My Nail Connection ("MNC," "we," "us") operates the My Nail Connection website and mobile application (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your choices. By using the Service, you agree to the practices described here.
1. Information We Collect
Information you give us
- Account information: name, email address, and (for techs) phone number, shop name, street address, city, state, and ZIP code.
- Profile content (techs): biography, portfolio photos, service tags, typical hours, booking link, availability toggles, and contact-preference settings.
- Payments and purchase history (techs): when you purchase photo credits or a subscription (Glow Up), Stripe processes the payment. We receive a Stripe customer ID, a record of which products you purchased and when (your purchase history), and the current subscription status (paid, renewed, cancelled). We do not see or store your full card number, CVV, or bank details, those are handled directly by Stripe.
- Communications: messages you send through our in-app "Send feedback" tool, customer-support emails, and any liability-acknowledgment checkboxes you agree to at signup.
Information we collect automatically
- Device & usage: IP address, device type, operating system, browser, approximate location derived from IP, pages viewed, features used, and error logs.
- Cookies & local storage: a session token so you stay signed in across reloads, and minimal preferences (e.g. last-used filters). We do not use third-party advertising cookies.
- Push notification tokens: if you opt in to notifications, we store a device-specific subscription token so we can deliver messages. You can revoke this at any time in your browser or device settings.
Information from others
- Geocoding services: when you enter an address, we send it to our geocoding provider to convert it to latitude/longitude so we can power the map search.
- Authentication events: Supabase Auth (our identity provider) logs sign-in attempts, password resets, and similar security events on our behalf.
2. How We Use Your Information
- Operate the Service, match clients to techs, show profiles in search results and on the map, deliver messages, process payments.
- Send transactional emails, signup confirmation, password resets, payment receipts, subscription renewal notices.
- Keep the Service secure, detect fraud, abuse, and misuse; rate-limit suspicious activity.
- Improve the Service, analyze aggregate usage to decide what to build next.
- Comply with law, respond to lawful requests, enforce our Terms of Service, protect our rights and users.
We do not sell your personal information. We do not send you marketing email without your consent.
3. Who We Share Information With
We share personal information only with service providers who help us run the Service, and only as needed for them to perform their function:
- Supabase, database, authentication, and file storage for tech photos.
- Stripe, payment processing for one-time photo purchases and Glow Up subscriptions.
- Email delivery providers, transactional email.
- Geocoding & mapping providers, converting addresses to map coordinates; serving map tiles.
- Hosting providers, serving the Service itself.
Each of these processes data on our behalf under their own privacy and security commitments. We do not share your data with advertisers or data brokers.
We may also share information when required by law (e.g. a valid subpoena), to protect the Service or our users from harm, or in connection with a corporate transaction (merger, acquisition, asset sale), in which case your rights under this policy will transfer to the successor entity.
4. Data Retention
We keep your account information for as long as your account is active. When you delete your account, we remove your personal profile and portfolio photos within 30 days. Some information is retained longer for specific purposes:
- Payment records, retained as required by tax and accounting law (typically 7 years in the United States).
- Security logs, retained for up to 12 months to investigate abuse and fraud.
- Aggregate, de-identified analytics, retained indefinitely.
5. Your Rights and Choices
You can:
- Access or export your data, email anne@mynailconnection.com from the email on your account.
- Correct inaccurate information, most fields are editable inside the app; for anything else, email us.
- Delete your account and data, see our account deletion page for step-by-step instructions, or email us and we'll handle it within 30 days.
- Opt out of push notifications, turn off notifications for the site in your browser or device settings.
- Opt out of non-essential cookies, block them in your browser (some features will not work).
If you are in the European Union or United Kingdom
You have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the right to access, rectify, erase, restrict or object to processing, and data portability. Our lawful bases for processing are (a) performance of our contract with you, (b) our legitimate interests in running and securing the Service, and (c) your consent where we ask for it. You also have the right to lodge a complaint with your local data-protection authority.
If you are a California resident
Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, delete it, and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.
6. Security
We use commercially reasonable safeguards, HTTPS in transit, encrypted storage, access controls on administrative tooling, and regular security reviews. No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify you as required by law.
7. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, email us and we will delete it. Nail technicians using the Service must be at least 18 years old and meet all applicable licensing requirements in their jurisdiction.
8. International Transfers
MNC is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where privacy law may differ from your own. By using the Service, you consent to this transfer.
9. Changes to This Policy
We may update this policy from time to time. When we make material changes, we'll notify you through the Service, by email, or by updating the "Last updated" date above. Continued use of the Service after changes take effect means you accept the updated policy.
10. Contact
Questions, requests, or concerns: anne@mynailconnection.com