Privacy Policy

Naily ("we," "us," or "our") operates the Naily web application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Information you provide

• Account data: Email address and password when you create an account, or profile data from Google when using social sign-in.
• Prompts: Text prompts you enter to generate nail designs.
• Uploaded photos: Images you upload for the "Match my outfit" feature. These are processed in real time and not permanently stored.

Information collected automatically

• Device fingerprint: A non-identifying hash used solely to enforce daily usage limits for anonymous users. This is not used for tracking or advertising.
• Usage data: Number of designs generated per day.
• Analytics: Anonymous page view data (page visited, referrer, browser, operating system, country/region) collected via Vercel Analytics. No personal data or cookies are used.
• Cookies: Session cookies for authentication and a cookie consent preference cookie. See our Cookie Policy for details.

2. How We Use Your Information

• To generate AI nail designs based on your prompts
• To authenticate your account and manage sessions
• To enforce fair usage limits
• To populate the community gallery with generated designs
• To improve our service and fix issues

3. Third-Party Services

We use the following third-party services to operate Naily:

• Supabase: Database hosting, authentication, and file storage (EU/US)
• Replicate: AI image generation (US)
• OpenAI: Content moderation and design classification (US)
• Google: OAuth sign-in (when you choose to sign in with Google)
• Vercel Analytics: Anonymous, cookieless page view analytics (US)

These providers process data on our behalf under their respective privacy policies. We do not sell your personal data to any third party.

4. Data Retention

• Account data: Retained until you delete your account.
• Generated designs: Retained indefinitely as part of the public gallery unless you request deletion.
• Uploaded photos: Processed in memory and not permanently stored.
• Anonymous usage data: Automatically expires daily.

5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing of your data
• Request a portable copy of your data
• Withdraw consent at any time

EU residents (GDPR): You have all rights listed above. Our legal basis for processing is legitimate interest (service operation) and consent (cookies).

California residents (CCPA): You have the right to know what data we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information.

Israeli residents: You have rights under the Protection of Privacy Law, 5741-1981, including access to and correction of your personal data.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest. However, no method of transmission over the internet is 100% secure.

7. Children

Naily is not intended for children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

9. Contact

For questions or to exercise your rights, contact us at: info@naily.io