Privacy, plainly.

Your Google account basics (name, email and, if you set one, a profile photo), your polish collection (brands, shade names, finishes, barcodes, statuses, personal notes) and the photos you add to it, plus your app preferences (theme, sorting, filters).

Everything is stored with Supabase (our database and file storage provider) in the United States, and the app runs on Vercel. Data travels encrypted. Your photos sit in a private bucket and are served through expiring signed links.

If you use NailPal from the European Union, the EEA or the UK, your data is processed in the United States. By using the app you understand it is stored and handled there.

You, and us — the people who run NailPal. Your collection, notes and photos are isolated to your account, so other users can never see them. We use them to run the app and, aggregated wherever possible, to understand usage and improve NailPal — and we never sell them, share them, or use them for ads.

One exception, by design: when you add a polish, its public catalog facts (brand, shade name, finishes, barcode) join a shared catalog that helps everyone autofill faster. Nothing personal travels with it — no name, no photos, no notes, no dates.

If you add a photo while brand and name are empty, that photo is sent to Anthropic (Claude) once, only to read the label, and is not used for anything else. When you scan an unknown barcode, only the number is sent to a public barcode database. Neither request includes who you are.

Only the cookie that keeps you signed in — no third-party trackers, no ads. Any usage analytics are our own, used only to run and improve the app.

You can see the data we hold about you, correct it, export it, or have it deleted, and you can object to us using it to improve the app. Most of this is one click away: export and delete both live in Settings. For anything else, email us and we will help. If you’re in the EU, the EEA, the UK or California, these rights are yours by law, and we will never charge you or treat you differently for using them.

We store your data on two grounds: to give you the app you signed up for, and our legitimate interest in keeping it secure and making it better. We keep it for as long as your account exists. When you delete your account it goes immediately, and any usage figures we keep afterwards are aggregated and cannot identify you.

NailPal is for people aged 13 or older, or older where local law requires it (for example, 16 in parts of the EU). It isn’t meant for children below that age, and we don’t knowingly collect their data.

Settings → Danger Zone → Delete Account removes your account, your collection and all your photos immediately. There is no copy to recover afterwards. You can export your collection as a CSV file at any time from Settings.

Questions about your data: support@kubock.com