Privacy Policy

Last Updated: October 21, 2026

Qubin GmbH ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the NailMe mobile application ("App").

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an Account: Name, email address, phone number, profile photo
• Set Up Profile: Bio, business information, location, service offerings
• Post Content: Photos, videos, text, comments, reviews
• Projects (Professional References): Role, workplace, techniques, duration and completion date of work you mark as a project, your job title and years of experience, and your confirmation that the people shown or the owners agree to the publication
• Reviews: The star rating, tags and text of reviews you write about a booked appointment, together with the booked service and the appointment date; reports you submit about a review (reason and optional details); and, if you offer services, your public replies to reviews
• Forms and Consent Forms: If a service provider assigns a form to a service you book, your answers, your signature (as an image), the date and time you signed and the version of the form. Depending on what the provider asks, this can include your date of birth and health information such as allergies, skin conditions or medication
• Gift Vouchers: When you buy a voucher, the amount, the recipient’s name, your message, your name and email address, and later the redemptions (date and amount)
• Waitlist: The days and optional time window you join a service provider’s waitlist for
• Client Records (Service Providers): If you offer services, the contact details, notes, custom fields, visit notes and photos you store about your customers
• Book Services: Booking details, preferences, special requests
• Make Purchases: Subscription information (payment processing handled by Apple/Google)
• Contact Support: Messages, feedback, support requests

1.2 Information Collected Automatically

When you use the App, we automatically collect:

• Device Information: Device model, operating system, unique device identifiers, mobile network information
• Usage Data: App features used, time spent, interactions, search queries
• Location Data: GPS coordinates, IP address-based location (with your permission)
• Log Data: Crash reports, error logs, performance data
• Camera and Photos: Photos you take or select for upload (with your permission)

1.3 Information from Third Parties

We may receive information from:

• Social Media: Profile information when you sign in with Google or Apple
• Service Providers: Analytics providers, cloud storage providers
• Other Users: When others interact with your content or mention you

2. How We Use Your Information

We use the collected information for:

2.1 Providing Services

• Create and manage your account
• Enable communication between users and service providers
• Process bookings and appointments
• Send appointment reminders 24 and 2 hours before a confirmed booking, rebooking reminders and waitlist notifications (by push notification, or by email if push is not available)
• Display content and recommendations
• Provide customer support

2.2 Improving and Personalizing

• Analyze usage patterns and preferences
• Personalize content and recommendations
• Improve App features and functionality
• Develop new features and services

2.3 Marketing and Communications

• Send notifications about bookings and messages
• Provide updates about the App
• Send promotional offers (with your consent)
• Conduct surveys and request feedback

2.4 Safety and Security

• Detect and prevent fraud and abuse
• Enforce our Terms of Use
• Protect user safety
• Comply with legal obligations

3. Third-Party Services

The App integrates with third-party services that may collect information about you:

Service	Purpose	Privacy Policy
Firebase (Google)	Authentication, cloud storage, analytics, push notifications, crash reporting	Firebase Privacy
Google Maps	Location services, mapping	Google Privacy
RevenueCat	In-app subscription management	RevenueCat Privacy
Stripe	Online deposits and gift vouchers, payouts to service providers	Stripe Privacy
Resend	Sending emails (appointment reminders, form links, gift vouchers, invoices)	Resend Privacy
Apple Sign-In	Authentication	Apple Privacy
Google Sign-In	Authentication	Google Privacy

3.1 Online Deposits (Stripe)

If a service provider requires a deposit, you pay it on a checkout page hosted by Stripe Payments Europe, Ltd. (or the Stripe entity responsible for your region). Card and other payment details are entered directly with Stripe and never reach our servers. We transmit the booking reference, the service name, the amount and the currency to Stripe and receive the payment status, which we store with the booking so that the deposit can be refunded or retained according to the cancellation rules.

