Lails Privacy Policy

Draft, last updated 3 November 2026. This version applies to the Lails test app. It will be replaced by the final version before Lails launches.

Effective date: Set at launch

Who we are: Lails is run by Steve Hoang Nguyen, Sacramento, California, USA ("Lails", "we", "us").

Contact: lailssupport@gmail.com

1. The short version

• Lails is a social app for nail technicians. You must be 18 or older.
• We collect what the app needs to work: your email, date of birth, one profile picture, your approximate area and city, and what you post and send.
• We never collect your precise GPS location or your street address.
• If you don't share your phone location, we use your internet (IP) address to guess your city, and our code doesn't save it.
• We don't sell your data, and the app has no ads and no analytics.
• You can delete your account and your data in the app, at any time.

2. Who can use Lails

Lails is only for people who are 18 or older. We ask for your date of birth when you sign up, also if you use Google or Apple, and we refuse anyone under 18, in the app and on our servers. The date of birth is what you tell us. We don't check ID. If we learn that someone under 18 has an account, we ban it and delete it. If you think a member is under 18, report their profile ("under 18" is a report reason).

3. What we collect, and why

3.1 Your account

• Email address and password. To create your account, verify it, log you in and reset your password. We store only a scrambled (hashed) version of your password.
• Google or Apple sign-in. If you use them, Google or Apple tells us an account id and your email address. Apple may give a private relay email instead. We ask Apple for your email only, not your name. Google normally also shares your name and profile picture link, and our login provider saves what Google sends. We don't use your Google name or picture in Lails.
• Date of birth. To check you are 18 or older. It is never shown to other members. It can't be changed after sign-up. Coming soon: Se duyên shows your age in whole years, worked out from your date of birth, never the date itself.
• Your phone's time zone name (for example "Asia/Ho_Chi_Minh"), so the 18+ check uses today's date where you are. If you sign up with email, it is kept with your account details. If you sign up with Google or Apple, it is used for the check and not kept.
• App language (English or Vietnamese), so the app and our emails are in your language. Other members see a small language label on your profile.
• Agreements. The version and time you agreed to the profile picture text, and the time you tapped "I understand" on the Chợ chồm hổm, Mướn phòng and Tìm ông bà nội notices. Coming soon: the version and time you agreed to these terms and the Community rules; the version and time you agreed to the Se duyên text.

3.2 Your profile picture

To finish sign-up you add exactly one profile picture from your gallery. It must show you (a clear face photo or a full-body photo), so members know who they are talking to.

• Members who finished sign-up can see it. People who aren't logged in can't. Members who can see it could save it or take a screenshot.
• It is kept in private storage and shown through links that expire after a few minutes.
• We remove location data (GPS) from the photo on your phone before it is uploaded.
• We keep a fingerprint (a SHA-256 hash) of the original photo file, only to stop the same photo being added twice. Members can't see it.
• We don't use your picture for face recognition. We don't make or keep a face template, and we don't compare faces.
• Coming soon: an automatic check on your phone (Google ML Kit, on-device) looks at each profile and Se duyên photo to check it shows exactly one person with a visible face. The check runs only on your phone. No face data leaves the phone or is stored by us. Coming soon: PLANNED – before launch we check Google's ML Kit data disclosure and add any usage data it sends.
• You can replace your picture at any time. You can't remove it without deleting your account, because every profile has one.

3.3 Face ID and fingerprint unlock (optional)

You can choose to unlock Lails with Face ID, Touch ID or your fingerprint. Your phone does the check. Lails only learns whether it passed. We never see or save your face or fingerprint. The on/off setting is saved on your phone only.

3.4 Your area and city

Lails shows how far away listings, ads and (later) singles are, without ever showing an address.

• At sign-up we ask for your phone's approximate location only (never precise). If you say no, you type your city instead.
• Your phone sends its approximate reading to our server. The server immediately rounds it to the center of a square on a fixed map grid (about 4.4 km wide) and finds the nearest city. We save only that square's center and the city name. We don't save the reading itself.
• Other members see only your city and country and a rounded distance (for example "about 15 km" or "less than 5 km"). They never see coordinates.
• Coming soon: Se duyên uses bigger squares (about 10 km) and coarser rounding.
• Your listings, room ads and job ads use the same area by default. You can pick another city for each one.
• You can change your area in Settings, at most 3 times a day. We keep the times of your changes for 24 hours to apply this limit.
• We also record whether your area came from your phone, a typed city, or the IP guess below.

3.5 The one-time IP city guess

If you don't share your phone location, we pre-fill the city field with a guess from your internet (IP) address. You always confirm or change it.

• The guess is made once each time you open the city field (at sign-up, or later in "Your area").
• Our server reads the IP address of that one request, looks it up in a city table stored in our own database, and sends back only a suggested city.
• Our code doesn't store or log the IP address, and it isn't sent to any other company for this.
• Note: our hosting provider, Supabase, records IP addresses in its own request logs and login records, outside our code (see sections 6 and 7). On the planned Supabase Pro plan these logs are kept for 7 days (Supabase's published plan limits, 2026-11-03; check again at launch).
• The city and IP data come from free files by GeoNames and DB-IP, which we store ourselves. We send them nothing.

3.6 What you post and send

• Profile details: display name, optional bio, specialties. Members can see them.
• Posts: captions, photos and videos, with location data removed. Members can see them and could save them.
• Likes, comments and follows. Members can see comments and like counts. Nobody can see a list of who liked a post. Follower and following counts show on profiles; only you see your own follows list.
• Tám messages: private messages between two members. Only the two of you can read them in the app. They are not end-to-end encrypted. They are protected by access rules on our servers, and Lails can technically read them (for example to investigate a report). Our provider's live message service keeps a copy for up to 3 days.
• Chợ chồm hổm listings (photos, title, description, price, category, city).
• Tìm ông bà nội job ads (ad type, kinds of work, schedule, title, description, city). Your name and profile picture show on your ad, also on "looking for work" ads.
• Mướn phòng room ads (ad type, title, description, city, optional photos). Coming soon: the screens are not built yet.
• Shops you add to Shop Reviews (name, optional street name, city). Nobody is shown who added a shop.
• Coming soon: Shop reviews. Reviews are shown without the author's name. A shop's reviews only show once it has at least 3. Lails itself can see who wrote a review, and the owner sees the author's name when a review is reported.
• Coming soon: Se duyên. If you join (it's optional), we collect 3 to 6 photos of you, "I am" (woman, man or non-binary), "Show me" (women, men or everyone), an optional "About me", and an age range filter. See section 4.

3.7 Safety records

• Reports: the reason and an optional note. The reporter is never shown to anyone, also not to the owner.
• Blocks: who you blocked, and their name as it was then (for your Blocked list). A block also removes your likes and comments on each other's posts, and unblocking doesn't bring them back.
• Bans: the date, the owner who banned, and an optional private note. See section 7 for what we keep after a banned account is deleted.
• Coming soon: a word filter refuses public text that contains words on a banned list. It doesn't read Tám messages.

3.8 What we don't collect

No precise GPS location. No street address. No phone number. No contacts. No camera or microphone access (photos come from your gallery). No advertising id. No analytics or tracking tools.

4. Sensitive information

Some data can be "sensitive" under privacy laws:

• Photos of your face. We don't use them for face recognition (see 3.2). Some laws (for example in Illinois, Texas, Washington and the EU) have special rules for face data.
• Coming soon: Se duyên "I am" and "Show me". Together they can reveal your gender identity and sexual orientation. We ask for them only if you join Se duyên, with a separate consent screen. "I am" shows on your Se duyên profile. "Show me" is never shown to anyone; it is used only to decide which singles see each other. Leaving Se duyên or deleting your account removes them, with your Se duyên photos and your Se duyên consent record (Task 85).
• Coming soon: Se duyên photos are shown only to other Se duyên members, and to the owner only while your Se duyên profile has an open report.

5. How we use your data

• To run the app: your account, profile, posts, messages, listings and ads.
• To show distances without showing where you live.
• To keep members safe: the 18+ check, reports, blocks, bans and stopping banned people from signing up again.
• To send you account emails (verification, password reset). Coming soon: push notifications that say "New message from <name>", never the message text, with an on/off switch.
• Coming soon: to translate a post or comment when you tap "Translate".

We don't use your data for advertising, we don't sell it, and we don't make automatic decisions about you that have legal effects.

6. Who we share it with

We share data only with the services that run Lails:

• Supabase stores everything: database, files, logins, server functions and live messages. Its servers for Lails are in the United States (Amazon Web Services, region us-east-1, N. Virginia). Supabase and its providers (for example Cloudflare) keep their own request logs, which include IP addresses.
• Expo builds the app and delivers app updates. Each time the app opens, it asks Expo's servers for updates. Expo then sees your IP address, your phone's platform (for example iOS), the app version and update channel, a random install id made by the update tool (not linked to your Lails account), and, if the app crashed last time, the error message. Expo gets no account details or content.
• Apple and Google, if you sign in with them, and Apple for the App Store.
• Our email sender (today Supabase's built-in sender; later our own email provider (coming soon)) gets your email address to send account emails.
• Coming soon: Google Cloud Translation gets the text of a post or comment when you tap "Translate".
• Coming soon: Expo's push service, Apple's push service (iPhone) and Google's Firebase Cloud Messaging (Android) get a token for your phone and the notification text ("New message from <name>"). Expo passes the notification to Apple or Google.

Other members see what is described in section 3. We may also share data if the law requires it, to protect someone's safety, or if Lails is sold or reorganized (we would tell you first ).

7. How long we keep it

• Most data: as long as your account exists, or until you delete it (a post, a listing, an ad).
• Expired listings and ads are hidden after 30 days. Coming soon: they are deleted 90 days after they expire if you don't renew them.
• Unfinished sign-ups: Google and Apple sign-ups that stop before the date of birth step are deleted after 24 hours. Coming soon: email sign-ups never verified are deleted after 7 days; verified but never finished, after 30 days.
• Reports are kept until the reported item or one of the accounts is deleted, also after a report is dismissed.
• Banned accounts: if a banned account is deleted, we keep a scrambled code (a keyed one-way hash) of its email and Google or Apple account, with no link to any other data, so the same email or account can't sign up again. Today this is kept with no end date. Because we hold the key, we can check whether a given email is on the list.
• Under-18 Google / Apple block: if someone under 18 tries to sign up with Google or Apple, we delete the account at once and keep only a scrambled code of the Google or Apple account and the date they turn 18. A daily job deletes it on that date.
• Login records: our login provider's audit log keeps your email address and IP address for sign-ups and logins, and login sessions keep the IP address and device type, and it is not deleted when you delete your account today.
• Backups: deleted data may stay in our provider's backups for up to 7 days (daily backups on the planned Supabase Pro plan).
• Request logs: our provider's request logs, which include IP addresses, are kept for 7 days (planned Supabase Pro plan).

8. Your rights and choices

• See and change your data. Your profile, area, picture, posts, listings and ads are all in the app, and you can change them there. To ask for a copy of your data, write to lailssupport@gmail.com.
• Delete your account in the app: Profile tab → Settings → Delete account. "Delete account" is also on the sign-up screens, so you can leave before you finish. You confirm with a fresh login (your password, or Google or Apple again) and by typing DELETE. This deletes your account and everything listed in DATA_SUMMARY.md: profile, profile picture, Se duyên photos, posts and their photos and videos, comments, likes, follows, blocks, reports, listings, room ads, job ads and the messages you sent. The person you chatted with keeps their own messages. Shops you added stay (without your name). For Apple accounts we also ask Apple to remove Lails' access. A suspended (banned) member can still delete their account from the suspension screen.
• Location. You can say no to phone location and type your city instead. You can change your area in Settings.
• Optional features. Face ID or fingerprint unlock, (coming soon) Se duyên and (coming soon) push notifications are optional and can be turned off.
• Depending on where you live, you may also have the right to correct data, object, restrict use, move your data, withdraw consent, and complain to a privacy regulator. Write to lailssupport@gmail.com. We answer within days.

9. Security

• Data is sent over encrypted connections (HTTPS).
• Photos and videos are in private storage, shown only through short-lived links.
• Strict database rules decide who can read each record. Members can't read other members' private fields, even with technical tools.
• Your login on the phone is stored in the phone's secure storage.
• Deleting an account needs a fresh login (within 5 minutes).
• No system is perfectly safe. If a data breach affects you, we will tell you and the authorities as the law requires.
• Tám messages are not end-to-end encrypted (see 3.6).

10. International users

Lails is used worldwide, mainly in the United States and Vietnam. Your data is stored in the United States (Amazon Web Services us-east-1, N. Virginia, through Supabase). If you use Lails outside the United States, your data is sent there.

• United States:
• Vietnam:
• European Union / United Kingdom (if we publish there):

11. Children

Lails is not for anyone under 18. We don't knowingly collect data from children. See section 2.

12. Changes

We will update this policy when the app changes. If a change is important, we will tell you in the app before it takes effect, and ask you to agree again where the law requires it. The date at the top shows the latest version.

13. Contact

Questions, requests or complaints: lailssupport@gmail.com.

Steve Hoang Nguyen, Sacramento, California, USA.