Terms & Conditions

Last updated: August 2026

Nail Tech ("we", "us", "our") is a salon management platform designed for nail technicians and their clients. We act as the data controller for all personal information processed through this application.

By using Nail Tech, you agree to these Terms & Conditions and our data practices described below. If you do not agree, please stop using the app.

We collect only the data necessary to provide our services:

Account & Profile Data

• Full name and email address
• Phone number and business address (optional)
• Profile photo (optional)
• Password (stored as a secure hash — never in plain text)

Appointment & Client Data

• Client name, email address, and appointment details
• Service type, date, time, duration, and personal notes
• Reminder email delivery status and timestamps

App Usage Data

• Device push notification token (FCM) for appointment alerts
• Journal entries and mood data you choose to create
• Vision board images you upload
• AI-generated content (captions, affirmations) created in-app

Technical Data

• Authentication tokens (stored securely, expire automatically)
• Anonymised request logs for security and abuse prevention

Nail Tech sends automated appointment reminder emails to clients on behalf of nail technicians. These reminders are sent at 9:00 AM on the day of the appointment (or at 8:00 AM if the appointment is at 9:00 AM).

Reminder emails contain: client name, appointment date, service, and appointment time. No sensitive health or financial data is included.

We share minimal data with the following trusted processors to operate the app:

We do not sell, rent, or trade your personal data with any third party for marketing purposes.

• Account data — retained while your account is active. Deleted within 30 days of account deletion request.
• Appointment records — retained for 2 years for business record-keeping, then deleted.
• Journal & vision board content — deleted immediately upon your request or account deletion.
• Push notification tokens — deleted when you delete your account or revoke notification permission.
• AI-generated content — retained for 90 days, then automatically purged.
• Authentication logs — retained for 30 days for security purposes, then deleted.

If you are located in the UK or EU, you have the following rights:

• Right of Access — request a copy of all personal data we hold about you
• Right to Rectification — correct inaccurate or incomplete data
• Right to Erasure — request deletion of your data ("right to be forgotten")
• Right to Portability — receive your data in a machine-readable format
• Right to Object — object to processing based on legitimate interest (e.g. reminder emails)
• Right to Restrict Processing — limit how we use your data in certain circumstances
• Right to Withdraw Consent — withdraw consent for push notifications at any time via device settings

To exercise any of these rights, contact us at nailtechrich@gmail.com. We will respond within 30 days as required by GDPR Art. 12.

• All data transmitted over HTTPS (TLS 1.2+)
• Passwords hashed using bcrypt — never stored in plain text
• Authentication tokens expire automatically and are revoked on logout
• Database encrypted at rest (MongoDB Atlas encryption)
• Files stored in private Azure Blob Storage containers with expiring access URLs
• Rate limiting applied to login and signup endpoints to prevent brute-force attacks

We may update these Terms & Conditions from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated terms. For significant changes, we will notify you via the app or email.

For any questions about these terms, your personal data, or to exercise your GDPR rights:

Email: nailtechrich@gmail.com