NailArtDiary Privacy Policy

Effective Date: January 28, 2026

This Privacy Policy (the "Policy") is formulated by COSTRINITY LLC (hereinafter referred to as "we", "us", or "the Data Controller") to inform you about how we collect, use, store, share, and protect your personal data, as well as the rights you hold and the ways to exercise them. We do not knowingly collect personal information from minors under the age of 18. If you are a minor, please do not use this Application or provide any personal information to us. Please carefully read and understand the entire content of this Policy. If you do not agree to the terms of this Policy, do not use this Application.

I. Definitions and Interpretations

Personal Data: Refers to any information relating to an identified or identifiable natural person, including but not limited to your personal identification information, device information, usage data, image information, audio information, etc.

Data Controller: Refers to a natural person, legal person, or other organization that determines the purposes and methods of personal data processing. The Data Controller under this Policy is COSTRINITY LLC.

Data Protection Officer (DPO): Refers to the person designated by us to supervise the compliance of personal data processing. You may contact the DPO through the contact information provided in this Policy regarding personal data protection matters.

Sale/Sharing: "Sale" refers to the disclosure of personal data to a third party in exchange for valuable consideration in accordance with applicable laws; "Sharing" refers to the disclosure of personal data to a third party for purposes agreed herein or permitted by law, regardless of whether consideration is obtained.

Applicable Laws: Including but not limited to the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), Virginia Consumer Data Protection Act (VCDPA), Colorado Consumer Data Protection Act (CDPA), Lei Geral de Proteção de Dados (LGPD) of Brazil, Federal Decree Law No. 45 of 2021 on Data Protection (FADP) of the UAE, and other data protection laws and regulations of relevant jurisdictions.

II. Information of the Data Controller and Data Protection Officer (DPO)

Data Controller: COSTRINITY LLC

Registered Address: 100 Canyon Vista Ln, Morrison CO 80465, US

Contact Email: harrywashingt76@gmail.com

Data Protection Officer (DPO): Seraphina

DPO Contact Information: harrywashingt76@gmail.com

III. Legal Basis

We process your personal data in strict compliance with the aforementioned applicable laws and relevant standards, and rely on the following legal bases to conduct personal data processing activities:

1. Based on Your Consent: For the collection and use of information that requires your explicit authorization (such as accessing the camera, photo album, microphone, or sharing personal data), we rely on your consent as the legal basis. You may withdraw your consent at any time, but the withdrawal shall not affect the legality of data processing conducted based on your prior consent.

2. Necessary for Performing a Contract: To provide you with the core services of this Application (such as nail art file management and community sharing) and fulfill the implied contractual purpose between you and us, it is necessary to process your personal data.

3. Necessary for Complying with Legal Obligations: We are obligated to process your personal data in accordance with applicable laws and regulations, as well as the requirements of judicial or administrative authorities.

4. Necessary for Protecting Legitimate Interests: To protect the legitimate rights and interests, personal safety, or property safety of you, other users, or us (such as preventing fraud and safeguarding application security), we may process your personal data within a reasonable and necessary scope.

5. For Public Interest Purposes: On the premise of conforming to the public interest, we may process your personal data to achieve public interest goals such as public safety, public health, and social order.

IV. Collection and Use of Personal Data

This Application does not require registration or login. We only collect necessary personal data that you actively provide or obtain through application permissions for the purposes of providing services to you, optimizing your experience, and ensuring security, and will not collect irrelevant information.

(I) Types of Collected Information

1. Information You Actively Provide

• Questionnaire Information: When you fill out a questionnaire on our official website (https://www.costrinllc.com/) to obtain an invitation code, you may provide information including but not limited to your nail art style preferences, hand shape, skin tone, usage needs, and other nail-related preference information. This information is used to screen target users and issue invitation codes to ensure a pure community atmosphere of the Application, and is only for invitation eligibility review, not for other commercial purposes.

