Privacy Policy
Version 1.0 · Last updated 6 August 2026
The short version
- The only thing you have to give me is a phone number. No password, no email, no name required.
- I never see your card number. Stripe handles payment on its own page.
- Your typed description goes to Google to make the images. Your photos never do.
- When you are signed in, every design you generate is saved to your account automatically — not just the ones you tap the heart on.
- Email support@nailmind.app to see or delete everything. If you have unused credits, ask for a refund first — deleting removes them.
This explains what NailMind collects, why, who else sees it, and how to get rid of it. It is written plainly on purpose. If anything is unclear, email me and ask.
Who runs NailMind
Minh Pham, a sole proprietor in Arkansas. One person, no company, no staff. Contact: support@nailmind.app.
What is collected, and why
Your phone number
This is your account — it is how your credits and designs find their way back to you. An optional first name is used only to greet you in the app.
Your credit balance and its history
Every movement of credits — bought, spent, granted, refunded — is recorded as a line in a ledger, with a date and a reason. That is how I can answer "where did my credit go?" and how refunds stay correct.
The designs you generate
When you are signed in, every image you generate is saved to your account automatically, along with the description that made it. This is deliberate — it is what fills your Recent album — but it means saving is not something you opt into per image.
When you are not signed in, your designs stay in your own browser and never reach my servers.
Photos you upload
Two different things use uploads, and they behave differently:
- My Work — photos you add from your camera roll are uploaded and stored on my servers, attached to your account, until you delete them.
- Colour matching — if you upload a photo just to pull a colour out of it, that happens in your browser. The photo is never uploaded.
I only ever open your photo library when you tap the button that asks for it.
A free-tier counter
When you use the free design without an account, your IP address and browser name are mixed together into a one-way code, and that code is stored with a count of free images used today. The code cannot be turned back into your IP address. It exists only so one visitor cannot use up everyone's free designs. It is deleted after seven days.
Basic technical data
My web host and database host keep ordinary server logs — IP addresses, times, which page was requested. I have not added any analytics, advertising, or tracking product.
What is not collected
- Your card number. Ever. Stripe's checkout page handles it. In my Stripe account I can see the card's brand and last four digits, and the email address Stripe asked you for so it could send your receipt.
- An email address is not required to sign up and I do not send marketing email.
- Your location, contacts, calendar, or microphone.
- Anything about you from anywhere else. No data brokers, no ad networks, no social logins.
Who else sees it
Four companies, each doing one job. Nothing is sold, ever, to anyone.
- Google (Gemini API) — receives the description you typed, plus the nail shape and length you picked, wrapped in my standard instruction text. No images of yours are ever sent to Google, and nothing identifying goes with it: no phone number, no name, no balance. Google's own API terms govern what it does with that request; that part is not mine to promise. I never train any model on your data.
- Stripe — takes the payment and holds the card details. Stripe has its own privacy policy.
- Supabase — hosts the database and the stored images.
- Hostinger — runs the website itself.
Beyond those, I would only hand anything over if the law actually required it.
How your images are stored — please read this one
Saved designs and uploaded photos live at long, unguessable web addresses. Nobody can browse or list them, and nobody can find yours by searching. But those addresses are not behind a password: anyone you send a link to can open it, and so could anyone who came by that link another way.
For ordinary nail photos this is fine, and it is how the app can show your album instantly. If a photo is sensitive, do not put it in My Work. I would rather tell you plainly than let you assume otherwise.
How long things are kept
- Account, balance and ledger — until you ask me to delete them.
- Generated designs — your most recent 60 are kept; older ones drop off automatically to keep the album fast. Uploaded My Work photos — your most recent 200. Download anything you want to keep forever.
- Descriptions you type — not stored anywhere on their own. The text goes to Google and the images come back.
- The free-tier counter — seven days.
- Payment records — kept as long as tax rules require, even after an account is deleted. This is a record that a payment happened, not your card details.
- Server logs — kept by Hostinger and Supabase on their own schedules. I do not set the length, do not copy them anywhere, and do not build profiles from them.
Deleting your account
Email support@nailmind.app and tell me the phone number on the account.
Because the phone number alone is not a secret — text verification is not switched on yet — I will confirm the request is really yours before deleting anything, usually by checking a detail only you would know, such as a recent purchase. If I cannot confirm it, I will not delete the account. That is deliberate: it stops a stranger destroying your credits.
If you have unused credits, ask for a refund before you ask for deletion. Deleting the account removes the balance along with everything else, and there is nothing left to refund afterwards.
Deletion removes your number, name, balance, ledger, saved designs and uploaded photos. I aim to finish within 30 days. (When NailMind reaches the App Store, Apple will require a delete button inside the app; that is coming.)
Cookies and browser storage
No advertising or tracking cookies. The app stores a few things in your own browser: your sign-in token so you stay signed in, your shape and length preferences, and — if you are not signed in — your recent designs and a count of free designs used. Clearing your browser data clears all of it.
Children
NailMind is not for children under 13, and I do not knowingly collect anything from them. If you believe a child has given me information, email me and I will delete it.
If you are in California
You can ask me to tell you what personal information I hold about you and where it came from, to delete it, to correct it, and to give you a copy. I do not sell or share personal information for advertising, so there is nothing to opt out of. Exercising any of these rights will never get you worse pricing or a worse service.
To make a request, email support@nailmind.app. I will confirm it is really you first, and aim to answer within 30 days — and in any case within the 45 days California allows.
If you are outside the United States
NailMind is run from the United States and your information is stored there. I will honour requests to see, correct, export or delete your data wherever you live — just email me.
If you are in the UK or EU: where you have bought credits, the basis for processing is performing that contract. Where you use NailMind without buying anything, the basis is your consent — you gave me a number to make an account, and you can withdraw it any time by asking me to delete it. Keeping the service running and stopping abuse rests on legitimate interests.
Security, honestly
What is true: the database is locked down so that only the server's own secret key can read it — the public key that ships in the web page can read nothing at all. Card details never reach me. Admin tools need a PIN, and repeated wrong guesses lock an address out. NailMind's data lives in a completely separate database from the nail salon's, and the salon's staff tools cannot reach it.
What is also true: this is one person's project, not a bank. There has been no third-party security audit and I hold no certifications. Stored images sit behind unguessable links rather than a password, as described above. If something ever goes wrong that affects you, I will tell you rather than hope you do not notice.
Changes
If this policy changes, the version and date at the top change with it. A change that materially affects you will be announced on the site, not slipped in quietly.
Contact
support@nailmind.app — one address, and a person reads it.