metadata. They are served through authenticated private routes. Photos are not analyzed, used to diagnose, or reviewed by a clinician.

Why we use this information

We use account and journal information to provide the storage, sign-in, organization, export and deletion features you request. Survey information helps us measure demand and, if you separately opt in, contact you about About Time. We do not sell your journal or use it for targeted advertising. Service operators and infrastructure providers may process data as needed to run and secure the service; private account access is not a promise that no administrator can access data.

Educational guidance

Your questions can show matching published guides. They are not sent to an AI provider or clinician. Links to independent sources open their websites, where those sites’ privacy policies apply.

Email verification and two-step sign-in

We send a short-lived verification code to prove access to your email before opening your journal. Resend processes the recipient address and verification message to deliver it; the message contains no intake, journal or photo content. Unfinished verification requests expire after 10 minutes and are removed as new requests arrive. You can enable an authenticator app and save single-use MFA backup codes in account settings.

Before you create an account

The short intake saves in this browser until you choose to save your story inside your account. Anyone using the same browser profile may see that draft. Clearing browser storage removes it. Signing out or deleting your account clears the intake draft in that browser. Saving your story to your account also removes that local draft. You can clear it at any time using the controls below.

How we measure interest

On public marketing and price-survey pages, first-party measurement is on unless you turn it off. It uses a random browser identifier and neutral campaign codes. It records which marketing pages you open, whether you start or finish intake, whether you start or submit the interest form, and which allowlisted ad or traffic source brought you here. It does not include intake answers, journal entries or photos. The identifier can link a price-survey registration to this activity. You can turn it off and erase activity below. Member and account pages do not record these marketing events. We separately record the UTC days on which an account opens its journal, for up to 90 days, to count active and returning accounts. These records are deleted with the account. We use no advertising pixels or third-party analytics, and we do not send this activity to Meta or other advertisers.

If you submit the price survey, we separately store your email, the price shown, optional updates preference and submission date. This does not create a paid subscription. Activity and attribution records expire after 90 days as new activity arrives. Survey registrations remain until removed. Unlike encrypted member journals, the separate survey stores email and interest details in a database without application-level encryption. Account and journal records remain until you delete them. Server sessions expire after seven days. We use temporary hashed connection and sign-in attempt identifiers to limit abuse.

Export and deletion

In journal settings, download your structured journal or delete your account. Individual photos have their own download and delete controls. Account deletion removes your account, entries, photos and sessions from the active service. It does not remove a separate price-survey registration. Encrypted recovery snapshots are kept separately from the hosting service for up to 30 days and expire during successful backup runs. Deleted information can remain in these snapshots until they expire. Hosting infrastructure may also retain operational backups under its own retention settings. A restore requires reapplying deletions made after that snapshot.

The controls below clear browser drafts and marketing activity. A separate secure receipt lets this browser remove a price-survey registration made here. That control requires the original receipt and cannot recover a registration after cookies are cleared.

Account recovery

Save your recovery code privately. It lets you reset your password and ends existing sessions. If two-step verification is enabled, recovery also requires a current authenticator code or an unused MFA backup code. About Time does not send password-reset emails. Losing both your password and recovery code can mean losing access to your journal.

Privacy contact for About Time: abouttimeprivacy@gmail.com. Please do not email passwords, recovery codes or medical photos. Messages to this address are handled through Gmail, operated by Google.