Privacy Policy
Last updated: September 16, 2026
This policy covers both polymorphbeauty.com and the Polymorph Beauty mobile app for iOS. Where the two behave differently, that's called out: the website uses analytics cookies, and the app records a few events only when a signed-in shopper uses Ask Ellee.
The Short Version
- We don't sell your personal information.
- Your account, orders, and payments are handled by Shopify, our ecommerce provider.
- We never see your card details. Payment happens on Shopify's own secure checkout.
- The website uses Google Analytics to understand how people find and use it, and Klaviyo to record on-site activity for visitors it can tie to an email address. In the mobile app, the only analytics are a few events recorded when a signed-in shopper uses Ask Ellee, and the app contains no advertising software.
Browsing Without an Account
You can browse the full catalog on either the website or the app without signing in or giving us anything. Retail pricing shows by default; professional pricing requires an account, because it depends on your account's trade status.
If You Create an Account or Sign In
Accounts are Shopify accounts, and you sign in through Shopify's own login screen. We never see or store your password.
Once you're signed in, we receive from Shopify your name and email address, your order history, and your account tags — the tags are how Shopify records professional or wholesale eligibility, and they're what tell the site and app which pricing to show you.
Your login session is stored on your own device: in your browser's local storage on the website, and in the device's secure keychain (iOS Keychain) in the app. Signing out removes it.
Cart, Checkout and Payment
Your cart lives in Shopify. Your device stores only a cart identifier so we can find that cart again.
When you check out you're handed to Shopify's hosted checkout, where you enter your shipping and payment details directly with Shopify and its payment processors. Card numbers are never sent to us and never stored by us. If you pay with Shop Pay, that step happens on shop.app, which is operated by Shopify.
For signed-in orders placed in the app, the app sends your cart identifier and your Shopify session to our checkout service so it can confirm with Shopify who you are and apply the professional or wholesale pricing you qualify for. That service keeps no database and retains no record of the request once it completes.
Cookies and Analytics (Website)
The website uses Google Analytics 4 to understand how visitors find and move through it. This sets a cookie (_ga) that gives your browser a random identifier. We use it to see which pages and products get attention and where our visitors come from — not to identify you personally.
Analytics records page views and shopping actions such as viewing a product, adding to cart, and starting checkout. Completed purchases are reported from Shopify's own checkout.
Shopify also sets its own cookies necessary to keep your cart and session working.
The website also loads Klaviyo, our email provider. Its script sets a cookie (__kla_id) holding a random identifier for every visitor, and Klaviyo keeps nothing about a visitor it can't identify. Once your browser is tied to your email address, which happens when you sign in, click one of our emails, or submit a Klaviyo sign-up form, Klaviyo records your on-site activity against your profile: your visits, the products you view, the items you add to your bag, and your use of Ask Ellee (that you engaged with Ellee, any products Ellee recommended, and whether you subscribed through Ellee). Activity from earlier in the same visit is added at that point. We use it to send relevant email, such as a reminder about items left in your bag. Blocking cookies in your browser also stops this tracking.
You can block or delete cookies in your browser settings, or install Google's Analytics Opt-out Browser Add-on. Blocking analytics cookies doesn't affect your ability to shop or check out.
The mobile app itself sets no cookies, and uses no third-party advertising, attribution, or crash-reporting software. Checkout, sign-in, and order status open Shopify's own pages inside the app, and those pages use Shopify's cookies to keep your cart and session working. The app does not use your device's advertising identifier and does not track you across other apps or websites. Its only analytics are first-party events from the Ask Ellee assistant: when a signed-in shopper uses Ask Ellee, the app records that they engaged with Ellee, any products Ellee recommended (a product link and how many), and whether they subscribed to our emails through Ellee. These events are tied to the account's email address and sent to Klaviyo. Guests send no analytics events.
You can turn these app events off. Open Account and switch off "Allow app analytics". With it off, the app sends no analytics events at all. It is on by default, and the app is available only in the United States.
App-Only: Notifications and Saved Items
Notifications. If you allow them, the app sends a push notification token, your device type, the app's language, and whether you've turned on promotional notifications to our notification service, linked to your signed-in account's email address, so order and shipping updates reach the right device in the right language. You can turn notifications off at any time in your device settings, and the rest of the app keeps working.
Saved items. Items you save in the app are stored only on that device. They're never uploaded, don't sync between devices, and are lost if you delete the app.
Marketing preferences. The app's Account screen has Marketing preferences, where you can opt in to promotional notifications and to marketing email. Both are off unless you turn them on, and order and shipping notifications are separate and are not marketing. Turning on email offers records your consent in Shopify, which Klaviyo, our email provider, receives. You can turn either off in the same place at any time, and every marketing email has an unsubscribe link.
Ask Ellee
Our assistant, available on the site and in the app, sends what you type to the service that generates the reply so it can answer you. Please don't enter payment details or sensitive personal information into the chat.
Ask Ellee offers an optional voice button on the website. It uses your browser's built-in speech recognition, so your spoken audio is processed by your browser's maker (for example Google in Chrome or Apple in Safari) to turn it into text. We never receive or store the audio. Only the resulting text is sent to Ellee, and you can always type instead.
Ask Ellee in the app has an optional microphone button. Tapping it asks for microphone and speech recognition permission. Apple's speech recognition turns what you say into text, so the audio may be sent to Apple for processing, where it is handled under Apple's privacy policy. Polymorph Beauty never receives or stores the audio. Only the text appears in the message box, where you review it before sending, and you can always type instead.
Student Sign-Up
If you join our student list, for example from a QR code at a school demo, we ask for your email address and the month you finish your program, and optionally your first name and school. If you arrive from a school demo, we also record the school and demo date the QR code carries. We add these details to your profile on our email list so we can send student offers and reach you around graduation. You can unsubscribe at any time.
Text Messages (SMS)
We use text messaging for internal operational alerts only, such as telling our own team when a product has sold out. We do not run a marketing SMS program and we do not text customers.
We never sell, rent, or share mobile numbers or SMS consent with anyone for marketing purposes. A number given to us for text messages is used only to send the messages that were asked for, and is shared only with Twilio, the service that delivers them on our behalf.
Message frequency varies with the events being reported, and is typically fewer than five messages per week. Message and data rates may apply. Reply STOP to any message to stop receiving them, or HELP for help.
Who Your Information Goes To
- Shopify — accounts, carts, orders, and the payment details you enter at checkout. Runs our store and payment processing.
- Twilio delivers our text messages.
- Google Analytics — website usage data, tied to a random cookie identifier rather than your name.
- Klaviyo — our email marketing; on-site activity for website visitors identified by email address; and the Ask Ellee analytics events on the website and in the app.
- Cloudflare — hosts our checkout, notification, and assistant services.
- Expo and Apple — deliver push notifications to your device.
Each handles data under its own privacy policy. We don't share your information with anyone else, and we don't share it for advertising.
How Long We Keep Things
Account, order, and payment records are held by Shopify under its retention practices and our obligations as a merchant. Notification pairings last while you have notifications switched on. Analytics data expires on Google Analytics' own schedule. Anything stored on your device — login session, cart identifier, saved items — goes when you sign out, clear your browser data, or delete the app.
Your Choices and Rights
You can turn notifications off in device settings, sign out to clear your session, block cookies in your browser, or delete the app to remove everything held locally.
Depending on where you live, you may also have the right to access, correct, delete, or receive a copy of your personal information, and to object to certain uses of it. Email us at info@polymorphbeauty.com and we'll action it with Shopify. We won't treat you differently for exercising these rights.
Children
Our products and training are intended for professionals and adult retail customers. We don't knowingly collect information from children under 13.
Changes
If this policy changes in a meaningful way we'll update the date at the top and, where it matters, tell you directly.
Questions about your information, or want a copy of what we hold? Contact us at info@polymorphbeauty.com or (775) 420-4459.
Polymorph Beauty
3095 Heatheridge Lane
Reno, NV 89509