Privacy Policy - AI Nail Art

Last updated: 26 October 2026

1. Who we are

EasyTech Agency ("we," "our," or "us") operates the AI Nail Art mobile application (the "App", listed on the App Store as "AI Nail Art: Design & Try On"). We are the controller of the personal data described on this page. You can reach us at contact@easytech-agency.net.

This page describes the current version of the App (version 2). It replaces the earlier policy for this App. Section 13 explains what happens to data from earlier versions.

2. In short

3. What stays on your device

The following is stored on your device and is not sent to us:

Photos used for the normal try-on never leave your device. Camera access is requested to photograph your hand. You can revoke camera access at any time in your device settings. You can delete a hand profile and its photo in the App (Me).

4. What we collect and send

4.1 Anonymous identifier and security checks

After you answer the age question, the App signs you in anonymously with Firebase Authentication (Google). This creates a random user identifier. There is no account with an email address or password. The App also sends an Apple App Attest / Firebase App Check token so that our server can tell requests from the real App from automated ones, and your device language and time zone offset (not your location). If you allow notifications, a push notification token (Firebase Cloud Messaging) is stored so that we can send the trial reminder you asked for. On our server, Firebase (Authentication, Firestore, Storage and Functions) is used to run the AI features and the design catalogue.

4.2 AI requests

When you ask the App to create a design with AI, we receive your choices in the App and the short text you typed (at most 140 characters), together with your user identifier. If you add a reference photo (for example a photo of nail art) or choose an AI try-on on your own hand, we also receive that photo. Section 5 describes what we do with them. We record that a request took place so that we can enforce usage limits and fix problems; for the text we keep only a hash, not the words.

4.3 Purchases and subscription status

Subscriptions are billed by Apple. We use RevenueCat to manage subscription status. RevenueCat receives your purchase history and subscription status linked to your user identifier. We do not receive or store your payment card or Apple ID details. If you are under 15, only the App Store purchase service runs; it uses an anonymous RevenueCat identifier that is not linked to a Firebase user.

See the RevenueCat Privacy Policy.

4.4 Product analytics

We use PostHog to understand how the App is used: which screens and features are used, the steps of onboarding and of purchase, whether an AI request succeeded, the app version, your plan, your language and a skin tone bucket you may choose for the sample hand. Events are linked to your anonymous user identifier, which is set only after you answer the age question. Search words you type in the design library are not sent, only their length. Your hand photos are never sent to PostHog. PostHog may process data on servers in the EU or the United States.

You can switch this off at any time in Me, with the “Share anonymous usage” setting. If you are in the European Union, the United Kingdom or Switzerland, the App asks for your choice before any analytics are sent. See the PostHog Privacy Policy.

4.5 Crash and performance diagnostics

PostHog's crash reporter and Firebase App Check may collect crash reports and technical performance information (for example device model, operating system version and the state of the App when it failed). The TikTok SDK has its own diagnostic reporter; it runs only under the conditions of section 6.

5. AI features

When you start an AI design or an AI try-on, the App shows a consent message first. After you accept, the following is sent to our server (Firebase Functions) and then to OpenAI to create the image:

We process these photos in memory to complete your request and we do not store them. We do not use them to train AI models and we do not perform facial recognition. Please do not include faces in photos you send. The generated image is kept on our server for 24 hours so that the App can deliver it to you, and is then deleted automatically. Text you send is checked and the generated image is moderated on the server before it is returned.

OpenAI acts as a service provider for us. We use its API, and under OpenAI's published API terms, inputs sent through the API are not used to train its models by default. OpenAI may keep API data for a limited period under its own policy, for example to detect abuse; we do not control that period. See the OpenAI Privacy Policy.

AI features are not available if you tell the App that you are under 15, and they do not run without an active subscription. The images are generated by AI, may be inaccurate, and are labelled “Made with AI” in the App.

6. Advertising attribution (App Tracking Transparency)

The App contains the TikTok Business SDK and the Meta SDK, which help us measure which advertising leads people to the App. These are tracking SDKs as defined by Apple, and they are governed by Apple's App Tracking Transparency framework.

See the TikTok Privacy Policy and the Meta Privacy Policy.

7. Service providers, sharing and transfers

We do not sell your personal data. We share it only with:

Most of these providers are based in, or process data in, the United States. When your data is transferred outside the European Economic Area, we rely on the safeguards provided by law, such as the EU-US Data Privacy Framework or standard contractual clauses, depending on the provider.

8. Legal bases (GDPR)

9. Retention

10. Your rights and deleting your data

You can delete your data in the App: Me → Delete my data. This removes your server-side data (your user record, subscription links, trial and device records, AI requests and results) and the data stored on your device. Deleting data in the App does not cancel your subscription; you cancel that in your Apple account settings. RevenueCat and PostHog records are removed on request by email, because those deletions are done by hand using your user identifier.

Under the GDPR and similar laws you have the right to access your data, have it corrected or erased, receive it in a portable form, restrict or object to its processing, and withdraw consent. To use these rights, write to contact@easytech-agency.net. Because the App uses a random identifier and no account, we may ask you to send the identifier shown in the App so that we can find your data. You can also lodge a complaint with a supervisory authority, in France the CNIL (cnil.fr), or with the authority of your country of residence.

11. Data security

Data is transmitted over encrypted connections and stored with Google Firebase under access rules that limit it to your user identifier and our server. Subscription data is handled by Apple and RevenueCat. No method of transmission or storage is completely secure.

12. Children's privacy

The App is for people aged 15 and over. If you tell the App that you are under 15, it does not sign you in, does not send analytics, does not start any advertising SDK, does not register for push messages, and the AI features are not available. Only the App Store purchase service and the public design catalogue are used. People aged 15 to 17 are not tracked for advertising. We do not knowingly collect personal data from children under 15. If you believe we have, please contact us and we will delete it.

13. Earlier versions of the App

Earlier versions of AI Nail Art (called AI Nail Design) stored hand photos and generated designs in cloud storage, and their consent messages said photos were not stored. That was inaccurate. Version 2 no longer stores hand photos, and we are deleting the data collected by earlier versions, hand photos first. If you want to be sure your data from an earlier version is gone, write to us and we will confirm.

14. Changes to this policy

We may update this Privacy Policy. The date at the top shows the last change. If a change is significant, we will tell you in the App.

15. Contact

If you have any questions about this Privacy Policy, contact us at:
contact@easytech-agency.net

Back to AI Nail Art