Privacy policy

Last updated: 26 October 2026. This policy covers the Nailnicorn mobile app and booking website, operated for the Nailnicorn salon in Bukit Panjang, Singapore.

Information we use

We use the name, email address, phone number and Telegram/Instagram usernames you provide to manage your account, appointments and customer support. We store a password hash, booking and visit history, package sessions, credits, gifts and payment/deposit records. Images you choose to upload may include deposit receipts and nail designs; salon staff may attach visit photos and notes. Please avoid including unrelated personal or banking information.

Why we use it

We use this information to schedule and deliver salon services, manage purchases and packages, send booking or account messages, verify receipts, respond to questions and protect the service. Payments are made through your banking app; Nailnicorn does not receive your banking password or execute a bank transfer on your behalf.

Service providers and optional AI chat

Hosting/database and image-storage providers process information needed to run the service. Resend delivers account and booking emails. Google Calendar manages appointment scheduling, and the salon uses Telegram to receive receipts and requested customer-support handoffs. These providers may process information outside Singapore.

Before you use AI chat, we ask permission to send your messages, recent chat history and relevant name/package details to DeepSeek to generate replies. Chats are saved for salon support. If you request a human handoff, recent messages may be sent to Nailnicorn through Telegram. Avoid sensitive information in chat. You can use booking and account features without AI chat and contact the salon directly instead.

Where enabled, optional Google and Apple sign-in use your verified identity, name and email to sign in or connect an existing account. They do not give Nailnicorn access to your Google mail, contacts, files or personal calendar. We retain the provider connection needed for future sign-ins. Short-lived verification records protect sign-in requests; Apple account-management credentials are encrypted on the server to support revocation when you disconnect or delete your account. You can manage connections from Sign-in methods. A private Apple relay address cannot automatically identify an existing account under another email; sign in to your existing account first to connect it.

Device access and tracking

Optional biometric unlock protects the app’s saved sign-in using your device’s secure storage. Nailnicorn does not collect your face or fingerprint measurements. Website passkeys store a public key, account connection, name and usage dates on our server; the private key stays with your device or password manager. Your device may verify a passkey with biometrics or its screen lock. Remove passkeys in Sign-in methods; account deletion removes their server records. Keep another sign-in method for recovery.

Camera access is used when you choose to take an upload photo. Photo/file pickers access images you select. You can decline camera access and choose another upload method. Sign-in is stored securely on your device. The native app does not use advertising identifiers or include an advertising or analytics SDK. The website may use Google Analytics when configured. Hosting services process request/IP and operational logs to run and protect the service.

Deleting your account and retaining records

In the app, open You → Delete my account. On the website, use Delete account. Confirm your current password or sign in again with a connected provider, then confirm deletion. Your original login and personal profile are removed, existing sessions lose access, and your chats and visit-photo records are deleted. Limited booking, payment, credit, gift and package records remain under a deletion reference with your personal profile removed for accounting and outstanding obligations. Deletion does not automatically cancel appointments, forfeit balances or issue refunds. Save your deletion reference to discuss any outstanding appointment, credit or package with the salon.

Removal from connected storage and Calendar is attempted immediately. Unfinished cleanup and older Telegram receipt copies are flagged for the salon to resolve. Copies previously sent by email, exported receipts, provider backups and recipients’ own copies may need separate handling. Contact us with your deletion reference about these copies. We retain transaction records where required for Singapore accounting/tax obligations and remove personal information when it is no longer needed for a permitted purpose.

Your choices and contact

You can update your profile, change your email/password and delete your account. For access, correction, privacy questions or help with outstanding purchases, contact Nailnicorn on Telegram or Instagram. See app support for help.