Privacy policy

Naily is made by SmoothIT BV, Wagenbruggelaan 44, 8200 Brugge, company number BE1033190748. We are responsible for processing your personal data in the app.

Questions about your privacy? Email us at [email protected].

We only use what Naily needs to work:

• Your account: the identifier Apple or Google uses for you, and your email address if you share it when signing in. If you choose “Hide My Email” with Apple, we only see a forwarding address.
• Your profile: your first name, your date of birth and the language of the app.
• What you add: photos of your nails, the date, the colours recognised in a photo, the polishes you used, your categories and notes.
• Your stash: the bottles you add, with brand, name, number and sometimes a photo of the bottle. Also the photos you take to scan bottles.
• Friends: your friend ID, who you are friends with, which designs you share and which designs you gave a polish.
• Reports and blocks: what and who you report, with the reason you chose, and who you blocked.
• Usage: when you last used the app, and roughly the city and country you were in at the time. We derive these from your IP address; we do not keep the IP address itself.
• Technical data: sign-in sessions, so you stay signed in, and server logs with, for example, the time and result of a request, to find errors and abuse.

Naily contains no ads, no analytics and no trackers. We do not sell your data and do not use it for advertising.

• To create your account and sign you in, keep your designs and stash, recognise colours and share with the friends you choose. This is needed to provide the service you ask for (Article 6(1)(b) GDPR).
• To keep Naily safe and working: finding errors, preventing abuse, reviewing reports and limiting the number of requests. And to see how Naily is used, for example how many people opened the app this week and in which countries. This is our legitimate interest (Article 6(1)(f) GDPR).

We use your date of birth to check that you are 13 or older. If you are younger, you cannot complete your profile and we do not keep your date of birth.

When you add a photo, Naily has it analysed to recognise the colours on your nails. A photo of bottles is analysed to read the brand, name and number. To do this, we send the photo to OpenAI.

OpenAI only processes the photo to answer that request. Under OpenAI’s terms, data sent through their API is not used to train their models. They may keep it for a limited time to detect abuse.

Friends are people you add with their friend ID, or who add you with yours. What they see:

• Your first name and an avatar in the colour you wear most.
• The designs you set to “Friends”: the photo, the date, the colours, the polishes used and how many polishes the design received.
• Your stash, if you leave “Share my stash” on.

Friends never see your email address, your date of birth, your notes, your categories or designs set to “Only me”. Nobody sees who gave a design a polish: only the number.

If you remove a friend, you no longer see each other’s designs and the polishes you gave each other disappear.

If you block someone, you are no longer friends and that person can no longer find you with your friend ID. If you report a design or a person, they do not see that it was you; a design you reported no longer shows for you.

We review every report. If something breaks the rules, we can hide a design from all friends, or suspend an account.

We work with a few service providers that process data on our behalf:

• Railway: hosting of our server and database.
• Amazon Web Services: storage of your photos, in Frankfurt (Germany).
• OpenAI: colour recognition in photos, as described above.
• Apple and Google: signing in with your Apple or Google account.

Some of these services process data outside the European Economic Area, including in the United States. This only happens with the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Beyond that, we only share your data when the law requires us to.

• We keep your account and everything you added for as long as your account exists.
• If you delete a design, we erase it right away, together with its photos.
• Photos you take to scan bottles are erased at the latest one day after the scan.
• If you delete your account, we immediately erase your profile, your designs, your stash, your friendships and all your photos.

Sign-in sessions expire on their own. Your last visit, with city and country, is overwritten each time by the newest one. We keep reports and blocks for as long as the accounts exist. We keep server logs no longer than needed to find errors and abuse.

All traffic between the app and our server is encrypted. Your photos are not public: the app only gets temporary links to show them. Your sign-in session is kept in your device’s secure storage.

Only a few people on our team can look at your account and what you added, in a protected admin panel: to handle reports, stop abuse, or help you when you ask. Who viewed or did what is recorded.

You have the right to access, correct or erase your data, to restrict its processing, to object and to take your data with you. Much of this you can do in the app: change your name and language, set designs to “Only me” or delete them, and delete your account in Settings.

For anything else, email us at [email protected]. We reply within one month.

If you are not happy with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority in your own country.

Naily is meant for people aged 13 or older. If you are younger, please do not use Naily.

If anything changes in how we handle your data, we update this policy and the date at the top. If it is something important, we also let you know in the app.