1. Who operates Naild?
Naild is operated by Kristóf Jakab, a private individual in Hungary ("Naild", "we", "us", or "our"). For data-protection purposes, the operator is the controller for the processing described in this notice. Contact the operator at support@trynaild.com.
This notice covers the Naild mobile application and privacy-related contact through trynaild.com. The app is designed for adults aged 18 or over. Naild is initially free: it does not offer subscriptions, paid artist accounts, in-app purchases, booking fees, commissions, payment processing, or paid services.
This draft is not approved or effective. The published version will state its effective date.
2. Personal data we process
Account and authentication data
If you register or sign in, the app may process your email address, an authentication identifier, display name, username, and sign-in records. Email/password accounts use Supabase authentication. If you choose Apple or Google sign-in, the relevant provider shares authentication information such as a provider account identifier and, depending on the provider and your choices, name or email address. The app does not ask for your date of birth or verify your age; it records your affirmative statement that you are at least 18.
Profile and artist information
A profile can include your role, username, display name, and avatar. An artist profile can include artist name, biography, country, city, postal code, Instagram or TikTok links, a booking link, profile image, and whether the artist accepts new clients. Published artist information and portfolios are intended to be visible to other app users.
Images and portfolio details
Artists can upload portfolio images and associated titles, descriptions, captions, nail-style, shape, length, finish, and ordering information. Profile and artist-profile images can also be uploaded. The app processes selected images for display and storage. Do not upload images or information you are not entitled to share.
Preferences and app activity
To provide the app, we store preferences such as selected shapes, colors, and styles; onboarding choices; searches and applied filters; result counts; portfolio views; likes, dislikes, skips, saves, and shares; and saved collections. These records may include account identifiers, timestamps, and the part of the app from which an action occurred. We use them for saved-content features and personalization.
Reports, blocking, and moderation
If you report an artist profile or portfolio entry, we store the reporter and reported account identifiers, target identifiers and type, reason, any details you provide, and a snapshot of relevant profile or portfolio information. Moderation records may include report status, review and assignment details, actions, internal notes, and account restriction or suspension information. Blocking records identify the accounts involved and when the block was made. Do not include sensitive personal information in report details unless it is necessary to explain the issue.
Technical, diagnostic, and permission information
The app checks and may request operating-system notification permission, and stores the permission status and an enabled preference. Naild does not currently register or store push-notification tokens or send push notifications. When Sentry monitoring is enabled, it receives app error reports that may include diagnostic details and the app account identifier.
The app can request camera access to capture images and lets you select images for upload. Naild does not use precise location or contacts as profile fields. Supabase and other providers may process technical connection and request information to provide and secure their services.
Information in support messages
If you email support, we process the email address, message, and any information you choose to include so we can respond and handle the request. Avoid sending passwords, verification codes, or unrelated sensitive information.
3. Why we use data and the legal bases
We use personal data for the purposes below and rely on the stated legal bases under GDPR Article 6. Where we rely on legitimate interests, those interests include operating a safe and reliable service while considering your rights and interests. Where processing is based on consent, you may withdraw it.
| Purpose | Data used | Legal basis |
|---|---|---|
| Create and maintain accounts and sign users in | Email address, password credential, account and provider identifiers, display name, username, and authentication records. | Necessary to take steps at your request and perform the account and app service contract (GDPR Article 6(1)(b)). |
| Provide profiles, portfolios, discovery, search, likes, and collections | Profile and artist-profile fields, uploaded images and their paths and descriptions, search queries and filters, views, likes, saves, collections, and stated preferences. | Necessary to provide the features you choose to use (Article 6(1)(b)). We also have a legitimate interest in maintaining and improving the service (Article 6(1)(f)). |
| Personalize nail inspiration and recommendations | Onboarding choices, shape/color/style preferences, searches, views, likes, saves, and related interaction history. | Necessary to provide the personalization features you request (Article 6(1)(b)). |
| Receive and review reports, prevent abuse, block accounts, and enforce rules | Reporter and reported account IDs, reported profile or portfolio entry, report category and free-text details, target snapshot, block records, moderation status, reviewer/assignee identifiers, action history, and internal notes. | Our legitimate interests in user safety, preventing misuse, and enforcing service rules (Article 6(1)(f)); legal obligations may apply in particular cases (Article 6(1)(c)). |
| Send account and service communications | Email address, account identifier, onboarding state, and information needed to deliver and record a transactional welcome email or respond to a support request. | Necessary to provide account-related service communications and respond to requests (Article 6(1)(b)). Naild does not currently send marketing communications. |
| Diagnose errors and protect reliability | When Sentry monitoring is enabled: app error events, failure stage, environment, operation metadata, and the authenticated account ID. Supabase and other providers may process connection and service-operation data to provide their services. | Our legitimate interests in service security, reliability, and troubleshooting (Article 6(1)(f)); legal obligations may apply where relevant (Article 6(1)(c)). |
| Meet legal obligations and establish or defend legal claims | Relevant account, communication, service-use, report, moderation, and acceptance records, depending on the specific obligation or claim. | Compliance with a legal obligation (Article 6(1)(c)) or legitimate interests in establishing, exercising, or defending legal claims (Article 6(1)(f)), as applicable. |
Naild does not currently offer a separate optional marketing or analytics consent setting, does not use account data for advertising, and does not provide an AI content-generation feature. Users may upload content generated elsewhere, subject to the Community Guidelines.
