Waitlist sign-in is temporarily unavailable. Please try again shortly. There is no password field because this site uses email codes or Google to verify an address.
Join the waitlist for free. Early Adopter is an optional reservation. Pro is planned for when the app is ready.
Stay close as Scalp Map takes shape.
Your place on the waitlist is free.
Join the free waitlistIncluded now
Reserve your first 14 days of Pro.
Optional reservation. No Pro subscription starts today.
Join to view the offerIncluded
The app subscription we are building.
Starts with a 7-day free trial. Cancel at any time.
Get the launch noticeIncluded
Final Pro features are not set. No app subscription is available yet.
Last updated 12 October 2026
The free waitlist has no charge. The Early Adopter reservation is optional and can be purchased only when checkout is open.
If you make a $4.99 USD Early Adopter payment, you may request a full refund at any time before your first 14 days of Pro begin, which happens when the app becomes available to you. Once those 14 days begin, the payment is not refundable. You are also entitled to a full refund if the app has not launched within 180 days of payment.
Request a refund from your signed-in profile or email [email protected]. Eligible profile requests enter our automatic refund queue. We also queue a refund if the app has not become available to you within 180 days of payment. Paddle, the seller and payment processor, returns the full amount paid to your original payment method; its approval and your payment provider's processing may take time. Requests that cannot be processed automatically receive review. Your mandatory consumer and statutory withdrawal rights also apply. See the Terms of Service for the offer terms.
Last updated 12 October 2026 · Effective 12 October 2026
This policy covers scalpmap.app, its waitlist, member area and optional Google sign-in. The Scalp Map app is in development and does not collect information through this website.
Ashfaque Ahmed Nur and Imtiaz Ahmed jointly operate Scalp Map from West Palashi, Dhaka - 1205, Bangladesh. Contact us about privacy at [email protected].
Email signup checks whether the address domain accepts mail and uses a hidden field and submission timing to limit automated signups. We do not collect scalp photographs through this site.
We use your waitlist details to verify and manage your entry, check geographic eligibility, plan launch markets, and send one launch email. We use onboarding answers to plan the app, with your separate choice to save them. We use access and security details to sign you in and protect the service.
Where a legal basis is required, we rely on your consent for the launch email and saved onboarding answers, our legitimate interests for security and service operation, and steps you request to provide waitlist access. You may withdraw consent at any time. We do not sell personal information, use it for targeted advertising, or make automated decisions about your eligibility or price.
We use reservation and refund records to fulfill your purchase and refund requests. We check reservation dates to queue eligible refunds automatically. You can contact support to request review of a refund decision.
Supabase hosts our database, authentication and server functions; Resend delivers email; GitHub Pages hosts the site; Cloudflare provides domain and connection services; and Google handles optional sign-in. Opening the pricing page may connect your browser to Paddle to show a local price. If you reserve Early Adopter, Paddle receives your email and payment details to process the purchase, receipt and any refund. Each provider receives information needed for its role, including ordinary connection data where your browser contacts it. We may disclose information when legally required. We do not share onboarding answers with Paddle, advertisers, insurers, employers or data brokers.
Our Supabase project is hosted in Singapore. We operate from Bangladesh, and service providers may process information in other countries. Applicable law may give you information and rights concerning international transfers; contact us for details of the safeguards relevant to your information.
We keep waitlist entries and saved answers while we operate the waitlist, unless you delete them sooner. An email signup creates an unverified database entry; it is not eligible for the launch email until verified and has no automatic deletion date. Verification codes work for 30 minutes, entry access codes for 15 minutes, and browser sessions for up to 30 days. An hourly cleanup removes IP hashes older than 24 hours. Expired codes may remain in a record until cleared by a later action or deletion.
Deleting your entry removes its live waitlist, onboarding and linked session records and requests removal of its linked Google Auth identity. If you stop during Google sign-in before joining, contact us to remove any Auth record. Provider backups may retain deleted information until they rotate out. We use encrypted connections, server access controls, expiring codes and rate limits to protect information.
Use the link in a Scalp Map email or your entry view to unsubscribe or request deletion. You can also ask to access, correct, receive a copy of, or delete your information; withdraw consent; or exercise other rights available where you live. Email [email protected]. We may need to verify your identity. You may complain to a relevant privacy authority.
The waitlist is for people aged 16 or older. If the law where you live requires parental or guardian permission, you must have it before joining. Contact us if you believe someone below that age has provided information and we will delete the entry.
See the Consumer Health Data Privacy Policy for details about hair and scalp answers and the Cookies and Browser Storage Notice for browser storage and external requests.
