Privacy Policy
How we handle your photos and your data
Privacy Policy
A photo of your hand is personal. This page explains exactly what we do with it, in plain terms, with no hedging.
Transparency
Every place your photo travels to is listed below. Nothing is collected silently.
Security
Uploads are sent over HTTPS. Your API credentials and ours never reach the browser.
Control
You choose what to upload. You can ask us to delete your account and its data at any time.
Your photos
What happens to them
When you press Generate, the two images you picked are sent from your browser to our server. Our server forwards them to a third-party AI image model provider, which produces the preview. The finished preview is returned to your browser and shown to you.
How long we keep them
We do not keep your hand photo or reference image after the request finishes. They are held in memory only long enough to produce the preview and are then discarded. The preview itself is returned to your browser and is not stored on our servers either — if you close the page, it is gone.
What we do not do
- • We do not use your photos to train AI models.
- • We do not sell your photos or share them for advertising.
- • We do not publish your photos anywhere.
- • We do not require an account to try a colour. If you do create one, your plan and your usage counts are tied to it — and anything you upload stays visible only to you.
Other information we collect
If you create an account
- • Account details: your email address
- • Billing records: handled by our payment provider, Creem. We never see or store your card details.
- • Usage counts: how many previews you have used, so we can apply your plan’s limits.
Collected automatically
- • IP address: used to apply rate limits that stop the service being abused. We do not use it to build a profile of you.
- • Device and browser type: for diagnosing faults and keeping the site working across browsers.
Who else is involved
- • AI image model provider — receives your two images for the sole purpose of generating the preview. Their own terms govern their handling of that data.
- • Supabase — hosts our database and handles account sign-in.
- • Creem — processes payments and holds your billing information.
- • Hosting provider — serves the site.
We do not share your data with anyone else, and we do not sell it.
Your rights
- • Access — ask what we hold about you.
- • Deletion — ask us to delete your account and everything attached to it.
- • Correction — ask us to fix anything inaccurate.
- • Objection — tell us to stop processing your data, and we will, though some processing is needed for the service to work at all.
To exercise any of these, contact us at support@trynailcolor.com.
Children
This service is not intended for anyone under 13, and we do not knowingly collect their data. If you believe a child has used the service, contact us and we will remove the data.
Changes to this policy
If we change how we handle your data — for example, if we introduce an optional saved history — this page will be updated before that change takes effect, and the date below will move.
Last updated: October 1, 2026