Privacy Policy

Last Updated: November 2, 2025

Welcome to Nailify! This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application. By using Nailify, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide to Us

• Photos: When you use our nail analysis and try-on features, you provide photos of your nails and hands. These photos are processed by our AI systems and stored in our secure cloud database (Firebase Firestore).
• User Account Information: We use Firebase Anonymous Authentication to create a unique identifier for you. No email, name, or personal details are required to use Nailify.

1.2 Information We Collect Automatically

• Usage Analytics: We collect anonymous usage data through Firebase Analytics, including app opens, feature usage, screen views, and interaction patterns to improve our services.
• Device Information: We collect device type, operating system version, app version, and device identifiers for troubleshooting and analytics purposes.
• Performance Data: Firebase Performance Monitoring collects data about app performance, load times, and network requests to help us optimize the app.
• Crash Reports: Firebase Crashlytics automatically collects crash reports and diagnostic information when the app experiences technical issues.
• Push Notification Tokens: If you enable notifications, we collect your device token to send you streak reminders and app updates.
• Streak Data: We store your login streak information locally on your device using SwiftData.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide Core Services: Process your photos through AI to analyze nail health and apply virtual nail designs.
• Store Your Photos: Save your nail photos securely in Firebase Firestore so you can access your history.
• Improve Our Services: Analyze usage patterns to enhance features and user experience.
• Send Notifications: Deliver streak reminders and important app updates (only if you opt-in).
• Technical Support: Diagnose and fix technical issues using crash reports and performance data.
• App Security: Use Firebase App Check to verify legitimate app requests and prevent abuse.
• Payment Processing: Process subscription payments through Superwall and Apple's In-App Purchase system (when applicable).

3. Third-Party Services

Nailify uses the following third-party services that may collect information:

3.1 Firebase (Google)

• Firebase Authentication: Anonymous user authentication
• Cloud Firestore: Secure storage of your photos and data
• Firebase Analytics: App usage analytics
• Firebase Crashlytics: Crash reporting and diagnostics
• Firebase Performance: App performance monitoring
• Firebase Cloud Messaging: Push notifications
• Firebase Remote Config: Dynamic app configuration
• Firebase App Check: Security and abuse prevention

Firebase Privacy Policy: https://firebase.google.com/support/privacy

3.2 OpenRouter

We use OpenRouter's AI models (GPT-4.1 Mini) to analyze nail health from your photos. Your photos are sent to OpenRouter's servers for processing but are not stored permanently by OpenRouter.

OpenRouter Privacy Policy: https://openrouter.ai/privacy

3.3 fal.ai

We use fal.ai's Seedream AI service to apply virtual nail designs to your photos. Your photos are processed through their API but are not retained after processing.

fal.ai Privacy Policy: https://fal.ai/privacy

3.4 Superwall

We use Superwall for subscription and payment management. Payment information is processed securely through Apple's In-App Purchase system. Superwall stores subscription status and user entitlements.

Superwall Privacy Policy: https://superwall.com/legal/privacy-policy

4. Data Storage and Security

4.1 Where We Store Your Data

• Cloud Storage: Your photos and analysis results are stored in Firebase Firestore (Google Cloud infrastructure) with encryption at rest and in transit.
• Local Storage: Streak data and app preferences are stored locally on your device using SwiftData.

4.2 Security Measures

• All data transmitted between your device and our servers is encrypted using industry-standard HTTPS/TLS protocols.
• We use Firebase App Check to verify that API requests come from legitimate instances of our app.
• Anonymous authentication ensures no personal identifiers are required.
• We implement rate limiting to prevent abuse and unauthorized access.

4.3 Data Retention

• Your photos remain stored in Firestore until you delete them from the app or delete your account.
• Analytics and crash data are retained according to Firebase's retention policies (typically 60 days for raw data).
• You can delete individual photos or all your data at any time from within the app.

5. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: You can view all your stored photos within the app.
• Deletion: You can delete individual photos or all your data from the app settings.
• Opt-Out of Analytics: You can disable analytics tracking in your device settings.
• Notification Control: You can enable or disable push notifications in your device settings.
• Data Portability: Contact us to request a copy of your data in a portable format.

6. Children's Privacy

Nailify is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

7. International Data Transfers

Your data may be processed and stored on servers located in various countries where Firebase, OpenRouter, fal.ai, and Superwall operate. By using Nailify, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (Note: We do not sell your personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information below.

9. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top
• Sending an in-app notification for significant changes

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

11. Third-Party Links

Nailify may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

12. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. Our app does not currently respond to DNT signals due to the lack of industry-wide standards for interpreting DNT signals.

14. Legal Basis for Processing (GDPR)

For EEA users, our legal bases for processing your personal data are:

• Consent: When you provide photos for AI analysis
• Contract: To provide the services you requested (nail analysis, try-on features)
• Legitimate Interest: To improve our app, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws and regulations

15. Your Consent

By using Nailify, you consent to our Privacy Policy and agree to its terms.