Overview
Nora ("we", "our", "the app") is a personal health application for iOS. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We believe your health data is deeply personal and we take that responsibility seriously.
Nora does not sell, rent, or share your personal health information with third parties. Ever.
Nora is designed with your privacy rights in mind, in accordance with GDPR (EU), KVKK (Turkey), UK GDPR, and other applicable data protection regulations.
Data We Collect
Nora collects the following types of information:
- Health data from Apple Health: Heart Rate Variability (HRV), resting heart rate, sleep analysis, and step count. Nora reads this data and writes breathing session durations as Mindful Minutes.
- Symptom logs: The symptoms you manually enter (e.g., palpitations, dizziness), their intensity, context, and timestamp.
- Mood check-ins: Your daily mood score and optional notes.
- App settings: Your language preference, notification settings, and theme selection.
- Anonymous usage data: Aggregate, anonymized statistics used to power community highlights. These are never linked to your identity.
How We Use Your Data
- To calculate your nervous system score and surface AI-generated insights, entirely on-device.
- To sync your logs across your personal devices via iCloud (CloudKit). Only you can access this data.
- To send you personalized notifications based on your in-app preferences.
- To display anonymized community trends. Your individual data is never exposed to other users.
Apple Health (HealthKit)
Nora uses Apple's HealthKit framework to read HRV and related metrics, and to save your breathing sessions as Mindful Minutes. We request only the minimum data required. HealthKit data is processed on-device and is never transmitted to any third-party service. You can revoke Health access at any time in Settings → Privacy & Security → Health → Nora.
iCloud Sync (CloudKit)
Your symptom and mood logs are stored in your personal iCloud account using Apple's CloudKit. Your data is encrypted in transit and at rest by Apple, and is accessible only through your Apple ID. Nora does not have access to the contents of your CloudKit database.
Analytics (Firebase)
Nora uses Firebase Analytics for anonymized app usage analytics, for example, which screens are most visited. This data is aggregated and does not include your health information. You can opt out in Nora's Settings → Anonymous Sharing.
On-Device AI
Nora's insight engine runs entirely on your device. No health data is sent to an AI server or third-party model provider. On iOS 18.1+ with Apple Intelligence enabled, text refinement also runs locally.
Data Retention and Deletion
Your data is retained as long as you use Nora or until you request deletion. To delete all your data:
- Open Nora → Settings → Delete All Data to remove all local and iCloud records.
- To remove Health permissions, go to Settings → Privacy & Security → Health → Nora.
- To delete your iCloud data completely, uninstall Nora and delete the associated iCloud data from Settings → iCloud → Manage Storage → Nora.
Children's Privacy
Nora is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided health data through Nora, please contact us so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last updated" date at the top of this page.
Contact Us
If you have questions or concerns about your privacy, or would like to request data deletion, please contact us at: