Privacy Policy
How Nailly handles personal data across accounts, studio profiles, portfolios, bookings, saved designs and reviews.
Data we process
Nailly may process account information such as name, email address, role and profile photo; optional profile information such as city and bio; studio information such as business name, address, phone and description; portfolio images; saved designs; appointment data; ratings and reviews; and technical information needed to operate and secure the service.
Photos and visual search
Photos published as portfolio content are stored so they can be displayed to users. If visual search is enabled, an inspiration image selected for visual search may be sent to the configured matching service to calculate similarity results. Nailly does not intend to use that image for unrelated purposes.
Why we use data
Data is used to create and secure accounts, provide profiles and studio pages, display portfolio content, save favourites, manage appointment requests, enable mutual ratings, provide visual search when configured, prevent abuse, troubleshoot the service and comply with applicable legal obligations.
Service providers
Nailly currently uses Supabase for authentication, database and file storage. Apple and Google may process information when the app is distributed through their stores. Additional infrastructure or visual-search providers will be disclosed when they process personal data in production.
Retention
Account data is retained while the account is active and may be retained for a limited additional period where necessary for security, dispute handling or legal obligations. When an account is deleted, associated account data and user-generated content are intended to be deleted unless retention is legally required.
Your choices and rights
You can update profile information and profile photos in the app and initiate account deletion from the Legal & Privacy area. Depending on applicable law, you may also have rights of access, correction, deletion, restriction, portability and objection.
Controller and privacy contact
The production version of this notice will identify the legal operator/data controller and a working privacy contact before public store submission.