• Image Information: When using the functions of publishing nail art works (on the publishing page), attaching images to feedback (on the feedback page), or uploading avatars (on the avatar modification page) in this Application, the image information captured by the camera or selected and uploaded from the photo album is only used for the corresponding functional scenarios, and no automatic shooting or background collection will be conducted.

• Audio Information: When using the voice recording function on the feedback page to submit feedback, the audio information recorded and uploaded is only used to process your feedback request and help you submit opinions or suggestions more conveniently.

• Personal Profile Information: The avatar, nickname, and other information you customize in the personal center are used by the AI Nail Assistant to provide personalized recommendations and optimize your application usage experience.

• Feedback Information: The opinions, suggestions, complaints, and other relevant information you submit through the feedback function of this Application are used to handle your inquiries, complaints, or suggestions and continuously optimize the application functions.

• Created and Shared Content: The nail art styles, production steps, experience sharing, color code information, and other content you publish and save in the Application are used for personal file management and community communication, and you can independently control the visibility scope of the content.

2. Information We Automatically Collect

• Device Information: Device-related information when you use this Application, including but not limited to device model, operating system version, Device ID, device identifiers (such as IMEI, Android ID, IDFA, etc.), network type, device connection status, and battery level. This information is used to troubleshoot application operation failures, optimize compatibility, and ensure service stability.

• Usage Data: Your operation records when using this Application, including but not limited to login time, logout time, browsed pages, click operations, search keywords, collection records, like records, comment records, private message communication records, nail art file creation and editing records, and function usage frequency. This information is used to analyze user behavior patterns, optimize application experience, and manage community ecology.

• Storage Information: After you authorize this Application to access external storage, the relevant storage data obtained by this Application to realize functions such as nail art file saving and image/audio caching is only used for the realization of the Application's core functions. We will not arbitrarily access or read other irrelevant stored files on your device.

• Application Information: Application-related information such as the version number, installation time, and update time of this Application is used to troubleshoot faults, push version updates, and ensure service stability.

(II) Purposes of Information Collection

We collect your personal data only for the following legitimate business purposes. Without your additional consent, we will not use the data for purposes other than the following:

1. Providing and Maintaining Application Services: Ensuring the normal operation of this Application, providing you with core functions such as nail art file recording, community sharing, and AI nail art recommendations, and meeting your nail-related needs.

2. Optimizing and Improving the Application: Based on your usage data and feedback information, analyzing user behavior patterns, optimizing application interface design, functional experience, and performance, and developing new functional modules that meet user needs.

3. Providing Personalized Services: Through the AI Nail Assistant, combining the information you provide such as hand shape, skin tone, nail art style preferences, and scenario needs, providing you with personalized nail art style recommendations and production suggestions.

4. Managing Nail Art Community Ecology: Supervising the release of community content, reviewing nail art works, comments, private messages, and other content shared by users, preventing the spread of inappropriate information, and maintaining a healthy, safe, and orderly community environment; handling user reports and complaints to protect the legitimate rights and interests of users.

5. User Support and Feedback Handling: Responding to your inquiries, feedback, and complaints, providing you with technical support and solutions, and improving customer service quality.

6. Complying with Legal Obligations and Ensuring Security: Complying with applicable laws, regulations, and regulatory requirements, cooperating with legal investigations by judicial or administrative authorities; preventing, detecting, and addressing illegal and irregular acts such as fraud and security vulnerabilities, and protecting the legitimate rights and interests of you, other users, and our property safety.

7. Implementing In-Application Incentive Mechanisms: Recording your community contributions (such as sharing original works and posting high-quality comments), counting the acquisition and usage of gold coins, and providing monthly nail art summaries and other related services.

(III) Methods of Information Use

We will process your personal data through a combination of automated and manual methods, including but not limited to collection, storage, organization, analysis, retrieval, display, and transmission of data. The AI Nail Assistant performs algorithmic analysis on your personal data (such as hand shape, skin tone, and scenario needs) to generate personalized recommendation results. This process will strictly comply with relevant data security and privacy protection regulations and is only used to provide recommendation services. We will not use your personal data for other commercial purposes unrelated to the services of this Application without your explicit consent.

