Privacy Policy

1. Who we are

Nuri is a supplement safety companion available at heynuri.app. Nuri provides educational support to help users organize supplement labels, supplement routines, health context, and questions to ask a pharmacist or clinician.

For privacy questions or requests, contact us at support@heynuri.app.

2. Information we collect

We collect information you provide directly, information generated when you use Nuri, and limited technical information.

• Waitlist information: email address and signup timestamp.
• Account information: Google sign-in identifier, email address, name, and authentication session data.
• Health context you choose to provide: health conditions, medications, supplement names, supplement ingredients, doses, schedules, intake logs, and stack review results.
• Scan information: supplement label images, extracted label text, extraction status, and user-confirmed ingredient details.
• Support and feedback: messages you send to us and related metadata.
• Technical and analytics data: device/browser information, pages viewed, approximate region, referral source, and product events such as waitlist signup or scan attempt.

3. How we use information

• To operate the waitlist and send weekly launch notes or early access updates.
• To create and secure your account.
• To store your supplement stack and health context when you choose to use the app.
• To extract supplement facts from label text or images.
• To generate educational stack reviews and possible pharmacist or clinician questions.
• To improve Nuri's safety rules, onboarding, reliability, and product experience.
• To detect abuse, debug errors, protect the service, and comply with legal obligations.

4. AI and third-party processing

Nuri uses server-side AI providers to extract supplement label information and generate educational explanations. We currently use OpenRouter as an AI gateway. We send only the information needed for the requested feature, such as label text, label images, supplement ingredients, and relevant profile context.

You should avoid entering information that is not needed for a supplement review. Nuri should not be used for emergencies or highly sensitive medical records.

5. Analytics and cookies

We use Google Analytics 4 to understand public website traffic and product usage. We configure analytics events to avoid sending medicine names, health condition names, supplement names, email addresses, label images, or label text as analytics event parameters.

Your browser may let you block or delete cookies. Blocking cookies may affect authentication or analytics.

6. How we share information

We do not sell your personal information. We share information only as needed to operate Nuri.

• Infrastructure providers: hosting, database, storage, authentication, and security providers.
• AI providers: AI-processing providers used for label extraction and educational explanations.
• Analytics providers: privacy-conscious product and traffic analytics.
• Payment providers: Stripe or similar payment processors if paid subscriptions are enabled later.
• Legal and safety: when required by law, to protect rights and safety, or to investigate abuse.

7. Security and retention

We use reasonable technical and organizational safeguards, including private storage for scan uploads, server-side API keys, and database access controls. No online service can guarantee perfect security.

We keep waitlist information until you unsubscribe or ask us to delete it. We keep account and app data while your account is active or as needed for security, legal, backup, or dispute purposes. We will delete or de-identify data when it is no longer needed for the purposes described here.

8. Your choices and rights

• You can unsubscribe from launch emails using the unsubscribe link or by contacting us.
• You can request access, correction, export, or deletion of your personal information.
• You can ask us to close your account and delete app data, subject to legal and security limits.
• You can opt out of certain analytics using browser settings or analytics-blocking tools.

Depending on where you live, privacy laws such as the Singapore PDPA, California privacy laws, UK GDPR, or EU GDPR may provide additional rights. We will respond to valid privacy requests as required by applicable law.

9. Children

Nuri is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child provided information to Nuri, contact us so we can delete it.

10. International users

Nuri may process and store information in countries other than where you live. Those countries may have different data protection laws. By using Nuri, you understand that your information may be processed by our service providers in other jurisdictions.

11. Changes to this policy

We may update this policy as Nuri develops. If changes are material, we will provide notice through the website, email, or the app.