Privacy Policy for Phat Nail Studio

Last Updated: February 7, 2026

This Privacy Policy describes how Phat Nail Studio ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our mobile application (the "App"). By using the App, you agree to the collection and use of information in accordance with this policy.

1. Data Collection and Storage Summary

This section provides a clear overview of our data collection and storage practices for transparency and compliance with app store requirements.

1.1 Data We Collect

Data Category	Data Collected	Purpose
Account Information	Email, phone number, name, password (hashed)	Account creation, authentication, identity verification
Profile Information	Name, bio, birthday, avatar (profile photo)	Personalization, user profile display
Shipping Addresses	Address, city, district, ward, country, postal code, recipient name, phone	Order fulfillment, delivery
Order Information	Order details, items, payment method, shipping address	Processing orders, order history
Device Information	Device ID (UUID), device name, platform (iOS/Android), OS version, app version, push notification token	Push notifications, device registration
Reviews & Feedback	Product reviews, ratings, photos attached to reviews, conversation replies	Improving services, product feedback
Photos & Images	Profile avatar, photos attached to product reviews	Profile display, review content (via camera or photo library)
Learning Profile	Skill level, interests, goals, experience, learning preferences	Course recommendations (if applicable)

1.2 Where We Store Your Data

• Server: Account, profile, addresses, orders, reviews, and device tokens are stored on our secure backend servers.
• On Your Device (Local Storage): We use secure storage (expo-secure-store) for authentication tokens (access token, refresh token), device ID, and push token. We also use local storage for cache (e.g., user ID, app data) to improve performance.

1.3 App Permissions (Camera & Photo Library)

The App may request access to your camera and photo library. We use these permissions only when you choose to:

• Profile picture: Take a new photo with the camera or select an existing photo from your library to set as your avatar
• Product reviews: Take photos with the camera or select photos from your library to attach to your product reviews

We do not access your camera or photo library without your explicit action. You can deny these permissions; the App will still work, but you will not be able to add photos to your profile or reviews.

1.4 Data We Do NOT Collect

• We do not collect GPS or precise location data
• We do not collect advertising identifiers by default (only with your explicit consent via Apple’s App Tracking Transparency)
• We do not use Firebase Analytics or third-party analytics (these are disabled)

2. Detailed Information Collection

2.1 Information You Provide

• Account & Registration: Email or phone number, password, first name, last name when you create an account or register.
• Social Login: When you sign in with Google, Facebook, or Apple, we receive your basic profile information (name, email) and authentication tokens from these providers. We do not receive or store your social media password.
• Profile Updates: Name, bio, birthday, avatar (profile photo), shipping addresses, learning profile (if you use courses), and push notification preferences.
• Orders: Order details, selected items, shipping address, and payment information (payment details are processed by third-party payment processors; we do not store full card numbers). Payments made in the App are used only for purchasing physical products and services at our studio. We do not process payments for online courses or other purely digital content.
• Reviews: Product ratings, written reviews, photos attached to reviews, and replies to reviews.
• Photos & Camera: We access your camera and photo library only when you choose to add a photo—for example, to set your profile picture or to attach images to product reviews. You can take a new photo with the camera or select an existing photo from your library. These photos are uploaded to our servers and associated with your account.

2.2 Automatically Collected Information

• Device Information: When you enable push notifications, we collect device ID, device name, platform (iOS/Android), operating system version, app version, and push notification token. This is used solely to deliver push notifications to your device.
• Tracking Transparency (iOS): On iOS, we may ask for permission to track your activity across apps for personalized advertising. This is optional; you can decline. We do not collect advertising identifiers unless you grant this permission.

3. How We Use Your Information

• To provide, maintain, and improve our App and services
• To create and manage your account
• To process orders and deliver products
• To send push notifications (order updates, promotions) when you opt in
• To respond to your inquiries and support requests
• To display your profile, reviews, and order history
• To detect and prevent fraud, abuse, and security issues
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in these circumstances:

• Service Providers: Payment processors, cloud hosting, and notification services (e.g., Expo Push Notifications) that help us operate the App.
• Authentication Providers: When you use Google, Facebook, or Apple Sign-In, we share necessary data with those providers as required for authentication.
• Legal Requirements: If required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

5. Third-Party Services and SDKs

The App integrates the following third-party services. Each has its own privacy policy:

• Expo – App framework, secure storage, push notifications
• Firebase / Google – Push notifications (FCM), Google Sign-In
• Facebook SDK – Facebook Sign-In (advertiser ID and auto events are disabled by default)
• Apple Sign-In – Apple authentication

6. Data Security

We use appropriate technical and organizational measures to protect your personal information, including secure storage (expo-secure-store) for sensitive data on your device and encrypted transmission (HTTPS) for data sent to our servers. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we securely delete or anonymize your data.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and account
• Data Portability: Request your data in a portable format
• Opt-Out: Unsubscribe from push notifications and marketing communications

To exercise these rights, contact us using the information in the "Contact Us" section below. You can also manage your account, profile, and notification preferences within the App. To request deletion of your data, see our Data Deletion page.

9. Children's Privacy

The App is not intended for children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. By using the App, you consent to such transfers. We take steps to ensure your data is protected in accordance with this policy.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA: the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

This Privacy Policy is effective as of the date stated above and applies to all users of the Phat Nail Studio mobile application.