(IV) Necessity of Data Collection

The collection of the aforementioned personal data is necessary to realize the core functions of this Application. If you refuse to provide or authorize the relevant data, the corresponding functions may not be available, but it will not affect the normal operation of other unrelated functions (such as browsing community content). We will not force you to authorize non-essential permissions.

(V) Application Permission Description

We will only enable the corresponding application permissions and collect relevant data after obtaining your explicit authorization. You may disable the permissions in the device system settings at any time. After the permissions are disabled, we will immediately stop collecting data through such permissions. The already collected data will be processed in accordance with the provisions of this Policy, and the legality of data use based on prior legal authorization will not be affected. Details of each permission are as follows:

1. Camera Permission: When you use the functions of shooting to publish nail art works, attach images to feedback, or modify avatars for the first time, we will pop up a request for your authorization. This permission is only used for real-time shooting of images/videos for you to independently select and upload, and we will not call the camera or take photos in the background automatically.

2. Photo Album (Image) Permission: When you use the functions of uploading nail art works, attaching images to feedback, or selecting local images to modify avatars for the first time, we will pop up a request for your authorization. We will only access the image files you actively select, and will not traverse or read all album content on your device, nor retain unuploaded images.

3. Microphone (Recording) Permission: When you use the voice recording function on the feedback page for the first time, we will pop up a request for your authorization. This permission is only used to record the voice feedback you actively submit, and the audio data is only used to handle your inquiries, suggestions, or complaints, with no other usage scenarios.

4. External Storage Permission: When you use the functions of saving nail art files, caching images/audio, or uploading local files for the first time, we will pop up a request for your authorization. This permission is only used for file reading and writing necessary for realizing core functions, and we will not arbitrarily access or modify other irrelevant stored files on your device.

5. Application Information Access Permission: This is a basic permission to ensure the normal operation of the Application. We will automatically obtain information such as your device model, operating system version, and application version number to troubleshoot operation failures and optimize compatibility. We will not collect other sensitive device information beyond device unique identifiers, and no additional manual authorization from you is required.

6. Advertising IDs (such as Android ID, IDFA): We may collect the Advertising IDs of your device only to optimize in-application advertising display (if advertising services are integrated in the future), count advertising exposure effects, and provide personalized advertisements related to your interests. We will not associate this identifier with your personal identification information, nail art file content, or other sensitive data. You may disable the authorization of advertising identifiers through the device system settings at any time (for Android devices: Settings - Privacy - Ads - Enable "Opt out of Ads Personalization"; for iOS devices: Settings - Privacy & Security - Tracking - Disable the corresponding permission). After disabling, we will stop providing personalized advertisements based on this identifier and only display general advertisements (if any), which will not affect the use of the Application's core functions.

V. Storage and Protection of Personal Data

(I) Data Storage

Your personal data will be stored on servers that comply with the requirements of relevant data protection laws and regulations. The storage locations include the United States and other countries or regions that have obtained data protection certification. We ensure that the server environment where the data is stored complies with internationally recognized security standards and the data cross-border storage regulations of relevant regions. We will store your personal data for the period necessary to achieve the purposes of information collection agreed in this Policy, or in accordance with the requirements of applicable laws and regulations. After the expiration of the necessary period, we will securely delete your personal data or anonymize it, unless otherwise stipulated by laws and regulations or with your consent to extend the storage period. The specific storage periods are as follows:

• Questionnaire Information and Invitation Code-related Data: Retained for 12 months after you cancel your application usage eligibility, used for tracing invitation eligibility and compliance verification.

• Personal Information, Created Content, and Collected Files in the Application: Retained until you actively delete them or cancel your usage eligibility, and the deleted data will be irrecoverable.

• Feedback Content and Fault Troubleshooting Data: Retained for 6 months after the problem is resolved, and then anonymized (removing information that can identify individuals).

