Privacy Policy

LacaLab ("we," "our," or "us") operates the LacaLab nail art planner app (the "App") and the website at lacalab.com (the "Website"). This Privacy Policy explains what information we collect, how we use it, and your choices.

Information We Collect

Account information. You can use the App as a Guest (anonymous account, no personal information collected) or sign in with Google or an email address and password. If you sign in with Google, we receive basic profile information (your email address) from Google. If you create an account with email and password, we collect the email address you provide.

Design content. Nail art designs you create in the App — including shapes, colors, patterns, and layer configurations — are stored and associated with your account so you can access them across sessions.

Wishlist sign-up. If you sign up for launch updates on our website, we collect the email address you provide so we can notify you when the App becomes available. This is collected independently of the App itself and does not require an account.

Website usage data. When you visit the Website, we use analytics tools (Google Analytics and Microsoft Clarity) that use cookies and similar technologies to collect information about your visit, such as the pages you view, how long you stay, how you arrived at the Website, your browser and device type, your approximate location (derived from your IP address), and how you interact with pages, including clicks, scrolling, and mouse movement. Microsoft Clarity may also create session recordings and heatmaps of these interactions. We use this information in aggregate to understand how the Website is used and to improve it.

We do not collect or store photos or images that you upload, as the App does not support image uploads.

How We Use Information

We use the information we collect to:

• Create and maintain your account
• Save and sync your nail art designs
• Understand how visitors use the Website and improve it
• Respond to support requests sent to hello@lacalab.com

We do not sell your personal information, and we do not use it for advertising. Apart from the website analytics providers described under Third-Party Services below, we do not share your information with third parties for their own purposes.

Third-Party Services

The App uses Google Firebase (Authentication and Firestore Database) to operate. Firebase is provided by Google and processes data on our behalf in accordance with Google's Privacy Policy. If you sign in with Google, Google's own privacy policy also applies to that sign-in process.

We use Brevo to manage our wishlist email list and send launch update emails. Brevo processes this data on our behalf in accordance with Brevo's Privacy Policy.

The Website uses Google Analytics, provided by Google, and Microsoft Clarity, provided by Microsoft, to collect the website usage data described above. This data is processed by Google in accordance with Google's Privacy Policy and by Microsoft in accordance with the Microsoft Privacy Statement, and may be transferred to and stored on servers outside your country, including in the United States.

Microsoft acts as an independent data controller for the data collected through Clarity and may use it for its own purposes, including advertising, as described in the Microsoft Privacy Statement. Microsoft does not sell this data. Text you type into form fields on the Website (such as your email address) is masked and is not captured by Clarity.

You can limit this collection by blocking or deleting cookies in your browser settings, by installing the Google Analytics Opt-out Browser Add-on, or by opting out of Microsoft through the Digital Advertising Alliance opt-out page. Microsoft Clarity also honors the Global Privacy Control signal; it does not currently respond to browser "Do Not Track" signals.

Data Retention and Deletion

We retain your account information and design data for as long as your account is active. If you'd like your account and associated data deleted, contact us at hello@lacalab.com and we will process your request.

Guest (anonymous) account data that is abandoned may be periodically deleted from our systems.

Website usage data collected through Google Analytics is retained according to Google's data retention settings. Microsoft Clarity session recordings are retained for up to 30 days (with a small sample retained for up to 9 months), and heatmap data for up to 9 months.

Wishlist email addresses are retained until you unsubscribe or until we delete the list following the App's launch. You can unsubscribe at any time using the link included in every email, or by contacting us at hello@lacalab.com.

Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.

Contact Us

If you have questions about this Privacy Policy, contact us at hello@lacalab.com.