Privacy policy

Noura Health App Limited is the data controller for the information described in this policy. This means we are the company responsible for your personal information.

• Company: Noura Health App Limited
• Company number: 17456320
• Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
• Registered with the Information Commissioner’s Office, the United Kingdom data protection regulator
• Contact for any privacy question or request: privacy@nourahealth.app

This policy covers the Noura website at nourahealth.app and the Noura app.

Information kept on your device

When you use Noura without an account, the things you log stay on your device, in your browser or installed app. This includes your daily check-ins, your habit and foundation ticks, your notes, your hydration, your energy and sleep ratings, the feelings you tap, your saved recipes and shopping list, and your garden progress. We do not receive this information. It remains yours, on your device, until you clear it or remove the app.

Information you give us if you create an optional account

Creating an account is your choice. If you do, we collect your email address, which you use to sign in, and a backup of the information above, so that your progress is saved and can move with you to a new device. We store this so that your account works and your data is not lost. You can delete your cloud data or your whole account at any time from within the app, or by emailing us.

Health and wellbeing information

Some of what you may choose to log, such as your energy, your sleep, your mood and feelings, your hydration, and, if it is relevant to you, your weight or blood pressure, counts as health information. Under data protection law this is a special category of personal data that deserves extra care. We only hold this information where you have chosen to record it, and where you have an account, we only back it up with your explicit consent, which you give when you sign in. You can withdraw that consent at any time by deleting your cloud data or your account.

Noura is an educational wellbeing tool. It does not provide medical diagnosis or treatment, and the information in it is not medical advice.

Information from the website

If you join the waitlist or use a contact form on the website, we collect the details you enter, such as your name, your email address, and any message. We use these to reply to you and, if you asked to be kept updated, to send you occasional news about Noura. You can unsubscribe at any time.

Website analytics

We use a privacy-friendly analytics tool to understand how many people visit the site and the app, and which pages are used. This tool does not use cookies, does not identify you, and does not track you across other websites. It gives us aggregate counts only, not information about individuals.

Reminders

If you choose to turn on daily reminders, we store the technical subscription that allows your device to receive them. This is only created if you opt in, and you can turn reminders off at any time.

Data protection law requires us to have a lawful basis for using your personal information. Ours are:

• Consent, for creating an account and backing up your data, for holding the health and wellbeing information you log, and for sending you any news. You can withdraw consent at any time.
• Legitimate interests, for keeping the service secure and working, and for understanding overall use of the site through privacy-friendly, non-identifying analytics.
• Performance of a contract, for providing the account features you have asked us to provide.

For health and wellbeing information specifically, our condition for processing this special category data is your explicit consent.

We do not sell your personal information, and we do not share it for advertising. We use a small number of trusted service providers to run Noura, and they may process your information only on our instructions and only to provide their service to us:

• A cloud database and hosting provider, which stores your account backup on secured servers in the European Union.
• A website hosting provider, which serves the website and handles the waitlist and contact forms.
• An email provider, which we use to operate our email and to reply to you.
• A privacy-friendly analytics provider, which gives us non-identifying visitor counts.

We may also disclose information if the law requires it, for example in response to a valid legal request.

Your account information is held on servers in the United Kingdom and the European Union. Some of our service providers are based outside the United Kingdom. Where any of your information is transferred outside the United Kingdom, we take steps to make sure it is protected by appropriate safeguards recognised under United Kingdom data protection law.

We keep your account information for as long as your account is active. If you delete your cloud data or your account, we remove it from our systems. Information that stays on your own device remains there until you clear it or remove the app. If you contact us or join the waitlist, we keep those details for as long as needed to deal with your request or until you unsubscribe.

We use appropriate technical and organisational measures to keep your information safe. Your account data is protected so that only your own account can reach it, and information is encrypted while it travels between your device and our servers. No system can be guaranteed to be perfectly secure, but we take the care that your information deserves.

Under United Kingdom data protection law you have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information.
• Ask us to restrict or object to how we use your information.
• Ask us to provide your information in a portable format.
• Withdraw your consent at any time, where we rely on consent.

To exercise any of these, email privacy@nourahealth.app. We will respond within the time the law allows, normally one month.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling their helpline. We would appreciate the chance to put things right first, so please do consider contacting us before you do.

Noura is intended for adults. We do not aim the service at children, and we do not knowingly collect personal information from anyone under the age of eighteen. If you believe a child has given us their information, please contact us and we will remove it.

We may update this policy from time to time. When we make a meaningful change, we will update the date at the top and, where appropriate, let you know in the app or on the website.