• Temporary Data Obtained through Permissions (such as captured images and recorded voices): Only temporarily stored during the use of the function. After the function is completed, you can independently decide whether to save it, and the unsaved data will be immediately cleared.

(II) Storage Security

We adopt industry-standard security technologies and management measures to protect your personal data, including but not limited to data encryption (transmission encryption and storage encryption), access control, firewalls, intrusion detection and prevention systems, regular security audits, and data backup and recovery mechanisms, to prevent your personal data from unauthorized access, use, disclosure, tampering, damage, or loss.

(III) Data Protection Responsibilities

We adopt industry-standard technical and management measures to ensure the security of your personal data and prevent data leakage, loss, tampering, or abuse:

1. Technical Protection: Adopting technologies such as encrypted transmission (HTTPS), encrypted data storage, and access permission control to restrict unauthorized access to personal data.

2. Management Specifications: Establishing a data processing permission approval mechanism, only allowing authorized personnel to access your personal data, and such personnel must abide by strict confidentiality obligations. Those who violate the confidentiality obligations will bear corresponding legal responsibilities; regularly conducting data protection training for employees to enhance their data protection awareness and compliant operation capabilities.

3. Emergency Response: Formulating a data breach emergency plan. In the event of a data security incident such as personal data leakage or loss, we will immediately activate the emergency response mechanism, take necessary remedial measures, assess the impact of the leakage within 72 hours, and promptly notify you and the relevant regulatory authorities in accordance with the requirements of applicable laws and regulations, while taking remedial measures to mitigate damages.

Please note that internet transmission and electronic storage methods cannot completely guarantee absolute security. We will make every effort to protect the security of your data, but we shall not be liable for risks such as personal data leakage, loss, or tampering caused by factors beyond our control, such as force majeure and third-party attacks. However, we will try our best to assist you in reducing losses.

VI. Sharing, Transfer, and Disclosure of Personal Data

(I) Data Sharing

We will not share your personal data with third parties unless one of the following circumstances applies:

1. Obtaining Your Explicit Consent or Authorization: Before sharing, we will clearly inform you of the third-party subject, purpose, and scope of the sharing, and conduct the sharing only after you confirm your consent.

2. Assistance from Service Providers: Only when it is necessary to share with third parties to realize the core functions of this Application or provide the services you request. For example, we may entrust third-party service providers to provide server hosting, data storage, data analysis, customer support, and other services. Such third-party service providers may only access and use your personal data within the scope of providing services to us, and must comply with the provisions of this Policy and relevant laws and regulations, and assume corresponding confidentiality obligations.

3. Requirements of Laws and Regulations: Complying with applicable laws and regulations, and the mandatory requirements of judicial or administrative authorities, responding to legal requirements such as court subpoenas, search warrants, and administrative orders, and disclosing your personal data to judicial authorities, administrative authorities, or other authorized institutions.

4. Protecting Legitimate Interests: Sharing your personal data within a reasonable and necessary scope to protect the legitimate rights and interests, personal safety, or property safety of you, other users, or the public interest and social order.

5. Sharing with Affiliated Companies: On the premise that the affiliated company will process your personal data in accordance with the provisions of this Policy, and the purpose of sharing is consistent with the purpose of information collection agreed in this Policy.

6. Business Change Needs: In the event of business changes such as company merger, acquisition, asset sale, bankruptcy liquidation, or other similar circumstances, if the transfer of personal data is involved, we will notify you in advance and ensure that the transferee will continue to protect your personal data in accordance with the provisions of this Policy. Otherwise, we will require the transferee to obtain your consent again or terminate the data transfer.

(II) Data Transfer

Except for the circumstance stipulated in Article 6 (I) 6 of this Policy, we will not transfer your personal data to any third party unless we obtain your explicit consent, ensure that the transferee has corresponding data protection capabilities, and the transferee will process your personal data in accordance with the provisions of this Policy and relevant laws and regulations.

(III) Data Disclosure

We will not disclose your personal data to the public unless one of the following circumstances applies:

1. Obtaining Your Explicit Consent.

2. Complying with applicable laws and regulations, and the mandatory requirements of judicial or administrative authorities.

3. Disclosing within a reasonable and necessary scope to protect the legitimate rights and interests, personal safety, or property safety of you, other users, or the public interest and social order.

4. The content you actively share publicly in the Application community (such as nail art works and comments) will be viewed by other users in accordance with community rules, and such publicly shared content shall be deemed as your consent to disclosure.

(IV) Right to Opt Out of Data Sale

Pursuant to applicable laws and regulations (such as CCPA, CPRA, VCDPA, etc.), you have the right to opt out of the "sale" of your personal data (i.e., prohibiting us from disclosing your personal data to third parties in exchange for valuable consideration). We explicitly commit: We will not sell your personal data without your explicit consent. If future business adjustments involve data sale-related activities, we will clearly inform you in advance through in-application notifications, official website announcements, or other means, and you have the right to refuse the sale of your data.

(V) Methods to Opt Out of Data Sharing or Sale

If you have previously agreed to our sharing or selling of your personal data, you have the right to withdraw your consent at any time and opt out of data sharing or sale. You may do so through the following methods:

1. Send a written application directly to our reserved contact email (harrywashingt76@gmail.com), indicating "Opt out of data sharing/sale" and your application usage identifier (such as nickname, invitation code-related information, etc., to facilitate our identity verification). We will process your request within 30 working days and notify you of the result via email.

VII. Your Rights Regarding Personal Data

Pursuant to applicable laws and regulations, you have the following rights regarding your personal data (the specific scope of rights may vary by jurisdiction), and we will provide you with convenient channels to exercise these rights:

1. Right to Know: You have the right to know about the collection, use, storage, sharing, and transfer of your personal data, including the purpose, method, scope, and storage period of data processing.

2. Right to Access: You have the right to request access to your personal data stored by us, including the purpose of collection, storage period, sharing objects, etc., and have the right to request us to provide a copy of your personal data or inform you of the processing status of your personal data.

3. Right to Rectification: If your personal data is inaccurate or incomplete, you have the right to request us to correct or supplement it.

4. Right to Erasure: You have the right to request us to erase your personal data under one of the following circumstances: we collect or use your personal data beyond the agreed purpose or the scope stipulated by laws and regulations; you withdraw your consent to data processing; we no longer need to retain the data to achieve the agreed purpose; you request to cancel your account; other circumstances stipulated by applicable laws and regulations (except as otherwise required by laws and regulations).

5. Right to Restrict or Object to Processing: You have the right to request us to restrict or object to the processing of your personal data (such as suspending the use of your personal information by the AI Assistant). We will take corresponding measures after verification, unless otherwise stipulated by laws and regulations or necessary to protect the public interest and the legitimate rights and interests of others.

6. Right to Data Portability: Pursuant to the legal requirements of some jurisdictions, you have the right to request us to provide your personal data in a structured, commonly used, and machine-readable format for you to transfer to other data controllers (provided that such data transmission does not affect the legitimate rights and interests of others, as required by applicable laws and regulations).

7. Right to Withdraw Consent: You have the right to withdraw your authorization for application permissions or your consent to data sharing and use at any time. The withdrawal of consent shall not affect the legality of data processing conducted based on prior consent, and the withdrawal shall take effect within a reasonable period.

8. Right to Object to Data Sale: As stipulated in Article 6 (IV) of this Policy, you have the right to object to our sale of your personal data.

9. Right to Lodge a Complaint: If you believe that our personal data processing activities violate relevant laws and regulations or the provisions of this Policy, you have the right to lodge a complaint with the data protection regulatory authority in your jurisdiction. For specific complaint channels, please refer to the official guidelines of the relevant regulatory authority.

(I) Methods of Exercising Rights

You may exercise the aforementioned rights through the following methods:

1. Send a written application to our reserved contact email (harrywashingt76@gmail.com), clearly indicating the type of right you wish to exercise, your contact information, and your application usage identifier (including your nickname, information used for registration, etc., to facilitate our identity verification). After verifying your identity, we will process your request within the period required by applicable laws and regulations (generally no more than 45 working days, and may be extended to 90 working days in complex cases, with the specific period complying with the requirements of applicable laws and regulations) and feedback the processing result to you. If we refuse your request, we will explain the reason to you.

