🇹🇷 TR 🇬🇧 EN 🇮🇩 ID

Privacy Policy — Nail Snap

Last Updated: October 07, 2025
Effective Date: October 07, 2025
Owner/Publisher: ToughWing
Contact: support@toughwing.app

Introduction

This Privacy Policy ("Policy") explains what data we collect when you use the Nail Snap mobile application ("App"), why and how we use it, and your rights and choices. By using the App, you agree to this Policy.

1. Data We Collect

1.1 Information You Provide

  • Email address
  • Apple/Google OAuth identifier
  • Internal user ID
  • Subscription status and purchase metadata (provided by Apple/Google)
  • Optional profile information (name, profile photo)
  • Preferences and app settings
  • Photos: Nail photos you select from gallery or capture with camera (designs, reference images). These photos are accessible only to you; not shared with other users.
  • Favorite salons and salon preferences

1.2 Automatically Collected Information

  • Device model, operating system/version, screen information
  • App version, language/region settings
  • Crash and performance data (diagnostics)
  • IP address (approximate location at country/city level)
  • App usage statistics (session duration, screen views, interactions)
  • Camera/gallery permission event logs (feature usage only; no content analysis)

1.3 Firebase / Google Analytics

We use Firebase/Google Analytics to measure app usage and improve our product.

Data collected: device information, usage data, technical data, identifiers (Firebase Installation ID; AAID/IDFA if enabled on device), approximate location derived from IP.

Retention: user-level analytics retained for up to 14 months; only aggregated data remains afterward.

Opt-out: in-app setting (if available), email to support@toughwing.app, or limit ad identifiers in device settings.

Privacy: firebase.google.com/support/privacy

1.4 User Content (Photos)

What we collect: nail photos you upload and basic metadata (file type, size, upload date).

EXIF/location metadata: geographic location (EXIF) data in photos is removed when possible; unremovable metadata is not retained in our systems.

Purpose: your personal reference archive, saving liked designs.

Visibility: photos are completely private; not shared with other users or salons (unless you show them). Not used for advertising.

Storage: photos stored on Supabase Storage (EU — Frankfurt); transmission encrypted with TLS, storage is encrypted; access controls applied.

Deletion: if no in-app bulk deletion, you can delete by emailing support@toughwing.app. Deleted images removed from active systems within 30 days (may remain in backups for limited time).

What we don't do: face/biometric recognition, AI model training, marketing/advertising use not performed.

2. Location Data

  • With your permission, we process your approximate/precise location to show nearby nail salons and calculate distances
  • We don't store location history; location processed only when using the feature
  • You can search by city/area with location turned off
  • Google Maps/Places API is used (policies.google.com/privacy)
  • Salon records in app (name, address, rating etc.) stored in Supabase (EU — Frankfurt) database; your favorites are associated with you

3. Data Use Purposes

Purpose Legal Basis
Nearby salons, recommendations, favorites Performance of contract
Secure storage/display of user photos Performance of contract
Subscription/payment verification Performance of contract
Security, fraud prevention, troubleshooting Legitimate interests
Analytics and product improvement Consent or legitimate interests
Legal obligations compliance Legal requirement

4. Third Parties and Data Sharing

We don't sell personal data. We use these processors as necessary and proportionate:

Sharing may occur for legal requests, security threats, or to protect our rights. Servers may be abroad; safeguards like Standard Contractual Clauses (SCC) are applied.

5. Cookies and Similar Technologies

  • Our website may use session/preference/analytics cookies
  • Mobile app doesn't use traditional browser cookies; SDKs may use device identifiers
  • Manage cookie preferences in browser settings

6. Automated Decision Making / Profiling

We don't perform automated decision making with legal or significant effects. Nearby salon ranking is based on location and preferences; no ad targeting. Personalization settings can be disabled.

7. Marketing Communications

  • Marketing emails sent only with explicit consent; each email has unsubscribe link
  • Transactional emails (subscription, security, critical alerts) may continue

8. Your Rights

GDPR/KVKK: access, rectification, erasure ("right to be forgotten"), restriction, objection, data portability, withdraw consent.

US/CCPA-CPRA: know, access, correct, delete; opt-out of sale/sharing (Nail Snap doesn't sell/share personal data).

Requests: support@toughwing.app (we may verify identity; respond within legal timeframes).

9. Data Retention

Data Type Retention Period
User data & favorites Until removed by user + legal requirements
User photos Until deletion request; removed within 30 days after deletion
Purchase/subscription records 10 years for tax/accounting
Analytics data Up to 14 months (user-level)
Crash/diagnostics Up to 12 months
Location Processed in real-time; no persistent storage

For verified requests, we delete/anonymize data within 30-90 days within legal limits.

10. Security

  • Encrypted transmission with TLS, encrypted storage (per provider)
  • Access controls, secure authentication
  • Supabase Storage (EU — Frankfurt) with access keys and isolation
  • EXIF metadata removed when possible
  • Regular security reviews
Note: No method is 100% secure.

Data Breach Notification

In case of breach:

  • Notification to authorities within 72 hours when required
  • User notification via email without delay if high risk

11. Do Not Track (DNT) / Global Privacy Control (GPC)

No uniform DNT standard exists so we don't specially respond. Where supported, we honor GPC signals by disabling marketing cookies.

12. Content and Subscription Management

Photo Management

  • If no in-app bulk deletion, you can request "Delete my photos" via support@toughwing.app
  • Images removed within 30 days after verification (may remain in backups for limited time)

Subscription Management

  • iOS: Settings → Apple ID → Subscriptions
  • Android: Play Store → Payments & subscriptions

Analytics Opt-Out

  • Disable ad identifiers in device settings and/or email us

13. International Data Transfers

Data may be processed in countries like US/EU. Safeguards like SCC and additional measures applied when necessary.

14. Children's Privacy

App not directed to children under 13; we don't knowingly collect their data. If suspected, please notify us.

15. Changes

Latest version published in-app and at https://toughwing.app/privacy. Important changes notified via email/in-app. Continued use means acceptance of updated Policy.

16. Delete your account & data

You can request deletion of your Nail Snap account and associated data at any time. To start the process, visit https://toughwing.app/en/support/account-deletion. After verifying your identity, we will delete your account, profile, uploaded photos, and in-app activity records. Certain limited records (e.g., payment/transaction metadata required by law) may be retained for a legally required period and then purged.

Subscriptions made via Google Play / App Store must be cancelled by the user in their store account; account deletion does not automatically cancel store subscriptions. Standard processing time: up to 7 days; backups rotate out within 30 days. For help, contact support@toughwing.app.

17. Contact

Data Controller: ToughWing
Email: support@toughwing.app

Complaint Authorities

  • Turkey: KVKK — www.kvkk.gov.tr
  • EU: Your local data protection authority
  • US: Relevant state authorities