Noxi Privacy Policy

1. Types of Information We Collect

Noxi ("we", "us", or "our") is committed to protecting your privacy. We collect the following types of information to provide and improve our nail art & portrait synthesis service:

• Personal Identification Information: When you create an account, we may collect your email address, username, and password (encrypted with industry-standard hashing).
• Image Content: Hand nail art photos and facial portrait photos you upload to Noxi for synthesis (processed locally on your device whenever possible to protect privacy).
• Device Information: Basic device details including device model, operating system version, language preference, and unique device identifiers (only used for service optimization).
• Usage Data: Anonymous information about how you use our App, such as preferred nail art styles, makeup recommendation selections, and feature usage frequency (aggregated for service improvement).
• Preference Data: Your saved beauty preferences (e.g., favorite nail art colors, makeup styles) to personalize recommendations.

2. Purpose of Information Use

We use the collected information only for the following legitimate purposes:

• To provide and maintain our core service: intelligent synthesis of nail art and portrait photos into same-frame effects
• To generate personalized recommendations for nail art, makeup, and hairstyle matching
• To optimize the accuracy of our image synthesis algorithms and beauty recommendation engine
• To personalize your experience (e.g., remembering your saved preferences and synthesis styles)
• To diagnose and fix technical issues that may affect App performance
• To communicate with you about service updates, important notices, or support requests
• To comply with legal obligations and protect our legitimate business interests

3. Third-Party Service Data Processing

Noxi may integrate with third-party services to enhance functionality, and these services may process your data in accordance with their own privacy policies:

• Payment Processors: For premium features, third-party payment providers (e.g., Apple Pay, Google Pay) process your payment information; we do not store your full payment details (e.g., credit card numbers).
• Analytics Services: We use anonymous analytics tools (e.g., Firebase Analytics) to understand App usage patterns and improve user experience (no personal data is shared with these services).
• Cloud Storage: Processed images may be temporarily stored on secure cloud servers only with your explicit consent, for syncing across your devices (encrypted at rest and in transit).

We only collaborate with third-party service providers that adhere to strict data protection standards and are contractually obligated to protect your privacy.

4. Information Sharing Scenarios

We will never sell your personal information to third parties for commercial purposes. We may share your information only in the following limited circumstances:

• With your explicit consent (e.g., sharing synthesized images directly to social platforms via your authorization)
• To comply with applicable laws, regulations, legal processes, or governmental requests
• To protect the rights, property, or safety of Noxi, our users, or the public (e.g., preventing fraud or illegal activities)
• In connection with a business transaction (e.g., merger, acquisition, or sale of assets), where your data would be transferred as part of the transaction (with prior notice and opt-out rights if required by law)

5. Security Measures

We implement industry-standard security measures to protect your information from unauthorized access, disclosure, alteration, or destruction:

• End-to-end encryption for image uploads and storage (where applicable)
• Secure password hashing (bcrypt algorithm) for account credentials (never stored in plain text)
• Regular security audits and vulnerability assessments of our systems and infrastructure
• Access controls that limit employee access to personal data on a need-to-know basis
• Automatic deletion of temporary image data after 24 hours (unless you explicitly choose to save it)
• Secure data transmission via HTTPS protocol for all App communications

While we take reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data, but we commit to promptly notifying you of any data breach as required by applicable law.

6. User Data Rights

You have the following rights regarding your personal data collected by Noxi, in accordance with global privacy regulations (e.g., GDPR, CCPA, CPRA):

• Access: Request a complete copy of all personal data we hold about you
• Correction: Update or correct inaccurate or incomplete personal information
• Deletion: Request the permanent deletion of your account and all associated data (including uploaded images)
• Restriction: Request to restrict processing of your data in certain circumstances (e.g., while verifying data accuracy)
• Data Portability: Request to receive your data in a machine-readable format (e.g., JSON, CSV)
• Opt-out: Opt out of non-essential data collection and personalized recommendations

To exercise these rights, please contact us at Noxi@gmail.com with your request, and we will respond within 30 days in accordance with applicable privacy laws.

7. Children's Privacy Protection

Noxi is not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.

If we become aware that we have collected personal information from a child without verifiable parental consent, we will immediately delete such information. If you are a parent or guardian and believe we may have collected data from a child, please contact us at Noxi@gmail.com to request deletion.

8. Policy Update Mechanism

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements:

• We will notify you of material changes by posting the updated policy in the App, sending an email notification to registered users, or displaying a prominent notice within the App.
• Updated policies will take effect 30 days after notification, unless required otherwise by applicable law.
• Your continued use of Noxi after the effective date of the updated policy constitutes your acceptance of the changes.
• We encourage you to review this Privacy Policy periodically to stay informed about our data practices and privacy protections.