(II) Restrictions on Exercising Rights

To ensure the legality and security of data processing, or based on public interest and the legitimate rights and interests of others, we may not be able to fully satisfy your right request under the following circumstances:

1. Related to our fulfillment of obligations stipulated by laws and regulations;

2. Related to public safety, public health, and major public interests;

3. Related to judicial procedures such as criminal investigation, prosecution, and trial;

4. Necessary to protect the legitimate rights and interests of others (such as the privacy and trade secrets of others);

5. Your request may cause damage to the legitimate rights and interests of others or violate public order and good customs;

6. Other exceptional circumstances stipulated by applicable laws and regulations.

VIII. Additional Rights in Specific Regions

Pursuant to the data protection laws and regulations of some jurisdictions, you may enjoy the following additional rights (subject to the legal provisions of your jurisdiction). If you wish to exercise the following additional rights, you may contact us in accordance with the methods stipulated in Article 7 of this Policy, and we will handle it in accordance with the legal provisions of your jurisdiction.

(I) California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

You have the right to know whether your personal information has been shared, and the right to request us to disclose the categories, sources, processing purposes of your personal data collected in the past 12 months, as well as the situation of sharing or selling with third parties; you have the right to request us to erase your personal data (the "Right to Erasure"), except for statutory exceptions; you have the right to refuse our sale of your personal data, and we will not discriminate against you for exercising this right (such as reducing service quality or increasing service prices); if we conduct data sales, we will inform you through updating this Privacy Policy or other reasonable means to facilitate your exercise of the right to refuse. You have the right to request us to disclose whether there has been any data sale in the past 12 months; if you are a California resident, you may submit a request of "Do not sell my data" via email harrywashingt76@gmail.com, and we will respond immediately.

(II) Virginia Consumer Data Protection Act (VCDPA)

You have the right to request us to confirm whether your personal data is being processed and obtain a copy of the data; you have the right to request us to correct inaccurate personal data, erase your personal data, or restrict the processing of your personal data; you have the right to withdraw your consent to data processing, and the withdrawal shall take effect within a reasonable period; you have the right to object to our data analysis for reasonable business purposes (such as evaluating user behavior and optimizing services), except for data analysis necessary to provide services or comply with legal obligations. You have the right to refuse data processing for the purpose of targeted advertising and profiling, and the right to request us to confirm whether your personal data is being processed and the specific situation of the processing.

(III) Lei Geral de Proteção de Dados (LGPD) of Brazil

You have the right to obtain information about the processing of your personal data, including the recipients and processing purposes of the data; you have the right to request the correction, anonymization, or erasure of inaccurate, irrelevant, out-of-scope, or outdated personal data; you have the right to request the transfer of your personal data to other data controllers (Right to Data Portability); you have the right to request the suspension of data processing when the processing may cause harm to you. You have the right to request us to explain the data processing activities, the right to object to the processing of personal data based on legitimate interests, and the right to be promptly notified when a data breach may cause significant harm.

(IV) Federal Decree Law No. 45 of 2021 on Data Protection (FADP) of the UAE

The processing of your personal data must be based on a legitimate purpose and comply with the provisions of FADP; you have the right to access, correct, erase your personal data, or restrict data processing; if your personal data is leaked, we will promptly notify you and the UAE data protection authority. You have the right to request confirmation of whether your personal data is being processed, the right to request the erasure or correction of illegally processed data, and the right to lodge a complaint with the UAE data protection authority regarding data processing activities.

(V) General Data Protection Regulation (GDPR)

You have the right to access your personal data held by us and obtain a copy of it; you have the right to request correction of any inaccurate personal data, or to request the erasure of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent (the "Right to Erasure" or "Right to be Forgotten"); you have the right to request restriction of processing of your personal data, for example, where you contest the accuracy of the data or where the processing is unlawful; you have the right to data portability, allowing you to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller; you have the right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on our legitimate interests where such processing is not necessary for the performance of a contract or compliance with a legal obligation; you also have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data violates the GDPR. If you wish to exercise any of these rights, please contact us via email at harrywashingt76@gmail.com, and we will respond to your request without undue delay.

IX. Instructions on Application Use

1. User Eligibility: This Application is only for users over 18 years old. You confirm that you are over 18 years old and have full capacity for civil conduct when using this Application. We currently do not set up a special age verification mechanism, but you are responsible for the authenticity of your age. If it is verified that you are under 18 years old, we will terminate the provision of services to you and erase your personal data.

2. Invitation Code Mechanism: The invitation code is only used to screen target users and ensure the community atmosphere. After obtaining the invitation code by filling out the questionnaire on the official website, you shall not transfer or resell it to others. We have the right to block the invitation code used in violation of regulations.

3. Content Responsibility: The created content, experience sharing, and other content you publish in the Application must comply with relevant laws and regulations and user terms, and shall not contain illegal, infringing, or vulgar content. We only conduct compliance reviews on the content published by users and do not assume legal liability for the content itself. If your content infringes on the rights and interests of third parties, you shall bear the responsibility yourself. The content you actively share publicly in the Application community (such as nail art works and comments) may be viewed, reprinted, or used by other users, and you shall bear the risks arising from public sharing of the content. We shall not be liable for the spread and use consequences of such content.

X. Disclaimer

Although we have adopted reasonable security measures to protect your personal data, the internet environment has inherent uncertainties, and we cannot completely guarantee the absolute security of your personal data. We shall not be liable for risks such as personal data leakage, loss, or tampering caused by factors beyond our control, such as force majeure and third-party attacks. However, we will try our best to assist you in reducing losses.

This Application may contain third-party links (such as official website links). The privacy policies of third parties are independent of ours. When you access third-party links, you shall comply with the privacy policies and service terms of the third parties, and we shall not be liable for the acts and content of third parties.

XI. Updates and Notifications of the Policy

We may revise this Privacy Policy in accordance with updates to laws and regulations, changes to application functions, and adjustments to data processing practices. The revised Privacy Policy will be notified to you through pop-ups, announcements, or other reasonable means (such as sending emails) in the Application. The revised Privacy Policy shall take effect on the effective date specified in the notification. If you continue to use this Application after the update of the Privacy Policy, it means that you have read, understood, and agreed to the revised Privacy Policy; if you do not agree, you may stop using this Application, and we will process your personal data in accordance with the provisions of this Policy.

XII. Contact Us

If you have any questions, opinions, or suggestions about this Privacy Policy, or wish to exercise your relevant rights, or report illegal acts related to data processing, you may contact us through the following methods:

• Company Name (Data Controller): COSTRINITY LLC

• Contact Address: 100 Canyon Vista Ln, Morrison CO 80465, US

• Contact Email (including DPO Contact Information): harrywashingt76@gmail.com

We will respond to your request within a reasonable period after receiving your information (not exceeding the period specified by applicable laws and regulations). If you are dissatisfied with our processing result, you have the right to lodge a complaint with the data protection regulatory authority in your jurisdiction. Thank you for trusting and using NailArtDiary. We will continue to commit to protecting your privacy and security and providing you with better nail art-related services.

XIII. Other Provisions

The establishment, effectiveness, performance, interpretation, and resolution of disputes under this Policy shall all be governed by the laws of the United States (excluding conflict of laws rules). Any dispute arising between you and us in connection with this Policy shall first be resolved through friendly negotiation; if negotiation fails, either party has the right to institute legal proceedings with the competent court where our registered address is located.

This Policy constitutes the complete agreement between you and us regarding personal data protection, replacing any prior oral or written agreements. If any provision of this Policy is deemed invalid or unenforceable, it shall not affect the validity of other provisions.