We will update this policy before collecting new categories of information or using information for new purposes. If a material change affects waitlist members, we will notify them before it takes effect.
Last updated 12 October 2026 · Effective 12 October 2026
These terms govern scalpmap.app, the free waitlist and its member area. The Scalp Map app is in development and will have its own terms before use.
Ashfaque Ahmed Nur and Imtiaz Ahmed jointly operate Scalp Map from West Palashi, Dhaka - 1205, Bangladesh. By using this site or joining the waitlist, you agree to these terms and the Acceptable Use Policy. See our Privacy Policy for data practices.
Joining is free. You must use an email address you control, be at least 16, and have parental or guardian permission if local law requires it. We verify your address and plan to send one email when the app opens. A waitlist entry does not guarantee a launch date, place or feature.
When a trial or your Early Adopter 14 days end, Pro continues only if you choose a Pro plan. You can export or delete your photos at any time.
You can unsubscribe or request deletion through a link in our email or your member area, or contact [email protected]. A signed-in browser may retain access for up to 30 days; log out on shared devices.
When checkout is open, the optional Early Adopter reservation has a base price of $4.99 USD, with the local price and any applicable tax shown before payment. It pays for your first 14 days of Pro, with everything included in Pro, which begin when the app becomes available to you. You may request a full refund at any time before those 14 days begin; once they begin, the payment is not refundable. No Pro subscription or subscription charge starts automatically: when the 14 days end, you choose one of the Pro plans to continue.
Pro is planned at $33.99 every three months, starting with a 7-day free trial, or $9.99 every 14 days, the same for everyone. Both plans renew until you cancel, and you can cancel either at any time; if you cancel the three-month plan during its trial, you are not charged. Final app features and launch timing may change.
Our Refund Policy gives the full refund conditions. Paddle sells and processes any reservation, issues the receipt and handles refunds. We do not receive card numbers. Applicable Paddle buyer terms and mandatory consumer rights also apply.
Site content is general information, not a diagnosis or medical advice. Do not use it to start, stop or change treatment. Consult a qualified health professional about medical concerns.
Do not misuse, attack, overload, scrape or interfere with the site, evade its security controls, or submit an address you do not control. We may suspend access or remove an entry to protect the service, comply with law or address a breach. The Scalp Map name, logo, text and design belong to us or their licensors. You may link to the site but may not republish its content as your own.
We may change, pause or discontinue the site or waitlist. To the extent law permits, we do not guarantee uninterrupted or error-free service and are not liable for indirect or consequential loss arising from this site. Nothing here limits liability that cannot legally be limited or your mandatory consumer rights.
We may update these terms. We will notify waitlist members before a material change affecting them takes effect. Bangladesh law governs these terms, subject to mandatory rights under the law where you live. Courts in Bangladesh have jurisdiction unless applicable consumer law provides otherwise.
Contact [email protected] or write to West Palashi, Dhaka - 1205, Bangladesh. For privacy requests, use [email protected].
Opening your choices…
Everything we publish about how this site treats you and your data
These documents are current as of 12 October 2026 and describe the live website and waitlist.
Scalp Map is run by Ashfaque Ahmed Nur and Imtiaz Ahmed, two individuals rather than a company.
Last updated 10 October 2026
Use the link in a Scalp Map email or your member area to unsubscribe or request deletion. You can also email [email protected] from the address you used to join. We may verify your identity before acting.
Unsubscribing stops the launch email but keeps your entry. Deletion removes your live waitlist entry, onboarding answers and linked sessions, and requests removal of a linked Google Auth identity. If a payment obligation is open, the automated deletion route pauses; contact us so we can resolve it and complete your request.
An unverified email signup also creates a database entry. Its deletion link works the same way. If Google sign-in created an Auth record without a completed join, email us to remove it.
An hourly cleanup removes IP address hashes older than 24 hours. Provider backups may retain deleted information until they rotate out. Paddle may retain payment records it must keep under its own legal obligations if you make a reservation.
For access, correction or a copy of your information, email [email protected]. See the Privacy Policy.
Last updated 8 October 2026 · Effective 8 October 2026
This policy forms part of the Terms of Service. It applies to this website and the waitlist.
Do not attempt to gain access to any part of this site, its database or its server-side functions that is not open to you. Do not probe for or exploit weaknesses, interfere with other people's use, or try to overload the site or the systems behind it.
Submit only an email address you control. Adding someone else's address is the one abuse here with a direct victim — they get mail they never asked for, and the verification step exists so that nothing further ever reaches them.
