App privacy

Short version: Nonyxa helps you quit nail biting with a daily photo check-in. To make that work we store your account, the hand photos you take, the nail crops we make from them, and a few measurements — all in your own private space. The part that looks at your hands runs on your phone, not on a cloud vision service. We use privacy-friendly analytics to improve the app, held to the same standard as our website. We don't sell your data. If an ad brought you to Nonyxa, we measure which one — with your permission, and using your device's advertising identifier. Here's the detail.

What the app collects

• Your account. An account is created automatically the first time you open the app, with no email attached. If you save it with an email, Apple, or Google, we store that email. We also store your time zone (so your day rolls over at the right moment for streaks and the compare) and your daily-reminder preference.
• Your hand photos. When you check in, you photograph your hands. We keep the original photos so you can look back at your history.
• Nail crops. From each photo, the app finds your fingertips and saves a small cropped image of each nail. These are what you swipe and what the day-to-day comparison shows.
• Measurements and labels. For each crop, a couple of quality numbers (how blurry it is, how confidently a hand was found) and the clean or damaged label you give it. These drive your streak, the compare, and your history.
• Usage analytics. Which screens you open, how you interact with them, and how the daily flow goes, including that a check-in happened — tied to your account, not to your name or email. We don't send your clean and damaged marks. We use this to learn what's working and fix what isn't.
• Approximate location. Your country, derived from your IP address by our analytics, to understand where interest comes from. We don't store a precise location.
• Device and app info. Device type, operating system, and app version — the basics needed to keep the app working across phones.
• Advertising identifier. If you installed Nonyxa after seeing an ad we ran, we record which ad it was, so we know which advertising is worth paying for. On iPhone this uses Apple's advertising identifier, and only if you allow it when iOS asks. Decline and the install is still counted, but only in aggregate, with nothing that identifies your device.

Your photos are processed on your phone

The work of finding your hand and cropping each nail happens on your device, using MediaPipe — an on-device vision library bundled into the app. The models run entirely on your phone, so no outside company receives your photos to analyze them. After the crops are made, the original photos and crops are uploaded to our own storage so your history can follow you to a new phone once you save your account with an email, Apple, or Google — but the analysis itself never leaves your phone. Without a saved credential, this phone is the only way back into the account, and reinstalling the app starts a fresh one.

Why we collect it, and the legal basis

• Account, photos, crops, measurements, labels exist to provide the service you use — the daily check-in, the compare, your streak, your history. The legal basis is performing the contract formed when you start using the app, and our legitimate interest in running the app you asked for.
• Analytics, approximate location, device info exist to make the app better — nothing more. For users in the EU, EEA, UK, and Switzerland we ask during setup and collect these only with your consent. Everywhere else we rely on our legitimate interest in understanding how the app is used. Either way, you can turn analytics off any time in the app's Settings, and the app works fully without it.
• The advertising identifier exists so we can tell which advertising reaches people who want this app. We collect it only with your consent: the app's analytics setting, and the separate permission iOS asks for, which you can change at any time in iOS Settings under Privacy & Security. Declining either leaves the app working exactly as it does now.

Who processes it

We keep the list of companies that touch your data short:

• Supabase — stores your account, photos, crops, measurements, and labels. Your data sits in storage partitioned per user, in a database only you (through the app) and we can read. Transfers are covered by Standard Contractual Clauses.
• PostHog — product analytics, hosted in the United States under Standard Contractual Clauses. We've turned off data sharing and selling, and any session replay we run masks every input. Events are keyed to your account id rather than your name or email. We don't send PostHog your photos, your crops, or your clean and damaged marks. Same standard we hold on the website.
• Grafana — the dashboards we read your product data on, hosted in the United States under Standard Contractual Clauses. It queries the same Supabase database rather than keeping its own copy, through read-only views covering your account details, your check-in history and your labels, and the records we keep of your photos and crops. It never receives the image files themselves, and nobody outside the team can open it.
• UserJot — the feedback board you reach from Settings. Opening it is a visit to their page, so they see the usual things a website sees: your IP address and which pages you looked at. If you sign up on the board, they also hold that email and name and anything you post, comment, or vote on. Their page loads its own visitor analytics (Fathom, which doesn't use cookies or track people across sites). Neither UserJot nor Fathom ever sees your photos, crops, measurements, or check-ins.
• AppsFlyer — measures which ad an install came from, hosted in the United States under Standard Contractual Clauses. It receives your account id, your device identifiers, and the app milestones listed above. It never receives your photos, your crops, or your clean and damaged marks.
• RevenueCat — runs the Pro subscription, hosted in the United States under Standard Contractual Clauses. It holds what you bought and when, your account id, and your device identifiers, so a subscription can be traced back to the advertising that brought you. It never receives your photos, your crops, or your labels.

The vision that finds and crops your nails (MediaPipe) is a library bundled into the app and runs entirely on your phone — it isn't a company we send your photos to, so it isn't on this list.

How long we keep it

Your photos, crops, measurements, and account data stay until you remove them or delete your account — deleting your account erases all of it, right away and for good. An account with no saved credential can become unreachable (reinstalling the app starts a fresh one); we may delete unreachable accounts that are more than 90 days old and never recorded a check-in. Analytics data follows PostHog's standard retention; we don't extend it.

Anything you post on the feedback board is the one exception. It belongs to the account you made on the board, not to your Nonyxa account, so deleting Nonyxa doesn't take it down — a feature request would otherwise vanish out from under the people who voted on it. Ask us and we'll remove it.

Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, or hand it over in a portable form — and if you're in the EU/EEA/UK, to restrict or object to how we use it. You can delete your account and everything in it yourself, any time, from the app's Settings. For a copy of your data, email team@nonyxa.com and we'll take care of it. You can turn analytics off any time in Settings; doing so won't affect anything we did while it was on.

Children

Nonyxa isn't built for children. The app is not directed to anyone under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has given us data, email us and we'll delete it.

Changes

If we change how we handle your data in a meaningful way, we'll update this page and, where the law requires it, ask for your choice again.

Contact

Questions, or want to exercise any of the rights above? Email team@nonyxa.com.