4. Who may receive data?
We use service providers to help operate Naild, including:
- Supabase: authentication, database, file storage, and Edge Functions.
- Apple and Google: optional sign-in; Apple authorization revocation may be used when deleting an Apple-linked account.
- Sentry: app error monitoring when configured.
- Resend: transactional welcome email and moderation-report email. A moderation notification may contain report details and account identifiers.
Published artist profiles, portfolio entries, images, and external links are visible within the app as part of discovery. Artists’ external websites, social profiles, and booking services operate independently; their own privacy notices and terms apply.
A provider may act as a processor or an independent controller depending on the service and activity. Naild does not process payments or bookings for artists.
5. International processing
Naild and its service providers may process personal data in countries outside your country of residence. Where required by applicable data-protection law, appropriate safeguards must be in place for transfers to countries that do not provide an adequate level of protection. You may contact us for information about the safeguards applicable to your data.
6. How long we keep information
We keep personal data only for as long as needed for the purposes described here, subject to legal obligations and the need to establish, exercise, or defend legal claims. Information may be kept for different periods depending on its purpose, including while your account is active and for a period afterwards where needed for safety, security, or legal reasons.
When an account is deleted, the app attempts to delete its authentication record and related profile, preferences, content, images, interactions, collections, search sessions, blocks, policy acceptance records, and linked Apple revocation credential. Related database rows are removed where configured deletion relationships permit. Moderation action records may remain with target identifiers or internal notes. Service providers may retain technical logs, email copies, or backups under their applicable retention processes. See Account Deletion for limitations and instructions.
7. Your data-protection rights
Depending on the circumstances and applicable law, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, and data portability; to object to processing based on legitimate interests; and to withdraw consent where processing is based on consent. You may also have rights concerning decisions based solely on automated processing that have legal or similarly significant effects. Naild does not use solely automated decisions with legal or similarly significant effects about you.
To exercise a right or ask a privacy question, email support@trynaild.com with the request and enough information for us to identify your account. We may request reasonable information to verify your identity. We will respond within the period required by applicable law. There is no separate privacy-request web form at present.
You may lodge a complaint with a competent supervisory authority. In Hungary, the relevant authority is the National Authority for Data Protection and Freedom of Information (NAIH). You can also contact the supervisory authority in your place of habitual residence, place of work, or place of the alleged infringement, where applicable.
8. Account deletion
You can request deletion in the app through your Profile settings. If you cannot access the app, email support@trynaild.com. Deletion is subject to verification, legal retention requirements, provider-held copies, and the technical limitations described on the Account Deletion page. A request to delete an account is distinct from other privacy-rights requests; you can email us to make either request.
9. Children and age eligibility
Naild accounts are intended for people aged 18 or older. At registration, the app asks the user to confirm they are at least 18 and records that attestation. Naild does not ask for your date of birth as part of this age check. If you believe a person under 18 has created an account, contact support@trynaild.com so we can assess the report and take appropriate action.
10. Security
The app uses authenticated accounts, access controls, and protected storage and database rules. Certain Apple sign-in revocation credentials are stored in encrypted form for the account-deletion process. No method of transmission or storage is completely secure. We cannot promise absolute security, but we take reasonable steps to protect information and investigate suspected incidents.
11. Cookies and website technical information
When you visit trynaild.com, the website host may process technical information such as an IP address and request details to deliver and secure the site. Essential storage or similar technologies may be used for site operation. If the website uses non-essential cookies or similar technologies, information about them and any required choices will be provided separately.
12. Changes to this notice
We may update this notice when the Service, providers, or applicable requirements change. The final notice will state its effective date. If a change requires renewed consent or acceptance, we will request it as required by law.
13. Contact
For privacy requests, data-protection questions, or support, email support@trynaild.com.