Service providers who accept deposits open their own Stripe account. Stripe collects the information it requires by law (for example identity and bank details) directly from the provider; we only store the account ID and its status. Stripe processes this data as an independent controller under its own privacy policy. The service provider is the seller of the service and the recipient of the payment.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

• Profile information is visible to other users
• Content you post is publicly visible
• If you link a business to a project, that business sees the project (image, description, your name and profile photo) and can confirm or decline it. A confirmed project shows the business’s name and also appears on that business’s public profile (“Work by our team”). The business can withdraw its confirmation at any time; deleting the project also removes it from the business’s profile.
• Reviews are public. A review shows your first name and the initial of your last name, your profile photo, the rating, tags, text, the booked service and the date, in the app and on the reviewed business’s public web profile. Only the customer of a confirmed booking can review it, once per booking. The reviewed business (and the group it belongs to) is notified and can reply publicly; you are notified about the reply. You can edit or delete your review at any time. Reports are visible only to our moderation team; a review that has been reported several times is hidden until we have checked it, and we may remove reviews that break our rules.
• Booking details are shared with service providers

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud hosting (Firebase, Google Cloud)
• Email delivery (Resend)
• Analytics and performance monitoring
• Customer support tools
• Payment processing (subscriptions: Apple/Google; booking deposits and gift vouchers: Stripe)

4.3 For Legal Reasons

We may disclose information if required by law or if we believe it's necessary to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or security issues
• Protect user safety

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 With Your Consent

We may share information for other purposes with your explicit consent.

4.6 Studio Tools: Client Records, Forms and Vouchers

Service providers can keep client records, send forms and sell gift vouchers in the App. For this data the service provider decides what is collected and why; we store and process it on the provider’s behalf.

• Client records are visible only to the service provider who created them. Photos in a client record are stored privately and are not shown in the feed or on public profiles.
• Forms are only requested for services the provider has assigned a form to. Once the booking is confirmed, you receive a link by push notification or email and fill in the form in the App or in the browser, or on the provider’s device in the studio. The link is valid until 30 days after the appointment. The completed form is saved as a PDF that cannot be changed afterwards; you and the service provider can view it, with the booking and in the provider’s client record. We process health information in a form only to make it available to the service provider for your appointment, on the basis of your explicit consent, which you give by completing and submitting the form.
• Gift vouchers are paid on a checkout page hosted by Stripe (see section 3.1); the payment goes to the service provider. The voucher PDF is sent to your email address. You and the service provider can view the voucher; the provider sees its remaining value and redemptions.
• Reminders and the waitlist use your booking data. Service providers can switch reminders and the waitlist off; you can switch rebooking reminders off in the settings and remove waitlist entries at any time. Waitlist entries expire automatically once the requested days have passed.

5. Data Retention

We retain your information for as long as necessary to:

• Provide the App services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information through the App settings.

6.2 Delete Your Account

You can delete your account at any time through the App settings. This will permanently delete your personal information, subject to legal retention requirements.

6.3 Location Data

You can control location permissions through your device settings. Disabling location access may limit certain features.

6.4 Camera and Photos

You can control camera and photo library permissions through your device settings.

6.5 Push Notifications

You can manage push notification preferences in the App settings or your device settings.

6.6 Marketing Communications

You can opt out of promotional emails by following the unsubscribe link in the email.

6.7 Data Portability

You have the right to request a copy of your data in a structured, machine-readable format.

6.8 Rights for EU/EEA Users (GDPR)

If you are in the EU/EEA, you have additional rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

6.9 Rights for California Users (CCPA)

If you are a California resident, you have rights to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Access your personal information
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

7. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

8. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure cloud infrastructure (Firebase/Google Cloud)

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and European Union. These countries may have different data protection laws than your jurisdiction.

For EU/EEA users, we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses.

10. Cookies and Tracking Technologies

The App uses local storage and similar technologies to:

• Remember your preferences
• Authenticate your session
• Analyze usage patterns
• Provide personalized content

You can manage these through your device settings, though some features may not function properly if disabled.

11. Analytics and Advertising

We use Firebase Analytics to understand how users interact with the App. This includes tracking:

• App opens and usage patterns
• Feature engagement
• User demographics (age range, gender, location)
• Device and technical information

We do not currently display third-party advertising in the App. If this changes, we will update this policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy in the App
• Sending an email notification
• Displaying a prominent notice in the App

Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Qubin GmbH
Email: privacy@qubin.de
Support: support@qubin.de
Website: https://qubin.de

For GDPR-related inquiries, you may also contact our Data Protection Officer at: dpo@qubin.de

14. Supervisory Authority

If you are in the EU/EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

15. Apple-Specific Information

If you download the App from the Apple App Store:

• Apple is not responsible for any data collection or privacy practices
• Subscription payments are processed by Apple according to their privacy policy
• You can manage Apple Sign-In data sharing through your Apple ID settings
• Apple may collect technical diagnostic and usage data as described in their privacy policy

16. Your Consent

By using the App, you consent to this Privacy Policy and our collection, use, and sharing of your information as described herein.