Privacy Policy

Last updated: 2 May 2026
Applies to: theNicenails mobile application and related online services operated by the controller named below.

1. Who we are

“Nicenails”, “we”, “us” and “our” refer to Built.JS Ltd, New Zealand (“Controller”). We operate theNicenails marketplace that connects customers with nail artists for browsing designs, requesting appointments, and related features.

For privacy questions or requests, contact us at info@nicenailsapp.com. We will respond within a reasonable time and in line with applicable law once this policy is finalised with counsel.

2. Scope

This policy describes how we collect, use, store, and disclose personal information when you:

• use theNicenails mobile app (iOS or Android);
• use our website or marketing pages that link to this policy; or
• otherwise interact with our services where this policy is brought to your attention.

It does not apply to third-party services that have their own privacy policies (for example Clerk, Stripe, or your device app store), except where we process personal information on their behalf as described below.

3. Personal information we collect

The types of information depend on whether you useNicenails as a customer, an artist, or both.

3.1 Account and authentication

• Identity and sign-in. We use Clerk to authenticate you. Clerk processes identifiers such as email address and authentication events according to Clerk’s privacy policy. We store an internal user record linked to your Clerk user id (clerkUserId) to operate the service.

3.2 Profile, portfolio, and creative content

• Profile and bio. Information you add to your public artist profile (for example display name, bio, studio or service area description) may be visible to other users as part of the product.
• Photos and designs. When you upload images (profile, portfolio, nail design captures, or related assets), we store those files on our servers and metadata in our database so the catalog, booking flows, and profiles work as designed.

3.3 Location

• Customer search location. If you save a location to find nearby artists, we may store coordinates and/or a human-readable label you provide.
• Artist service area. If you set up booking availability, we may store your venue or service pin (latitude/longitude) and optional address or area labels for discovery and booking.

3.4 Bookings, reviews, and messaging fields

• Bookings. We process booking details including customer and artist internal identifiers, chosen design, scheduled start and end times, timezone, price, status, payment status (where in-app payments are enabled), and timestamps for requests and responses.
• Reviews. If you leave a review after an appointment, we store your rating, optional comment, and linkage to the booking and parties involved so the review can be shown in the product where permitted by our rules.
• Inspiration / quote flows. Where you use quote or inspiration features, we may store notes, proposed times, pricing proposals, and related status fields you or the other party enter in the app.

3.5 Favourites and preferences

• We may store your favourite artists or designs to personalise browse and account views.

3.6 Availability and working hours

• For artists, we store weekly availability templates, exceptions, timezone, and related settings used to generate bookable slots.

3.7 Studios (collectives / salons)

• If you create or join a studio, we process studio name, description, optional logo, slug, membership role, invite status, and relationships between users and studios as needed to operate studio features.

3.8 Payments and verification (when enabled)

• Stripe. If in-app payments or Stripe Connect onboarding are enabled, Stripe processes payment and payout-related personal information according to Stripe’s privacy policy. We receive limited identifiers and transaction state from Stripe to operate bookings (for example payment intent ids and payment status on a booking).
• Stripe Identity. If identity verification is offered or required, verification is handled by Stripe; we may store status fields and session references needed to reflect verification state in the app.

3.9 Push notifications

• If you enable notifications, we may store a device push token (Expo) associated with your account so we can send transactional or product-related messages you have agreed to receive. You can turn off notifications in your device settings; removing the token from our systems may require account or support action depending on product implementation.

3.10 Email and transactional messages

• Where we send email (for example via Resend), we process recipient addresses and message content required for that send. Resend’s terms and privacy notice apply to their processing.

3.11 Technical and security data

• We may collect server logs (including IP address, user agent, timestamps, and request paths), error reports, and diagnostic data to secure the service, debug issues, and improve reliability. Retention periods should be defined operationally and documented after counsel review.

4. Why we use personal information (purposes)

We use personal information to:

• provide, operate, and improveNicenails (including discovery, booking, studios, and catalog features);
• authenticate users and prevent fraud or abuse;
• communicate with you about the service (including transactional notifications and, where permitted, product updates);
• comply with law and respond to lawful requests;
• enforce our terms and protect the rights, safety, and integrity of users and the public.

New Zealand’s Privacy Act 2020 requires that collection be for a lawful purpose connected to a function or activity of ours, and that information be reasonably necessary for that purpose. Final legal bases and wording should be confirmed with your advisor.

5. How we disclose personal information

We may disclose personal information to:

• Service providers who assist us (for example hosting and database providers such as Render and Neon, authentication Clerk, email Resend, payments Stripe, push delivery Expo). They process data under contract and only as needed to provide their services.
• Other users where the product is designed to show information publicly or between parties (for example published designs, artist profiles, booking-related details visible to the other party, reviews where published).
• Professional advisers, regulators, or law enforcement where required or reasonably necessary.
• A successor in connection with a merger, acquisition, or sale of assets, subject to applicable law and agreements.

We do not sell your personal information in the conventional sense of “selling” lists to data brokers.

6. Overseas transfers

Our service providers may process or store data in countries other than New Zealand (for example the United States). Where required by New Zealand law, we will ensure appropriate safeguards or disclosures are in place. Your counsel should map actual sub-processors and document transfer mechanisms for production.

7. Retention

We retain personal information for as long as your account is active, as needed to provide the service, and as required to meet legal, accounting, or reporting obligations. Specific retention schedules for logs, backups, deleted accounts, and media should be added after operational and legal review.

8. Security

We use administrative, technical, and organisational measures appropriate to the nature of the data (including HTTPS in production, access controls on servers, and industry-standard practices for application security). No method of transmission or storage is completely secure; we encourage strong passwords and device security.

9. Your rights (New Zealand)

Under the Privacy Act 2020, you generally have the right to know whether we hold personal information about you, to access that information, and to request correction if it is inaccurate. You may also have the right to complain to the Office of the Privacy Commissioner if you believe we have interfered with your privacy.

To exercise access or correction, contact info@nicenailsapp.com. We may need to verify your identity before acting on a request. For account deletion requests, see Delete account.

10. Children

Nicenails is not directed at children under 16. If you believe we have collected information from a child without appropriate authority, contact us and we will take appropriate steps.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date. Where changes are material and the law requires notice, we will provide notice in line with that law (for example via the app or email).

12. Summary table (non-exhaustive)

Category	Examples	Typical purpose
Account	Clerk user id, email (via Clerk)	Sign-in, security, account linking
Profile & media	Name, bio, photos, design assets	Catalog, portfolio, booking context
Location	Lat/long, labels, artist pins	Discovery, booking, service area
Bookings & payments	Times, price, status, Stripe references	Fulfil appointments, payments when enabled
Reviews	Rating, comment	Trust and discovery
Device	Push token	Deliver notifications
Technical	Logs, IP, diagnostics	Security, reliability

©Nicenails