Privacy Notice

Last updated: 2025-12-12

Question

Umia Response

1. Which Umia entity is the app run by?

Umia Technology Inc. (Canadian company)

2. Which Umia entity are the customers contracting with for the service?

Umia Technology Inc. (Canadian company)

3. What contact details for Umia should users/customers use if they want to contact you?

 

4. How do people change their personal details (i.e. is there an account section in the app?)

Yes there is an account section in the app, people can edit to change details.

5. Please list all the types of personal data you will collect about users/customers

See addendum below

6. Do you collect device data?

See addendum below

7. Do you collect any data from user’s social media account(s)?

See addendum below

8. Do you receive any personal data from third parties?

See addendum below

9. What are the different ways in which you use the personal data (other than the obvious, i.e. to set up an account/book an appointment/take payment). 

 

10. Who will you share personal data with and in each case where are they based?  

See addendum below

11. Where is the data stored? 

 

12. Do you use a payment provider?  If so, who?

Yes, at the moment this is Stripe.

Addendum
  1. How We Collect and Use Your Personal Information

    To provide you with core services such as nail painting, store search, contact and navigation tools, we will collect and use your personal information in the following scenarios:

    1. Account Registration and Login

      Email Login:

      When you register or log in using an email address, we collect your email. This is necessary for creating and managing your account, verifying your identity, and enabling password recovery.

      Third-Party Social Account Login:

      In the future, you may choose to log in using a third-party social account (such as Google). With your authorization, we will receive the profile photo, nickname, and verified email you allow the third party to share. This information is used to quickly create or link your account in this app. We will not obtain any other data from your social platform.

    2. Profile Completion (Optional)

      You may voluntarily add your mobile phone number in your profile to enrich your account information, receive important notifications, or enhance account security.

    3. Location Services (Filtering Nearby Stores)

      When you use the "Find Nearby Stores" or similar feature, we will request access to your precise geographical location (via GPS, Wi-Fi, or cell towers). This information is used solely to calculate and display the nearest nail salon locations to improve store-search efficiency.

      You may disable this permission in your device settings, but the related function will not be available.

    4. Nail Painting Services

      When you use features such as "Scan" or "Start Process" we access your device camera. This permission is used only for scanning store QR codes (to start the nail painting process) or enabling AR experiences (in the future) such as virtual nail try-on.

      Unless we obtain your separate consent, we will not store any real-time images or videos captured through your camera.

    5. Communication and External Service Invocation

      Contacting Stores: When you tap "Call Store" or "Send Email," the app will open your device's phone or email application. These actions are completed by external apps—we do not record call or email content.

      Navigation: When you tap "Navigate to Store," the app will invoke your installed map application (e.g., Apple map, Google Maps etc.). Only the destination information is passed to the map application; we do not record your navigation route.

    6. Social Sharing

      In the future, when you use the in-app "Share" feature to share content (such as nail designs or store information) to third-party platforms (e.g., WeChat, Instagram), we may request access to the relevant social applications on your device. The shared content and actions are handled by you and the platform, and are governed by that platform's privacy policy.

  2. How We Obtain Your Personal Information

    Our primary sources of personal information are the information you provide directly (e.g., registration email) and the data generated during your use of the services (e.g., location data).

    In certain circumstances, we may also obtain your personal information from third parties:

    Third-Party Login: When you choose to log in using a third-party social account, as described in Section I.

    Business Partners: With your authorization and where permitted by law, we may receive certain information from business partners (for example, contact information you provide when participating in co-marketing activities) in order to better serve you.

  3. How We Share, Transfer, and Disclose Your Personal Information

    We do not sell your personal information. We will only share information when necessary:

    Sharing with Service Providers:

    To facilitate your appointment or service with a nail salon, we will share the necessary contact and appointment information with the relevant store when you take actions such as placing an order.

    Sharing with Authorized Partners:

    For the purposes outlined in this Policy, we may entrust trusted partners (such as providers of map SDKs, data storage, or security services) to process information on our behalf. We will sign strict confidentiality agreements with such partners and require them to process information according to our instructions.

  4. Collection of Device Information

    To ensure the secure and stable operation of the app and to enable core service features (such as account security, error diagnosis, and troubleshooting), we may collect basic device information based on the permissions granted during installation or use.

    (For example, uni-app framework, iOS, or Google may collect certain device data.)

    This information may include:

    • Device model
    • Operating system version
    • Unique device identifiers (such as IMEI / Android ID / IDFA)
    • App crash logs

    This type of information generally cannot be used alone to identify a specific individual. It is mainly used to improve product compatibility, ensure service security, and assist with troubleshooting.