Privacy Policy
Updated November 10, 2026
This policy explains how Guo Yu, the United States operator of Nail AI, processes personal data in the app and on this website. It covers service data as well as choices about website analytics.
Operator: Guo Yu · United States
support@nailaiapp.com
1. Data we process
Depending on your use, we process account identifiers and email from sign-in, selected hand and reference photos, design prompts, purchase and credit records, technical logs, app events and feedback. We also receive information you send to support. Apple processes payment details; we do not receive your full card details.
2. Why we use data
We use data to provide generation, sign-in, purchases and support, maintain credit balances, prevent abuse and improve reliability. Where applicable, the legal basis is performance of our contract, consent for optional processing, legitimate interests in security and service improvement, or legal obligations.
3. Service providers and AI
Photos and prompts needed for generation are sent through our server to Replicate for AI processing. Auth0 handles sign-in; RevenueCat and Apple handle purchase-related services. Hosting providers support service delivery. Google Analytics receives website visit data only if you allow analytics. Providers process relevant data under their own terms and privacy arrangements; their policies are linked below.
4. Photo processing and retention
We do not keep a permanent photo library on our server. Images pass through temporary processing files that are scheduled for cleanup after requests. Replicate states that API prediction inputs, outputs, files and logs are deleted after one hour by default; its policy and configuration govern that retention. Images you save in the app or export remain on your device until you remove them. Device backups and shared copies are controlled separately.
5. Other records
Account, credit, purchase, support and security records are separate from photo retention. They are kept for as long as needed to provide the service, handle disputes, prevent abuse or meet legal obligations. App analytics events are configured to expire after 90 days; database cleanup may not be immediate. Contact us about specific records or deletion.
7. Security and international processing
We use technical and access controls to protect data, but no system is completely secure. We and our providers may process data in the United States and other countries, where protections can differ. Where applicable, international transfers require the safeguards provided by relevant law.
8. Your choices and rights
Depending on local law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or complain to a data protection authority. Use Delete Account in the app for your sign-in account, and contact support about associated server records. Identity verification and legal retention exceptions may apply. We do not sell personal data or share it for cross-context behavioral advertising.
9. Children, changes and contact
The service is not directed at children under 13. Contact us if you believe a child has provided personal data. We will update this policy’s date when it changes and give further notice where required. Send privacy questions and requests to the email below.