Privacy Policy

NailCards AI (“NailCards AI”, “we”, “us”) provides an AI nail colour and design assistant available at nailcardsai.com. We act as the data controller for the personal information described below. For any privacy question or request, email privacy@nailcardsai.com.

• Account information: your email address and a password, or your basic Google profile (name, email, avatar) if you sign in with Google OAuth. We never see your Google password.
• Personalisation details you provide: skin tone, zodiac sign, hair colour, eye colour, style preference and the free-text occasion or notes you enter for each look.
• Photos you upload: outfit photos (including Weekly Match uploads) that you choose to submit for a recommendation.
• Generated content: the colour palettes, finishes, shapes, notes, instruction cards, AI images, care timelines and Nail DNA summaries created for you, plus the looks you save.
• Subscription and usage data: your plan (Free, Pro, VIP), subscription status, and counters that track how many generations you have used so we can enforce plan limits.
• Technical data: basic log and error information generated when the app is used, such as timestamps and error messages, used to keep the service working.

• To create your account and let you sign in securely.
• To generate personalised nail recommendations, cards, images, care timelines and Nail DNA summaries.
• To save your looks and show your history when you return.
• To manage subscriptions, billing and plan usage limits.
• To prevent abuse of the AI features, including rate limiting.
• To fix bugs, improve reliability and respond to support requests.

Where GDPR applies, our legal bases are: performance of a contract (providing the service you signed up for), legitimate interests (security, abuse prevention, service improvement), consent (where you voluntarily upload photos or provide optional details), and legal obligation (tax and accounting records for payments).

When you request a recommendation, your inputs — including any outfit photo you upload — are sent to third-party AI providers for processing so a result can be generated. This processing currently uses Google (Gemini) and OpenAI models accessed through the Lovable AI Gateway.

Photos are used only to produce your recommendation and the content you asked for. We do not sell your photos, publish them, or use them to advertise to you. Uploaded photos are stored in a private storage area tied to your account, and you can delete them by deleting the associated look or your account.

Your data is stored in our managed backend infrastructure (Supabase, provisioned through Lovable Cloud). Every table that holds your personal data is protected by Row Level Security, which means each account can only read and write its own rows. Uploaded photos are held in a private bucket that is not publicly listable.

Data is encrypted in transit using HTTPS/TLS. No system can be guaranteed to be perfectly secure, but we take reasonable technical and organisational measures to protect your information and limit internal access to what is needed to operate the service.

• Stripe — payment processing. Stripe collects and handles your card details directly; NailCards AI never receives or stores your full card number. We receive only the subscription status and identifiers needed to manage your plan.
• Google (Gemini) and OpenAI — AI processing of your inputs and uploaded photos to generate results, accessed via the Lovable AI Gateway.
• Supabase / Lovable Cloud — database, authentication, file storage and hosting infrastructure.

These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information, and we do not share it with advertisers.

Our providers may process data in the United States and other countries outside the European Economic Area and the United Kingdom. Where such transfers occur, they rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.

We use only the cookies and local browser storage needed to keep you signed in and to remember basic app preferences. We do not run advertising cookies or cross-site tracking pixels. If we introduce product analytics in the future, we will update this policy and, where required, ask for your consent first.

We keep your account data, saved looks and uploaded photos for as long as your account is active. When you delete a look, its data and associated photo are removed. When you delete your account, your profile, looks, photos and generated content are deleted from our systems, other than limited billing records we must retain for tax and accounting purposes, and backups that expire on a rolling schedule.

Depending on where you live, you have rights over your personal data. Under the GDPR (EU/UK) these include the right to access, correct, delete (“right to be forgotten”), restrict or object to processing, receive a copy of your data in a portable format, and withdraw consent. Under the CCPA/CPRA (California) these include the right to know what personal information we collect, to request deletion or correction, and to be free from discrimination for exercising those rights. We do not sell or share personal information for cross-context behavioural advertising.

You can update your personalisation details and delete your account and its data directly in Account settings. For any other request, email privacy@nailcardsai.com from the address on your account and we will respond within 30 days. EU/UK users also have the right to complain to their local data protection authority.

NailCards AI is not intended for anyone under 18. By creating an account you confirm that you are at least 18 years old. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will delete the account and its data.

We may update this policy as the service evolves. The “last updated” date above will always reflect the current version, and material changes will be communicated in the app or by email.

Privacy requests: privacy@nailcardsai.com. General support: hello@nailcardsai.com.