Privacy policy
Last updated November 2, 2026
Contents
1. Who we are and what this covers
TNT Management Holding, LLC, d/b/a Mobiulous and nailbulous.com ("Mobiulous", "we") runs the Mobiulous website and software. This policy explains what personal information we collect, why, who receives it, how long we keep it, and the choices and rights you have. It covers customers, technicians, applicants and visitors. Technicians also agree to the Technician Agreement, which adds notes about the documents they give us.
We do not sell your personal information, and we do not share it for advertising across other companies' sites or apps. We show no advertising and use no advertising or analytics trackers on the Service.
2. What we collect
| Category | Examples | From |
|---|---|---|
| Identifiers and account data | Email address; sign-in codes (kept only briefly and in a form we cannot read back); the network address and time of requests (to stop abuse) | You; your browser |
| Preferences and profile | ZIP code, style preferences, billing name and address | You |
| Health-related preferences (optional) | Care choices you tick, such as sensitive skin, an allergy, pregnancy-safe or diabetic care, and any note you add. See section 2A | You |
| Bookings and purchases | Technician, service, time, price, status, cancellations, reviews, disputes, points and membership level | You; the technician; our systems |
| Payments | Payment details are taken by our payment partner, not by us. We keep only a reference and the amount, and the last digits when the partner gives them to us | Payment partner |
| Photos and messages | Photos you attach to a review or dispute; what you write in reviews, disputes and the contact form; text messages between a customer and a technician about a paid booking (staff read them only to handle a dispute, support request or legal duty, and each reading is logged) | You |
| Technician information | Name, phone, billing address, whether you agreed to the optional picture comparison, business name, license details and pictures, certificates, profile photo, Social Security number, schedule, prices, deposit and fee records | Technicians; public license records |
| Device and usage data | Browser type, pages requested, errors | Your browser |
We do not collect precise location. We ask for a ZIP code. We do not use facial recognition on customers, and we do not use any other biometric identifier. One optional exception: a technician applicant who ticks a separate consent box lets a member of staff use comparison software, in the staff member's own browser, to compare the applicant's profile photo with the picture of their license. The software turns each face into numbers in memory only for that comparison and discards them; the result is shown to that person only and is not saved, and every use is logged. The applicant can say no, and can withdraw consent at any time on the Profile tab or through the Contact page, without any effect on how the application is reviewed. We do not use automated decisions that have legal effects on you: a check of a technician's license never approves or rejects an application by itself, and a person at Mobiulous makes the decision.
2A. Health-related information
Some services touch on your health, so we handle health-related information with extra care and treat it as sensitive personal information (and, where a state law uses the term, as consumer health data).
- What we collect: only the optional care preferences and note you choose to save on your account. We do not ask for medical records, diagnoses or medications, and you should not send them to us.
- Your consent: we collect a health-related preference only when you choose to save it, and we use it only to keep your preferences for you. You can withdraw consent and delete it at any time by removing it on your Preference page, or by sending a Privacy request.
- Who sees it: you and Mobiulous staff who need it to support you. Technicians are not shown these preferences, so tell your technician directly about anything that matters for your safety (see the Terms of Use, section 6A).
- What we never do: sell it, use it for advertising, or share it with anyone except as the law requires.
Technicians' own forms. A technician may ask you to complete their own health questionnaire, consent form or patch test (for example before permanent makeup, eyelash or massage services). You give that information to the technician, an independent business, and the technician is responsible for keeping and protecting it under the law that applies to them. Mobiulous does not receive those forms unless you or the technician send them to us in a dispute.
3. Why we use it
- To provide the Service: sign you in, keep your preferences, show technicians and open times, hold and confirm bookings, process refunds, credit points, and handle disputes and support requests.
- To verify technicians: check license details against public records where a state publishes them, and review documents.
- To keep the Service safe and lawful: prevent fraud and abuse, enforce our terms, keep records the law requires, and respond to legal requests.
- To pay and report taxes: technicians' Social Security numbers are used only for tax reporting (such as Form 1099), government compliance and to verify certificates.
- To send the messages the Service needs. We do not send marketing text messages, and we do not send advertising email.
- To improve and fix the Service, using de-identified or aggregate information where we can.
6. How long we keep it
- Account, booking and points records: while your account is open, and then for the time needed to meet tax, accounting, dispute and legal obligations (generally up to 7 years for financial records).
- Sign-in codes: 10 minutes. Notices queued for sending are cleared of their text once sent.
- Photos you attach to reviews and disputes: while the review or dispute exists, and until you ask us to delete them.
- Technician profile photos and license pictures: while the technician account is active, and then for as long as the law and our records of the technician's eligibility and any dispute require.
- Social Security numbers: while the technician account is active and for as long as tax reporting and legal duties require.
- Abuse-prevention logs (network address and time): short-term.
When we no longer need information, we delete it or de-identify it.
7. How we protect it
We use encryption in transit. Technician Social Security numbers are encrypted before they are stored, only the last four digits are ever shown on screen, and a full number can be read only by authorized staff after a second identity check, and each reading is logged. Pictures of licenses and your photos are private to you and to staff who need them. Staff sign in with a hardware or biometric key on their own device. No system is perfectly secure. If a breach affects your information, we will notify you and the authorities as the law requires.
8. Your choices and rights
You can see, correct and update much of your information in your account (Preference, Payment and billing address, Orders). You can leave a review or dispute photo out by not adding one.
Depending on where you live (for example California under the CCPA as amended by the CPRA, and other states with privacy laws), you may have the right to: know what personal information we collect, use, disclose and keep; get a copy of it; correct it; delete it; limit our use of sensitive personal information (we use it only as section 3 says); opt out of sale or sharing (we do neither); and not be treated worse for using these rights. You may also appoint an authorized agent. If you live in a state with a consumer health data law (such as Washington or Nevada), you also have the right to withdraw your consent to our collection of health-related information and to have it deleted; section 2A explains how.
To make a request, use the Contact page and choose "Privacy request". Tell us which right you want to use, and the email address on your account. We confirm that the request comes from the account holder (for example by sending a code to that email) before we act. We answer within 45 days, and may extend that once by up to 45 more days and tell you why. We may keep information we need to keep by law, and we tell you if so. If we decline a request, you may appeal through the Contact page (topic: Privacy request, and write "appeal"), and you may complain to your state's attorney general or privacy regulator.
California's "Shine the Light" law (Civil Code section 1798.83): we do not disclose personal information to other companies for their own direct marketing.
9. Children
The Service is for adults. We do not knowingly collect personal information from anyone under 18 and children cannot hold accounts. Some nail services are for children, and an adult books them. Massage, eyelash and permanent makeup services are for adults only. If you believe a child gave us information, tell us through the Contact page and we will delete it.
10. Where information is processed
Mobiulous is for people in the United States. Our providers may process and store information in the United States and other countries where they operate.
11. Changes and contact
If we change this policy, we post the new version here with a new date, and for a material change we tell you on the Service or by email before it takes effect.
Questions or requests: use the Contact page. We do not publish an email address so that automated senders cannot flood us, and we reply to every message through the address you give in the form.