Privacy policy

Noura Health App Limited is the data controller for the information described in this policy. This means we are the company responsible for your personal information.

• Company: Noura Health App Limited
• Company number: 17456320
• Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
• Registered with the Information Commissioner’s Office, the United Kingdom data protection regulator
• Contact for any privacy question or request: privacy@nourahealth.app

This policy covers the Noura website at nourahealth.app and the Noura app.

Information kept on your device

When you use Noura without an account, the things you log stay on your device, in your browser or installed app. This includes your daily check-ins, your habit and foundation ticks, your notes, your hydration, your energy and sleep ratings, the feelings you tap, your saved recipes and shopping list, and your garden progress. We do not receive this information. It remains yours, on your device, until you clear it or remove the app.

Information you give us if you create an account

For the free Noura, creating an account is your choice. For Noura Premium, an account is needed. If you create one, we collect your email address, which you use to sign in, and a backup of the information above, so that your progress is saved and can move with you to a new device. We store this so that your account works and your data is not lost. You can delete your cloud data or your whole account at any time from within the app, or by emailing us.

Noura Premium membership

If you buy Noura Premium, or are given a Premium key, we keep a small membership record: your membership key, your plan, whether it is active, the dates it started and ends, the email address you gave when you paid, and the references our payment provider gives us for your purchase. We link your membership to your Noura account, so that it follows you to a new phone when you sign in, and so that one membership is used by one member. A key that is linked to one account will not open Premium on another.

Payment is taken by our payment provider, Stripe. We never see or hold your card or bank details. When you go to pay, we pass Stripe your account email, so that you do not have to type it again, and a reference to your account, so that your membership is linked to the right account. If you have a monthly or yearly membership, you can cancel it yourself at any time from Settings in the app.

If you unlocked Premium before 7 October 2026 without an account, we ask you to sign in or create a free account by 9 November 2026. After that date, Premium pauses on a device that is not signed in, and opens again as soon as you sign in. Nothing you have logged is deleted.

The Premium companion, Ask Noura

Premium members can hold a conversation with Ask Noura. To write a reply, your message, a short part of the recent conversation, and a few details that do not identify you, such as your chosen focus areas, your food cultures and your dietary needs, are sent from our server to our AI provider, Anthropic. Your planned meals for the week and a list of Noura recipe names may be sent too, so that Noura can refer to them. Your name, your email address and your contact details are never sent. Anthropic does not use this information to train its models. Please do not type anything into Ask Noura that you would not wish to share.

If you choose to turn on Personal reflections, a small summary of your own recent patterns is also sent, so that Noura can reflect them back to you. The summary is worked out on your own device from what you have logged, such as your energy, sleep, feelings, symptoms, cycle and movement, and your glucose if you have connected it. It is sent as averages and trends, not as your full records, and it carries nothing that identifies you. This is off unless you agree to it, and you can turn it off at any time in Settings.

Ask Noura is educational. It does not diagnose, and it is not medical advice.

Cupboard Scan

If you use Cupboard Scan, you take a photo of your ingredients so that Noura can suggest meals. Before the photo leaves your phone, we make it smaller and remove the hidden details a phone adds to a photo, such as where it was taken. The photo is sent from our server to our AI provider, Anthropic, to be read, and a short list of the food in it comes back. We do not store your photo. The list stays on your device. We keep a count of the scans you have used each month, so that we can apply the monthly limit, and we delete each month's count after three months. A photo can show more than food, so please photograph only your ingredients. We ask for your agreement before your first scan, and you can turn Cupboard Scan off at any time in Settings.

Health and wellbeing information

Some of what you may choose to log, such as your energy, your sleep, your mood and feelings, your symptoms, your cycle, your hydration, and, if it is relevant to you, your weight, your blood pressure or your glucose, counts as health information. Under data protection law this is a special category of personal data that deserves extra care. We only hold this information where you have chosen to record it, and where you have an account, we only back it up with your explicit consent, which you give when you sign in. Anything of this kind that you type into Ask Noura, and the Personal reflections summary, are also sent to our AI provider only with your explicit consent. You can withdraw consent at any time by deleting your cloud data or your account, or by turning Personal reflections off.

Noura is an educational wellbeing tool. It does not provide medical diagnosis or treatment, and the information in it is not medical advice.

Information from the website

If you join the waitlist or use a contact form on the website, we collect the details you enter, such as your name, your email address, and any message. We use these to reply to you and, if you asked to be kept updated, to send you occasional news about Noura. You can unsubscribe at any time.

Website analytics

We use a privacy-friendly analytics tool to understand how many people visit the site and the app, and which pages are used. This tool does not use cookies, does not identify you, and does not track you across other websites. It gives us aggregate counts only, not information about individuals.

You can choose not to be counted at all, on this phone or computer. Do not count my visits Noura also respects the Global Privacy Control signal if your browser sends one.

The fonts and code that Noura uses are hosted on nourahealth.app itself, so opening a page does not send your details to a font or code service.

Measuring whether Noura helps

If you create an account, Noura keeps a small, private record of the dates you were active, whether you use Noura as an installed app, and whether you used a few of its main features on a given day. This record holds no wellbeing content of any kind: it never includes what you logged, wrote, or tracked. Each night these records are combined into anonymous totals that carry no account with them, and those totals are all we use to understand whether people return and to make the case for Noura to health services. You can export or delete your account data, including this record, at any time.

Reminders

If you choose to turn on daily reminders, we store the technical subscription that allows your device to receive them. This is only created if you opt in, and you can turn reminders off at any time.

Data protection law requires us to have a lawful basis for using your personal information. Ours are:

• Consent, for creating an account and backing up your data, for holding the health and wellbeing information you log, for the Premium companion and Personal reflections, and for sending you any news. You can withdraw consent at any time.
• Legitimate interests, for keeping the service secure and working, for making sure one Premium membership is used by one member, and for understanding overall use of the site through privacy-friendly, non-identifying analytics.
• Performance of a contract, for providing the account features you have asked us to provide, and any Premium membership you have bought.
• Legal obligation, for keeping records of payments for as long as tax and accounting law requires.

For health and wellbeing information specifically, our condition for processing this special category data is your explicit consent.

We do not sell your personal information, and we do not share it for advertising. We use a small number of trusted service providers to run Noura, and they may process your information only on our instructions and only to provide their service to us:

• A cloud database and hosting provider, which stores your account backup on secured servers in the European Union.
• A website hosting provider, which serves the website and handles the waitlist and contact forms.
• An email provider, which we use to operate our email, to send your sign-in codes and your Premium key, and to reply to you.
• An AI provider, Anthropic, which writes the replies in the Premium companion, Ask Noura, and reads the photos in Cupboard Scan. It receives only what is described above, and only for Premium members, or free members trying Cupboard Scan, who have agreed. Anthropic deletes what it receives within 30 days, unless it must keep something longer to enforce its usage rules or to comply with the law, and it does not use it to train its models.
• A privacy-friendly analytics provider, which gives us non-identifying visitor counts.

Our payment provider, Stripe, takes payment for Noura Premium and provides the page where you can manage or cancel a membership. Stripe handles your card and payment details itself, under its own privacy policy, and we do not receive them.

We may also disclose information if the law requires it, for example in response to a valid legal request.

Your account information is held on servers in the United Kingdom and the European Union. Some of our service providers, including our AI provider and our payment provider, are based outside the United Kingdom or may process information outside it. Where any of your information is transferred outside the United Kingdom, we take steps to make sure it is protected by appropriate safeguards recognised under United Kingdom data protection law.

We keep your account information for as long as your account is active. If you delete your cloud data or your account, we remove it from our systems. If an account has not been used for twelve months, we delete it after sending a warning email. An account that holds a lifetime Premium membership is not deleted for being unused. We keep a minimal safety record of Ask Noura conversations for thirty days and then delete it. We keep your Premium membership record while your membership is active, and records of payments for as long as tax and accounting law requires, which is normally six years. Information that stays on your own device remains there until you clear it or remove the app. If you contact us or join the waitlist, we keep those details for as long as needed to deal with your request or until you unsubscribe.

We use appropriate technical and organisational measures to keep your information safe. Your account data is protected so that only your own account can reach it, and information is encrypted while it travels between your device and our servers. No system can be guaranteed to be perfectly secure, but we take the care that your information deserves.

Under United Kingdom data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information.
• Ask us to restrict or object to how we use your information.
• Ask us to provide your information in a portable format.
• Withdraw your consent at any time, where we rely on consent.

To exercise any of these, email privacy@nourahealth.app. We will respond within the time the law allows, normally one month.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling their helpline. We would appreciate the chance to put things right first, so please do consider contacting us before you do.

You can delete your Noura account and its data at any time.

• In the app: open Settings, then Account and data, and choose Delete my account and data. This removes your Noura data from our servers straight away and signs you out. Anything kept only on your phone stays there until you remove the app.
• By email: write to privacy@nourahealth.app from the email address you signed in with, and ask us to delete your account. We will delete your account, your sign-in email and all the data linked to it within 30 days, and tell you when it is done.

We keep records of any payment for as long as tax and accounting law requires, normally six years. Stripe, our payment provider, keeps its own records under its own privacy policy.

Noura is intended for adults. We do not aim the service at children, and we do not knowingly collect personal information from anyone under the age of eighteen. If you believe a child has given us their information, please contact us and we will remove it.

We may update this policy from time to time. When we make a meaningful change, we will update the date at the top and, where appropriate, let you know in the app or on the website.