App privacy
Short version: Nonyxa helps you quit nail biting with a daily photo check-in. To make that work we store your account, the hand photos you take, the nail crops we make from them, and a few measurements — all in your own private space. The part that looks at your hands runs on your phone, not on a cloud vision service. We use privacy-friendly analytics to improve the app, held to the same standard as our website. We don't sell your data and we don't run ad-tracking. Here's the detail.
What the app collects
- Your account. The email you sign in with, your time zone (so your day rolls over at the right moment for streaks and the compare), and your daily-reminder preference.
- Your hand photos. When you check in, you photograph your hands. We keep the original photos so you can look back at your history.
- Nail crops. From each photo, the app finds your fingertips and saves a small cropped image of each nail. These are what you swipe and what the day-to-day comparison shows.
- Measurements and labels. For each crop, a couple of quality numbers (how blurry it is, how confidently a hand was found) and the clean or damaged label you give it. These drive your streak, the compare, and your history.
- Usage analytics. Which screens you open, taps, and how the daily flow goes — tied to a random, anonymous ID, not your name. We use it to learn what's working and fix what isn't.
- Approximate location. Your country, derived from your IP address by our analytics, to understand where interest comes from. We don't store a precise location.
- Device and app info. Device type, operating system, and app version — the basics needed to keep the app working across phones.
Your photos are processed on your phone
The work of finding your hand and cropping each nail happens on your device, using MediaPipe — an on-device vision library bundled into the app. The models run entirely on your phone, so no outside company receives your photos to analyze them. After the crops are made, the original photos and crops are uploaded to our own storage so your history survives reinstalling the app and switching phones — but the analysis itself never leaves your phone.
Why we collect it, and the legal basis
- Account, photos, crops, measurements, labels exist to provide the service you signed up for — the daily check-in, the compare, your streak, your history. The legal basis is performing the contract you entered when you created an account, and our legitimate interest in running the app you asked for.
- Analytics, approximate location, device info exist to make the app better — nothing more. We collect these only with your consent: we ask when you set up the app, and you can turn analytics off any time in the app's Settings. The app works fully either way.
Who processes it
We keep the list of companies that touch your data short:
- Supabase — stores your account, photos, crops, measurements, and labels. Your data sits in storage partitioned per user, in a database only you (through the app) and we can read. Transfers are covered by Standard Contractual Clauses.
- PostHog — product analytics, hosted in the United States under Standard Contractual Clauses. We've turned off data sharing and selling, we don't link analytics to your identity, and any session replay we run masks every input. Same standard we hold on the website.
The vision that finds and crops your nails (MediaPipe) is a library bundled into the app and runs entirely on your phone — it isn't a company we send your photos to, so it isn't on this list.
How long we keep it
Your photos, crops, measurements, and account data stay until you remove them or delete your account — deleting your account erases all of it, right away and for good. Analytics data follows PostHog's standard retention; we don't extend it.
Your rights
Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, or hand it over in a portable form — and if you're in the EU/EEA/UK, to restrict or object to how we use it. You can delete your account and everything in it yourself, any time, from the app's Settings. For a copy of your data, email team@nonyxa.com and we'll take care of it. You can turn analytics off any time in Settings; doing so won't affect anything we did while it was on.
Children
Nonyxa isn't built for children. The app is not directed to anyone under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has given us data, email us and we'll delete it.
Changes
If we change how we handle your data in a meaningful way, we'll update this page and, where the law requires it, ask for your choice again.
Contact
Questions, or want to exercise any of the rights above? Email team@nonyxa.com.