Do not submit the form by script, scrape the site at volume, or try to work around the rate limits. Reading the site as a person, at a person's pace, is always fine.
Do not use the signup, sign-in or verification forms to test whether a particular person has joined. These endpoints are built to answer identically either way; trying to defeat that is a breach of this policy.
If you find a security weakness, please tell us at [email protected] rather than demonstrating it against real data. We would rather hear from you than find out later, and we will not pursue anyone who reports in good faith, acts only against their own entry, and gives us a reasonable chance to fix it before telling anyone else.
We may suspend or remove access, and delete an entry. Where we delete an entry for this reason we will say so to the address on it, unless doing so would itself be abusive.
Questions: [email protected].
Last updated 11 October 2026 · Effective 11 October 2026
This site sets no cookies of its own, and runs no advertising or analytics trackers. Optional Google sign-in and Paddle pricing or checkout may use provider storage. The storage and requests are described below.
If you switch between light and dark mode, we save that choice in your browser's localStorage under the key scalpmap-theme. The value is the word light or dark and nothing else.
It stays on your device, is never sent to us or to anyone else, and cannot identify you. It exists so the site does not forget your choice between visits. Clearing your site data removes it, and the site works normally without it — it simply follows your system setting again.
After you sign in, we save a random token and expiry date in localStorage under scalpmap-session. The token is sent only to our Supabase functions to open your profile or log out. It expires after 30 days. Logging out from your profile removes it from the browser and revokes the corresponding hashed session on our server.
When you close the What happens next steps with Got it, we save the word how in localStorage under scalpmap-viewed, so the card stays marked Viewed on later visits. It holds nothing else, is never sent to us, and logging out removes it.
If you choose Google sign-in, Supabase Auth temporarily keeps its session and PKCE verifier in browser storage under keys beginning scalpmap-google-session. The page also keeps scalpmap-google-intent in session storage to remember whether you were joining or opening an entry through the redirect. The site signs out and clears the intent after the action; a browser closed mid-flow may keep the Auth data until you clear site data or complete a later sign-in.
The two typefaces are served from this site, not from Google Fonts or any other font host. Nothing about loading the type reaches a third party, and your IP address is not disclosed to one.
If you choose Continue with Google, your browser goes to Google and Supabase Auth to verify your account. Google may use its own cookies there; see Google's own privacy information for that step. The Supabase client code is served from this site, not a third-party script host.
Opening the pricing page may load Paddle’s script to show a local price. Opening checkout lets Paddle process the reservation and may allow it to use its own storage for payment processing.
This site is served by GitHub Pages, and its domain is managed by Cloudflare. Where a Cloudflare record is proxied, Cloudflare may set its own bot-management cookie on requests it routes. That is theirs, not ours — we cannot read it and we do not use it.
If we ever add analytics, we will update this notice and the Privacy Policy before switching anything on, and ask for consent where consent is required.
Questions: [email protected].
Last updated 9 October 2026 · Effective 9 October 2026
This notice covers information about hair and scalp concerns collected through the Scalp Map website and waitlist. Ashfaque Ahmed Nur and Imtiaz Ahmed jointly operate the service from West Palashi, Dhaka - 1205, Bangladesh.
Joining a hair and scalp waitlist may reveal an interest in health-related services. We collect your email and approximate country directly through signup and connection data to manage the list and plan launch markets. If you choose to save onboarding answers, we collect your selections and short write-ins about hair or scalp concerns and how long they have lasted, current care and what interrupts it, confidence and what you want your hair to look like in six months. We use those answers to plan the app, not to diagnose you or determine price or access.
This website does not collect scalp photographs. Please leave diagnoses, medication and other medical details out of write-ins. If you include them, they remain in your answer until you ask us to remove it or delete your entry.
Supabase stores waitlist and answer data. Resend receives the email address needed to deliver verification and launch messages. Google receives account information if you choose its sign-in; Cloudflare and GitHub Pages receive ordinary connection data when you visit. We do not send onboarding answers to Paddle, advertisers, insurers, employers or data brokers, and we do not sell consumer health data.
We keep saved answers with your waitlist entry while we operate the waitlist, unless you delete the answers or entry sooner. Provider backups may retain deleted information until they rotate out. See the Privacy Policy for other retention details.
You may ask what consumer health data we hold, receive a copy, correct or delete it, or withdraw consent. Use your entry’s deletion link or email [email protected] to remove answers while keeping your waitlist place. If we deny a request, you may appeal by replying to our decision. You may also contact the authority responsible for consumer health data rights where you live.
We will update this notice and obtain any required consent before collecting additional categories of consumer health data or using it for new purposes.
