Privacy Policy

1. Introduction

Nurly (“we”, “our”, “us”) operates the Nurly mobile application, a marketplace that connects customers with independent beauty shops in Uzbekistan. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Nurly app you agree to the practices described below.

2. Information we collect

Account information: name, email, phone number, password (hashed), profile photo, and preferred language.

Shipping information: recipient name, street address, city, region, postal code, and phone number you provide for delivery.

Order and payment information: items ordered, order amounts, loyalty points balance, and the bank-transfer receipt image you upload to confirm payment. We do not collect or store your card or bank login credentials.

Third-party sign-in: if you sign in with Apple, Google, or Telegram, we receive your name, email, and a unique identifier from that provider in order to create your Nurly account.

Device and usage data: device model, operating system version, app version, language settings, push-notification token (Firebase Cloud Messaging), and basic analytics events such as screens visited and actions taken inside the app. This data helps us operate and improve the service.

Shop owner data: if you register a shop, we additionally collect your shop name, description, logo, bank account details used for withdrawals, and identification documents needed to verify your shop.

3. How we use your information

We use the information we collect to:

• Create and manage your account and let you sign in;
• Display products, process orders, and coordinate delivery with shops;
• Verify bank-transfer receipts and issue refunds where applicable;
• Calculate and apply loyalty points;
• Send transactional notifications about your orders and account;
• Send optional marketing notifications, which you can turn off in Notifications settings;
• Prevent fraud, abuse, and violations of our Terms of Service;
• Comply with applicable law and respond to lawful requests.

4. How we share your information

We share information only as needed to run the service:

Shops. When you place an order, the shop receives your name, shipping address, phone number, and order contents so they can fulfill and ship your order.

Service providers. We use trusted vendors to host our servers, deliver push notifications (Google Firebase), store uploaded images, and send email. These providers process data only on our instructions.

Authentication providers. If you use Sign in with Apple, Google, or Telegram, those providers handle the authentication step under their own privacy policies.

Legal and safety. We may disclose information to comply with Uzbek law, respond to lawful requests, enforce our Terms, or protect the rights and safety of our users.

We do not sell your personal information.

5. Data retention and account deletion

We keep account information for as long as your account is active.

When you delete your account from the Account screen, we immediately disable sign-in, hide your profile from other users, and stop using your personal data for any new purpose. Because Nurly is a marketplace that processes orders and bank-transfer payments, we do not erase your records immediately. We retain your orders, payment receipts, and the name, address, and phone number attached to those orders so that:

• Any ongoing order can be completed, delivered, refunded, or disputed;
• We can meet tax, accounting, and fiscal-reporting obligations in Uzbekistan, which require order and payment records to be kept for up to seven (7) years;
• We can prevent fraud, abuse, and repeat account-creation by banned users.

Retained records are not used to contact you for marketing and are not visible to shops or other users. We anonymize or erase personal data that is no longer needed for any of the purposes above.

6. Your rights and choices

You can:

• Review and edit your profile, saved addresses, and notification preferences at any time from the Account screen;
• Turn push notifications off from your device settings or inside the app;
• Request a copy of the personal data we hold about you;
• Request correction of inaccurate data;
• Delete your account from the Account screen. Deletion signs you out, disables sign-in with that email, and removes your profile from public view. Orders and payment records are retained for the reasons and timeframe described in Section 5.

To exercise any of these rights, contact us at support@nurly.life.

7. Children

Nurly is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), hashed passwords, and access controls on our backend. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International users

Nurly is operated from Uzbekistan and intended for users in Uzbekistan. If you access the app from another country, you understand that your information will be processed and stored in Uzbekistan, which may have data-protection rules different from your home country.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you inside the app or by email. The “Effective date” at the top of this page shows when it was last updated. Continued use of the app after an update means you accept the revised policy.

11. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at support@nurly.life.