Legal

Privacy Policy

Effective Date: 12 September 2026

We at Zulish Nail value your privacy and are dedicated to treating your personal information with care and respect. This Privacy Policy outlines how we collect, use, and protect your data to facilitate your bookings, provide home services, and communicate updates regarding your appointments. This policy applies strictly to the customers using the Zulish Nail platform and application. This Privacy Policy forms an integral part of the Zulish Nail Terms of Service, and your use of our platform signifies your acceptance of both these documents. They must be read in conjunction with each other.

1. Information We Collect

• Personal Information: Name, gender, delivery address, phone number, and contact details provided during registration.
• Account & Payment Information: Transaction history and preferred payment methods. Card and bank details are entered directly into our payment provider's secure checkout and are never received or stored by us.
• Usage & Log Data: Information on how you navigate our app, your IP address, browser type, and request timestamps.
• Device Permissions (Camera & Storage): With your explicit permission, we may access your device's camera and photo library strictly to allow you to upload or update your profile picture.
• Call Recordings: If you communicate with us via phone calls for bookings or customer support, we may record these calls for quality assurance, safety, and training purposes.

2. Location Data

To provide our home services efficiently and ensure timely arrivals, our app collects and uses your device's precise or approximate location.

• Foreground Tracking Only: For customers, location data is collected only when the app is active and in use. We do not track customer locations in the background when the app is closed.

3. How We Use Your Information

• To facilitate your bookings and connect you with Nail Professionals in your geographic area.
• To process payments and calculate service fees.
• To communicate with you regarding booking confirmations, updates, and promotional offers.
• To compile statistical profiles in an aggregated form for our business and marketing activities (this data does not identify you individually).

4. Cookies and Tracking Devices

• Analytics & Performance: We use crash reporting and performance diagnostics to find and fix errors in the app. We do not use advertising trackers, and we do not use your data to select or target advertising.
• Opt-Out Rights: Users have the right to opt out of receiving promotional emails or SMS by following the unsubscribe instructions included in those messages or by contacting our support team.

5. Legal Requirements and General Exceptions

If we are required to intercept, disclose, monitor, or store your Personal Information by law, to conduct our business, to secure our systems, or to enforce our own rights, we will do so in the manner prescribed by law.

Such interception or disclosure may take place without your knowledge. In such cases, we will not be liable to you or any third party for any damages arising from such disclosure.

6. Third-Party Sharing

We do not sell your personal data, and we do not share it for advertising. We share only the information a particular service needs in order to work, with the following providers:

• Razorpay — payment processing. Your card, UPI or net-banking details are entered directly into Razorpay's own secure payment sheet; they are never received, processed or stored by us.
• MSG91 — delivery of one-time passwords and transactional SMS. Receives your mobile number.
• Google — Firebase Cloud Messaging for push notifications (device token), Firebase Crashlytics for crash diagnostics (device model, operating system and a device identifier), and Google Maps, Places and Geocoding, which receive your precise location and the addresses you type in order to show artists near you, resolve your address and display your artist's arrival on a map.
• DigitalOcean — cloud hosting for our servers and database, and cloud object storage for uploaded files. See section 7 for where each of these is located.

We require each of these providers, by contract, to process your data only on our instructions and to apply appropriate security safeguards. We may also disclose information where the law requires it, as described in section 5.

7. Data Retention and Security Disclaimer

Data Security: We implement strict security measures to protect your data from unauthorized access. Our application servers and our primary database — which hold your account, bookings and addresses — are hosted in Bangalore, India. Files uploaded to the platform, including identity documents submitted by artists for verification, profile images and invoice PDFs, are held in cloud object storage located in Singapore. By using the service you consent to that storage outside India.

Liability Disclaimer: While we do everything we reasonably can to protect your privacy, we are not legally liable for any unauthorized or unlawful disclosures of your personal and confidential information made by external third parties (such as hackers or external servers) who are not subject to our direct control.

Data Breach Notification: In the unlikely event of a personal data breach that is likely to result in harm to your rights, we will promptly notify you and the relevant authorities (such as the Data Protection Board of India) in accordance with the timelines and procedures mandated by the Digital Personal Data Protection Act, 2023.

8. Account and Personal Data Deletion

Deletion Request: You can request the deletion of your account and associated personal data directly from the App’s profile section or by sending an email to [email protected]. Please allow up to 10 working days to process your request.

Withdrawal of Consent: You have the right to withdraw your consent for the processing of your personal data at any time by contacting our support team. Please note that withdrawing consent may restrict our ability to provide you with our services.

Data Retention Exceptions: Upon deletion of your account, please note that transactional data, invoices, and billing history generated on the Platform will be retained by us for a period of up to 7 years, or as otherwise mandated by applicable Indian tax and corporate laws.

9. Unauthorized Access and Hacking

We take the security of our users' information seriously and strictly prohibit any unauthorized attempts to access, disrupt, or interfere with our app, servers, or associated networks.

Any attempt to hack, exploit vulnerabilities, or engage in malicious activities will be considered a severe violation. We reserve the full right to cooperate with law enforcement authorities and pursue strict legal action against anyone involved in compromising the security of our systems.

10. Children's Privacy

Our platform and services are intended for users who are 18 years of age or older.

If a service is booked for a minor under the age of 18, an adult must be present for the entire duration of the service.

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our information practices.

Material changes will be highlighted in the app before they take effect. Your continued use of the platform after such notice means you accept and agree to the updated Privacy Policy.

12. Grievance Redressal

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection laws, if you have any discrepancies or grievances regarding the processing of your information, you can contact our Grievance Officer at: