Privacy Policy

Nuri Care is an eldercare app built to help older adults manage medications, appointments, and wellbeing, while keeping their family quietly in the loop. This policy covers both the Nuri mobile application and the Nuri website at nuricare.co (together, "the Service").

Nuri Care is the data controller for the information described here. You can reach us at nuricare.co@gmail.com.

We only collect what is needed to provide the Service.

We use the information we collect to:

• Provide the Service: medication reminders, appointment tracking, family-sharing summaries, wellbeing check-ins, and checking a new medicine for interactions when it is added.
• Send you push notifications and emails relevant to your care (reminders, alerts, account notices, notice of changes to this policy or our Terms, and, on a free trial, a reminder before it converts to a paid subscription).
• Understand how the app is used, while usage analytics are on for your account (Section 4): analytics events are linked to your account's user ID and record app actions such as confirming a dose or pressing SOS, not the health values involved, so we can diagnose bugs and improve the app. You can turn this off at any time in the app's Privacy choices.
• Respond to support enquiries, data requests and grievances, and enforce our Terms of Service.
• Comply with legal obligations where required.

We do not sell your personal data. We do not use it for advertising, and we do not share it with data brokers or marketing platforms.

Nuri asks for each of the following consents separately. None of them is selected for you in advance.

• Running Nuri with your health information (required): storing and using your health information to run Nuri, on Supabase's servers in Tokyo, Japan, and with the service providers named in Section 5. Nuri cannot run without this consent. If you do not give it, or you withdraw it later, you can delete your account, and we delete your data as described in Section 8.
• AI features (optional): sending text, photos and voice transcripts to Anthropic in the United States for the AI features described in Section 5. While it is off, nothing is sent to Anthropic, and every feature that does not need AI keeps working.
• Usage analytics and crash reports (optional): sending app-usage events to Google Firebase Analytics and crash reports to Sentry, as described in Section 5. While it is off, neither is sent, and the rest of Nuri works as normal.

If you accepted an earlier version of this policy, AI features and usage analytics and crash reports stay as they were for you, on the basis of that earlier acceptance, until you answer the new question in the updated app. From then on, only your answer counts. New accounts start with both off until you switch them on.

You can switch AI features and usage analytics on or off at any time in the app's Privacy choices, as easily as you gave them. You can withdraw your consent to running Nuri at any time by deleting your account in the app or by emailing us. Withdrawing a consent does not affect what was done with your information before you withdrew it. Each time you give, change or withdraw a consent, we keep a record of what you chose, which version of this notice you were shown, and when.

Sharing with family and location tracking have consents of their own, described in Sections 6 and 7.

Only you can give these consents. A family member may help you set up your phone, but the choices belong to the person whose account it is, and that person must make them. Nuri does not accept consent from anyone on another adult's behalf, and there is no route for a guardian or relative to consent for someone else. When you agree, you confirm that this is your own account and that you can understand and make these choices yourself, and we rely on that confirmation. If we are told that an account holder cannot understand these choices, we will contact them, offer a copy of their data and close the account.

The legal bases we rely on are:

• Consent: for everything listed above, for sharing with family, and for location tracking.
• Responding to a medical emergency: for SOS alerts and the location sent with them. An SOS reaches your connected family even if you have turned off health-data or location sharing, as data-protection laws allow when someone's life or health is at risk (for example, section 7(f) of India's Digital Personal Data Protection Act 2023).
• Legal obligation: keeping the security log described in Section 8, and keeping or disclosing data where a law requires it.

In Indonesia, these are the consent, vital-interests and legal-obligation bases in Article 20(2) of Law 27 of 2022 on Personal Data Protection. Under Singapore's PDPA, we collect, use, and disclose personal data only with your knowledge and consent, or where the PDPA permits without consent (e.g., investigations by public authorities).

We use a small number of third-party services to operate Nuri, each for the purpose listed below. Most process data for us under their published data-processing terms. Apple and Google sign-in, OpenStreetMap map tiles and YouTube receive data as independent companies under their own privacy policies. We keep your account and care records in a single database hosted in the Asia-Pacific region, and we send each provider only the data its job needs. Access to production data is limited to the people who need it to run the Service.

• Cloud hosting, database, and sign-in (Supabase, Asia-Pacific/Tokyo): stores your account data and care records and signs you in securely.
• Push-notification delivery (Google Firebase Cloud Messaging, then Apple Push Notification service, US): sends reminders and alerts to your device, including missed-dose reminders (which can name the medicine, dose and the first name of the person receiving care), pairing requests, and a trial-ending reminder. A device token and the notification text are shared for routing.
• AI features (Anthropic, US), only while AI features are on for your account (Section 4): adding a medicine by photographing its label, scanning a prescription or document, or speaking a voice check-in (Nuri Plus) sends that photo, the text read from the document, or the words spoken, to Anthropic to complete the entry, wherever Nuri operates. A health summary for family (Nuri Plus) sends the past seven days of readings, dose records and alerts, without a name, to Anthropic to write the summary. Where the person receiving care's region is Singapore, Malaysia or Hong Kong, or has not been set, adding a medicine also sends the new medicine, the person receiving care's other medicines and their health conditions to Claude, Anthropic's model, which checks for interactions using web search and public drug references. In every other region, or while AI features are off, the interaction check does not involve Anthropic; see the medicine interaction check entry below. Information sent to Anthropic is used only to produce your result and is never used to train AI models.
• Speech recognition, address lookup, sign-in and push delivery (Apple): voice check-ins and other spoken input are transcribed by Apple's speech-recognition service; a typed address, and the location of the person receiving care shown on the family home card, are converted to place names by Apple's geocoding service; "Sign in with Apple" shares the identity token, name and email used to create or access an account; and Apple Push Notification service delivers alerts to iPhones.
• Sign-in (Google Sign-In, US): if you use "Sign in with Google", Google shares the identity token, name and email used to create or access your account.
• Medicine interaction check from public data (Nuri's own servers): where the interaction check does not use Anthropic, the new medicine is compared with the person's other medicines against a copy of public drug-label data (US FDA drug labels, Wikidata and US National Library of Medicine drug classes) held on Nuri's own servers, and the matching source text is shown. Nothing is sent to the FDA or Wikidata on this path, health conditions are not used, and no AI model is involved.
• Medicine names (US National Library of Medicine RxNav and US FDA openFDA): Nuri's server sends these public services medicine names only, with nothing that identifies you, to suggest medicine names as you type and, on the interaction check that uses Anthropic, to look the medicines up.
• Address and place lookup (Google Places, US): when you search for a clinic, pharmacy, or address, the words you type are sent to Google so it can return matching suggestions.
• Map tiles (OpenStreetMap Foundation, UK/EU): any map shown in the app, including the family location screen and the place picker, loads map imagery from OpenStreetMap's tile servers, which receive the device's IP address and the map area being viewed.
• App security (Talsec): runs each time the app starts to detect tampering, rooting or jailbreaking. As part of its normal operation it sends Talsec information about the state and security of the app and device, an anonymous device ID, and the IP address of the request.
• Exercise videos (YouTube/Google, US): an exercise video that links to YouTube plays inside an embedded YouTube player, which receives the device's IP address and which video is being watched.
• Diagnostics and error monitoring (Sentry, EU), only while usage analytics and crash reports are on for your account (Section 4): receives crash and error reports so we can fix bugs. We strip identifying fields such as your email address and IP address before reports are sent.
• Product analytics (Google Firebase Analytics, US), only while usage analytics and crash reports are on for your account (Section 4): records app actions such as confirming a dose or pressing SOS, linked to your account's user ID, so we can see what to improve. No health values are sent.
• Transactional email (Resend, US): sends account and billing emails, such as sign-in and account notices. Your email address and the contents of those messages pass through Resend so they can reach you.
• Payments and subscriptions (RevenueCat and the app stores): RevenueCat receives the account ID of every signed-in user, so Nuri can tell which plan they have, and records the subscription status of paid plans. Your card details are handled by the app store, not by us.
• Website hosting and security (Cloudflare): serves nuricare.co and protects it from attacks. Standard request metadata (IP address, headers) is processed in transit.

We do not use advertising trackers or any advertising SDK, and we do not sell your data to ad networks. The in-app product analytics described above are the only analytics we run, and they are tied to your account, not aggregate or anonymous.

Your information is shared only in these circumstances:

• With your connected family members: connected family can always see the connection itself, the name and photo of the person receiving care, SOS alerts, and inactivity check-ins, since these are treated as safety information. Two switches in the app's privacy choices control everything else. Turning off "Share health data with family" stops family from seeing medications, dose history, vital signs, symptoms, exercise, health documents, health summaries and appointments, and stops health-reading and missed-dose alerts. