This Privacy Policy explains how Noura Health ("Noura", "we", "us", or "our") collects, uses, stores, and protects personal information when you use our website, mobile app, and related services.
Noura is designed to help people manage chronic illness, symptoms, routines, treatments, FlareGuard™ estimates, Adam AI support, and community features. Because this may involve health information, we treat your privacy with extra care.
Noura is not an emergency service and does not replace professional medical advice, diagnosis, or treatment.
Information We May Collect
Depending on the features you use, we may collect:
- Account details, such as your name, email address, login details, and app preferences.
- Health and wellbeing information you choose to enter, such as pain, fatigue, mood, sleep, symptoms, medications, treatments, routines, notes, photos, voice notes, flare patterns, and check-in history.
- Device or wearable information you choose to connect, such as Apple Watch or Apple Health-related signals, where you give permission.
- Community and support content, such as messages, posts, replies, or other information you choose to share inside community features.
- Technical and usage information, such as device type, operating system, app version, crash logs, diagnostics, approximate location derived from IP address, and how the app or website is used.
- Support communications, such as messages you send to us, feedback, bug reports, and related contact information.
How We Collect Information
We collect information when you:
- Create an account or update your profile.
- Enter health, wellbeing, treatment, routine, or community information.
- Give permission to connect device, wearable, camera, microphone, photo, notification, or health-data features.
- Use the app, website, or customer support channels.
- Allow analytics, diagnostics, or similar tools to help us improve reliability and performance.
How We Use Information
We use information to:
- Provide and operate Noura's symptom tracking, insights, FlareGuard™, Adam AI, health record, and community features.
- Personalise insights, guidance, reminders, and app experiences.
- Store your records and make them available to you across your account.
- Improve safety, reliability, accessibility, app performance, and user experience.
- Respond to support requests and communicate important service updates.
- Detect, prevent, and respond to misuse, fraud, security incidents, or technical issues.
- Comply with legal, regulatory, and App Store requirements.
Health Data and Consent
Health and wellbeing information can be sensitive. We only collect health-related information that you provide, upload, generate through your use of the app, or permit us to access through connected services.
Where required, we rely on your explicit consent to process health information. You can withdraw permissions through your device settings, app settings, or by contacting us. If you withdraw permission, some features may stop working as expected.
Sharing Information
We do not sell your personal information. We may share information only where necessary to operate, protect, or improve Noura, including with:
- Supabase, which provides Noura's authentication, database, file storage, realtime, and secure backend infrastructure.
- OpenAI, which processes information only after you give in-app permission and use an Adam AI feature, as described below.
- Other service providers that host, secure, diagnose, or support the app and website.
- Analytics and diagnostics providers that help us understand app performance and fix issues.
- Professional advisers, regulators, law enforcement, or authorities where legally required.
- Other users only when you choose to share information through community or sharing features.
Any third party that processes personal information for us must use it only to provide the contracted service and protect it with the same or equivalent privacy and security safeguards required by this policy and applicable law.
Adam AI and OpenAI
Adam's remote AI features are optional. Before any personal information is sent to OpenAI, Noura shows an in-app permission screen that names OpenAI, explains what may be sent, and lets you allow or decline the transfer. If you decline, remote Adam AI remains off and Noura does not send your health context to OpenAI.
If you allow Adam AI, the information sent for a request may include:
- Your profile details and main condition, where you chose to provide them.
- Your check-ins and notes, including pain, symptoms, fatigue, sleep, mood, activities, flares, routines, and possible triggers.
- Your Care items, such as treatments, support tools, what you tried, and whether it helped.
- Recent Adam interactions and previous AI summaries used to provide continuity and avoid repeating unhelpful suggestions.
- Optional calendar, reminder, movement, Apple Health, weather, routine, or day-log context only where you separately enabled that source.
- A photo, recognised text, or voice note only when you specifically ask Adam to analyse that item.
Noura sends only the context needed to generate the summary, suggestion, explanation, image response, voice response, or recommendation you requested. Requests are routed to OpenAI through Noura's secure backend; the app does not place an OpenAI secret key on your device. Noura may store the resulting Adam interaction in your account so that history and memory features work for you.
You can withdraw permission at any time in Noura under Settings > AI & data. This stops future personal-data transfers to OpenAI but does not automatically delete information already stored in your Noura account. You can delete your Noura account in the app or contact us to request deletion. OpenAI processes data under its business/API data protection terms and is required to provide the same or equivalent protection described in this policy.
AI outputs may be incomplete or inaccurate and should not be treated as medical advice, diagnosis, a medical measurement, or emergency monitoring. Speak with a qualified healthcare professional before making medical decisions.
Data Retention and Deletion
Account records, health and wellbeing entries, Care items, community content, and saved Adam history are kept while your account is active or until you delete the item or account, unless a longer period is required for legal, fraud-prevention, security, or dispute purposes. Short-lived operational logs and processor backups may remain for a limited period before being overwritten under standard retention cycles.
You may request deletion of your account or personal information by contacting us. We may retain limited information where required by law, for security, fraud prevention, backup integrity, or legitimate business records.
Your Privacy Choices
Depending on your location, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Delete your account or request deletion of personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Request a copy of your information in a portable format.
You can also manage device permissions, such as health, camera, microphone, notifications, and photos, through your device settings.
Security
We use technical and organisational safeguards designed to protect personal information. No online service can guarantee complete security, but we work to protect information against unauthorised access, loss, misuse, alteration, or disclosure.
Children
Noura is not intended for children under 13. If a higher minimum age applies in your country, you must meet that age to use Noura. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it.
International Transfers
Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international transfers of personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you, such as by updating the date above, showing an in-app notice, or sending a message where appropriate.
Contact Us
If you have questions, requests, or concerns about privacy, contact us at privacy@noura-health.io.