Nail & Tally Privacy Policy
This Privacy Policy explains how Nail and Tally LLC ("Nail & Tally," "we," "us," or "our") collects, uses, shares, and protects information when you use the Nail & Tally mobile application and related services (the "App" or "Service").
Nail & Tally is a mobile inventory management tool built for construction companies. It is a workplace tool: most people who use it do so because their employer signed up for Nail & Tally and gave them an account.
Please read this policy carefully. If you do not agree with it, do not use the App.
1. The short version
We will keep this plain. The full detail is below.
- We collect the basics needed to run a workplace inventory app: your name, email, a hashed password, your company's name, and your permission level in the App.
- We collect what you do in the App: inventory counts, transfers, pull lists, notes, vehicle records, and videos you attach to items.
- We do not track your location. The App never asks for or reads your device's GPS.
- We do not use any analytics or ad-tracking tools, and we do not sell your data. Ever.
- We use one third-party tool (Sentry) to catch crashes and errors so we can fix them. It is set up to avoid collecting personal information, and it is not analytics or advertising. See Sections 3 and 8.
- Your company's data is walled off from every other company's data at the database level.
- If you use Nail & Tally through an employer, your employer controls the account and can see your activity in the App.
2. Who controls your information (employer and employee)
Nail & Tally is sold to businesses. When a construction company signs up, that company is our customer. The company's owners, managers, and field workers use the App under accounts tied to that company.
This matters for your privacy:
- The company controls the account. The company decides who gets an account, what permission level each person has, and when an account is removed. Administrators within a company can see App activity within that company, including who logged an inventory count, who made a transfer, and who created or was assigned a pull list.
- Nail & Tally acts as a service provider to the company. For most of the information in the App, we process it on the company's behalf so we can provide the Service. The company is responsible for how it uses that information and for telling its workers how it monitors App activity.
- For your basic account information (your name, email, and password), Nail & Tally is responsible for protecting it as described in this policy.
If you have questions about how your employer uses Nail & Tally, ask your employer. If you have questions about how Nail & Tally itself handles data, contact us using the details in Section 16.
3. Information we collect
Account information. When you, or an administrator at your company, create your account, we collect:
- Your full name
- Your email address (this is also your login ID)
- A password, stored only as a secure hash: we never store or see your actual password
- Your company's name
- Your role in the App: "admin," "manager," or "field worker." This is a permission level inside the App, not a job title.
Information created when you use the App. As you work in Nail & Tally, we store the records you create, including:
- Inventory counts, transfers, locations, items, and pull lists
- An activity record showing which user performed an action: for example, which user logged a count, made a transfer, or created a pull list
- Free-text notes you type into notes fields on counts, transfers, maintenance logs, pull lists, and line items. You can type anything into these fields, so please do not enter sensitive personal information you do not want stored.
- Vehicle records in the trucks feature, including a vehicle's license plate and VIN (vehicle identification number)
- Videos you record or select and attach to an inventory item
Device and notification information. If you allow push notifications, we store:
- A push notification token, which lets us deliver notifications to your device
- A short device description made up of your device's operating system name and version (for example, "ios 18.2"). We do not collect your phone's model or the App's version number on our servers.
Information our infrastructure providers collect automatically. Our login provider keeps standard sign-in records as part of running the Service. These records can include the time you last signed in and, in its internal security logs, the IP address you connected from. This is normal infrastructure behavior, not data the App was built to collect, but you should be aware of it.
Diagnostic and error data. To find and fix crashes and bugs, both the App and our web dashboard automatically send an error report to a third-party monitoring service (Sentry) when something goes wrong. These reports contain technical diagnostic information: the error or crash itself, a stack trace, and basic technical context such as the operating system and version and the sequence of in-App events leading up to the problem. We configure this service to minimize personal data: we do not send default personal identifiers, we strip your IP address and email from mobile error reports, and we remove cookies and authorization headers from web error reports before they are sent. We do not use session replay, and we do not use it for performance tracking or analytics. Because an error report captures what was happening at the moment something failed, it is possible for incidental information (for example, text you had typed into a notes field) to appear in a report. We use this data only to keep the Service working. Sentry processes and stores this data in the United States; see Section 8.
4. Information we do NOT collect
We want to be just as clear about what we do not do:
- We do not track your location. The App has no location feature installed. It never reads your device's GPS (not while you are using the App and not in the background) and it never asks for location permission.
- We do not collect phone numbers, job titles, dates of birth, your home or personal address, or payment or credit card information.
- We do not collect your contacts or anything from outside the App.
- We do not use any analytics tools (such as Google Analytics, Firebase, Mixpanel, or similar) and no user-behavior or ad tracking.
- We do not use any advertising or tracking software, and we do not sell your personal information.
5. A note about location coordinates
Because we said we do not track your location, we want to head off any confusion. A company can store map coordinates for one of its job sites or warehouses as part of a location record, the same way it might store a street address. Those coordinates describe a place the company operates, entered as business data. They are not a record of where a person is, and the App does not generate them by reading anyone's device. Nail & Tally does not track people.
6. How we use information
We use the information above to:
- Create and run your account and your company's workspace
- Provide the core inventory features: counts, transfers, locations, items, pull lists, videos, and vehicle records
- Show the correct information to the right people based on company and permission level
- Send push notifications you have opted into (see Section 7)
- Keep the Service secure, investigate misuse, and diagnose crashes, errors, and other problems (see the diagnostic and error data described in Section 3)
- Comply with our legal obligations
We do not use your information for advertising, and we do not sell it.
7. Push notifications
If you allow notifications, Nail & Tally can send you push notifications. Today there is exactly one kind: a notification when a pull list is created or assigned. If a list is assigned to you, you are notified; if a list is created without an assignee, active users in your company are notified. We do not send marketing or promotional push notifications.
To deliver a notification, we send the notification text and your device's push token to the Expo push notification service, which passes it to Apple's or Google's notification systems. You can turn notifications off at any time in your device settings; doing so removes your push token from our records on your next sign-out.
8. How we share information
We do not sell your personal information, and we do not share it for advertising. We share information only as described here:
- With your company. Other users in your company (particularly administrators) can see App activity within that company, as described in Section 2.
- With service providers that run the App for us. We rely on a small number of infrastructure providers:
- Supabase: provides our database, user authentication, and file storage for videos.
- Amazon Web Services (AWS): Supabase runs on AWS, so data is physically stored on AWS infrastructure.
- Expo: operates the push notification service that delivers notifications to your device.
- Sentry (Functional Software, Inc.): provides crash and error diagnostics for the App and the web dashboard, configured to minimize personal data (see Section 3). Diagnostic data is processed and stored in the United States.
- Our login provider also sends account emails, such as a sign-up confirmation email and a teammate-invitation email.
- With the app stores. Apple's App Store and Google Play distribute the App and collect their own download and device information under their own privacy policies.
- For legal reasons. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and property of Nail & Tally, our users, or the public.
- In a business transfer. If Nail & Tally is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this policy or notify you of any change.
9. How your data is kept separate and secure
Company separation. Nail & Tally is a multi-company app, and keeping companies apart is built into the database itself. Every data table uses database-level Row-Level Security, enforced by the database, not just by the App. Each request is checked against the signed-in user's company, so one company cannot read or change another company's data. Within a company, field workers see only the locations they are assigned to and the items and activity tied to those locations; administrators see everything in their own company.
Encryption. Information sent between the App and our servers travels over encrypted connections (HTTPS/TLS). Stored data is encrypted at rest by our infrastructure providers as a standard platform feature, and video files are kept in private storage that is not publicly accessible. Passwords are stored only as secure hashes.
No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.
10. How long we keep information, and what happens when an account is deleted
We keep information for as long as it is needed to provide the Service and to support your company's use of Nail & Tally.
It is important to understand the difference between your personal account information and the company's records, because they are treated differently:
- Your personal account information: your name, email, and login. If your account is deleted, this is removed and you can no longer sign in to Nail & Tally.
- The company's activity and inventory records: the record that something happened in the App, including which user performed an action and when (for example, that a particular user marked an item as sent to, or received at, a job site on a particular date). These records belong to the company, not to the individual user. They are the company's business records, and they are kept even after an individual user's account is deleted. Deleting an account does not erase the company's history of who logged, transferred, or received items.
This is by design. Nail & Tally exists to give a company a reliable, accountable record of its tools and materials. That record would be worthless if it disappeared whenever an employee left. Deleting an account removes a person's access and personal profile; it does not delete the company's operational records.
If your company stops using Nail & Tally entirely, its data is deleted or de-identified within a reasonable period, unless we are required to keep it to meet a legal obligation or resolve a dispute. Because activity and inventory records belong to the company, requests about that data are handled through the company.
11. Your rights and choices
Depending on where you live, you may have rights over your personal information. Nail & Tally honors the following for all users:
- Access: you can ask what personal information we hold about you.
- Correction: you can ask us to fix inaccurate information. You can also edit your name in the App.
- Deletion: you can ask us to delete your personal account information. As explained in Section 10, the company's activity and inventory records (including the record of actions you performed in the App) belong to the company and are kept as its business records even after your account is deleted.
- Notifications: you can turn push notifications on or off in your device settings.
To make any of these requests, contact us using the details in Section 16. We may need to verify your identity first. If you use Nail & Tally through an employer, some requests (especially deletion of company records) may need to be handled together with your employer, since the company controls that data.
12. GDPR: for users in the European Economic Area and the UK
Nail & Tally is based in the United States and is built primarily for U.S. construction companies. If you use Nail & Tally from the EEA or the UK, the following applies:
- Our legal basis for processing your information is generally (a) performing the contract to provide the Service, (b) the legitimate interests of your employer and of Nail & Tally in running a workplace inventory tool, keeping it secure, and diagnosing crashes and errors, (c) your consent, where we ask for it (for example, push notifications), and (d) compliance with legal obligations.
- You have the right to access, correct, delete, restrict, or object to processing of your information, and the right to data portability.
- Your information is processed and stored in the United States. By using the App, you understand that your information will be transferred to and processed in the United States.
- You have the right to lodge a complaint with your local data protection authority.
13. CCPA: for California residents
If you are a California resident, the California Consumer Privacy Act gives you the right to:
- Know what categories of personal information we collect and how we use it (all described in this policy)
- Request access to the specific personal information we hold about you
- Request deletion of your personal information
- Not be treated differently for exercising your rights
Nail & Tally does not sell or share your personal information as those terms are defined under California law, and we have not done so. To exercise your rights, contact us using the details in Section 16.
14. Children's privacy
Nail & Tally is a workplace tool intended for use by adults in a professional setting. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 years old. If we learn that we have collected information from a child under 13, we will delete it.
15. Changes to this policy
16. Contact us
If you have questions about this policy or want to exercise your privacy rights, contact us at:
Nail and Tally LLC Email: privacy@nailandtally.com Website: https://nailandtally.com