Last updated 13 September 2026
Coil is a curly hair routine app for men and women. This page explains what the app collects, why it collects it, and what you can do about it. It is written to be read, not to be survived.
Coil is built and operated by Sanjiv Gautam. You can reach a human at [email protected].
Your account. When you sign in with Apple, Coil receives an Apple user identifier, plus your name and email address if you choose to share them. If you use Apple's Hide My Email, the relay address is all we ever see.
Your hair profile. The answers you give during onboarding: curl pattern, porosity, density, length, scalp type, how often you wash, how often you trim, and any treatments or habits you select.
Your check-ins. The date, your frizz, definition and dryness ratings, an overall quality rating, which routine steps you completed, which products you used, and any note you write.
Your photos. Selfies you attach to a check-in, and photos of product labels you scan.
Your products. Products you add or scan, and the compatibility score Coil works out for them.
Reminders. If you turn notifications on, a push token and a device identifier, so the reminder can reach the right phone.
Your subscription. Whether Coil Pro is active, and your purchase history, handled by Apple and RevenueCat.
Your advertising identifier. Only if you allow it when iOS asks. See the advertising section below, which explains what it is used for and how to say no.
No location. No contacts. Nothing from Apple Health. Coil does not read your browsing history, your search history, or what you do in other apps.
Coil runs ads on Meta, which is Facebook and Instagram. To know whether those ads are worth running, the app tells Meta when a small number of things happen: that Coil was installed, that an account was created, that onboarding was finished, that the paywall was reached, and that a trial or a subscription started, with the amount and currency of the purchase.
Those events carry a device identifier so Meta can match them back to an ad you saw. On iPhone that identifier is Apple's advertising identifier, and Coil may only use it if you agree when iOS asks you, in the app, the first time you open it. If you decline, the events are still sent so we can count them, but without the identifier, and Meta falls back to Apple's aggregated measurement, which does not identify you.
This counts as tracking in the sense Apple means it. That is why the app asks first, and why the App Store listing now says Coil tracks.
Turning it off, at any time. Settings, then Privacy and Security, then Tracking, and switch Coil off. Turning off Allow Apps to Request to Track in the same place stops every app from asking. Declining costs you nothing: every feature of Coil works exactly the same either way.