Ask Nomi Privacy Policy

Quick Summary

1. Your Consent

By using Ask Nomi, you agree to this Privacy Policy.

When you provide health data, you explicitly consent to us processing:

• Menstrual cycle and reproductive health data
• Symptoms, health conditions, wellness information
• Data from connected devices (HealthKit, Health Connect)

You can withdraw consent anytime by deleting your data or account.

Beta users acknowledge:

• Beta services may have bugs or data loss
• Your feedback helps improve the product
• Beta features are confidential

2. Not Medical Advice

• We provide tracking and information tools only
• We do NOT diagnose, treat, or provide medical recommendations
• AI responses may be inaccurate - always verify with healthcare providers
• No doctor-patient relationship is created
• If emergency, call 911 immediately

You assume all risks of using health tracking tools. We are not liable for health outcomes, medical decisions, or delayed diagnoses based on our Services.

3. Beta Services Warning

No warranties

• Services provided "AS IS" without guarantees
• May be unstable, incomplete, or change without notice
• We don't guarantee accuracy, availability, or performance

Data loss risk

• Beta testing may result in data loss
• Keep your own backup of important health data
• We're not responsible for lost data during beta

By using beta, you agree to

• Keep unreleased features confidential
• Provide feedback on bugs
• Accept risk of service interruptions

4. What We Collect

You Provide

Account Info:

• Name, email, age, location, preferences

Health Data (with your consent):

• Menstrual cycles: dates, flow, symptoms
• Reproductive health: fertility, pregnancy, contraception
• Physical metrics: weight, temperature, activity
• Lifestyle: sleep, stress, exercise
• Medical info: conditions, medications (optional)
• Journal entries and notes

Device Integrations (optional):

• Apple HealthKit, Google Health Connect, wearables
• One-way import only - we don't send data back

We Collect Automatically

Technical Data:

• Device type, browser, IP address (approximate location only)
• App usage, pages visited, features used
• Performance data, error logs

We do NOT collect:

• Precise GPS location
• Your contacts or other apps
• Government IDs or financial accounts

5. How We Use Your Data

Primary uses:

• Provide services (tracking, predictions, AI insights)
• Personalize your experience
• Improve products (using anonymized data)
• Send service updates and support

We do NOT:

• Use health data for advertising
• Sell your data
• Share with employers or insurers
• Make automated decisions affecting your legal rights

Legal bases (GDPR):

• Contract - providing services you requested
• Consent - processing health data
• Legitimate interest - security, product improvement
• Legal obligation - complying with laws

6. How We Share Data

We do NOT:

• Sell your data
• Share health data for advertising
• Give data to employers, insurers, or data brokers

We share with:

Service Providers (under strict contracts):

• Supabase (database), Vercel (hosting), AWS (infrastructure)
• OpenAI, AWS Bedrock (AI processing - no training on your data)
• Email delivery, analytics (anonymized only)

Legal Requirements:

• Valid court orders or subpoenas only
• We review all requests, challenge overbroad ones
• We notify you when legally permitted

With Your Consent:

• Healthcare providers you authorize
• Research studies you opt into

7. Your Rights

All users can:

• Access - Get copy of your data
• Correct - Fix inaccurate information
• Delete - Remove your data (account deletion)
• Export - Download data in portable format
• Withdraw consent - Stop processing anytime

State-specific rights:

• California (CCPA): Right to know, delete, correct, opt-out of sale (we don't sell)
• Washington, Nevada, Colorado, etc.: Similar privacy rights

How to exercise:

• Email: hello@asknomi.ai
• Subject: "Privacy Request - [Your Right] - [Your State]"
• Response: 30-45 days

No discrimination for exercising your rights.

8. Data Security

Your responsibility:

• Use strong passwords, enable 2FA
• Don't share credentials
• Report suspicious activity to hello@asknomi.ai

9. Data Retention

While account active: We keep all your data

After deletion:

• Data deleted from production within 30 days
• Backups purged within 90 days
• Some anonymized data retained for analytics

Inactive accounts:

• After 3 years, we may delete (with 30-day notice)

Cannot be recovered after deletion is complete.

10. Children's Privacy

18+ ONLY. We do not knowingly collect data from anyone under 18.

If we discover an underage account:

• Immediate deletion within 24-48 hours
• All data permanently removed

Report underage users: hello@asknomi.ai with subject "Underage User Report"

11. Your Reproductive Health Privacy

Our pledge:

1. No voluntary law enforcement sharing - only with valid legal process
2. We review all requests, challenge overbroad ones, notify you first
3. Data minimization - less data = less to disclose
4. You control your data - delete anytime, unrecoverable
5. Transparency reports - we'll publish data on legal requests

12. International Transfers

Your data may be processed in the United States.

Primary locations:

• US (primary servers)
• Service providers may process globally

13. Changes

We may update this Policy.

Material changes:

• 30-day email notice before changes take effect
• Continued use = acceptance

If you disagree:

• Delete your account before changes take effect

14. Contact

Key Definitions

Personal Data

Info that identifies you

Special Category Data

Sensitive health info (GDPR)

Consumer Health Data

Health-related info (state laws)

Anonymization

Removing identifiers so data can't be linked to you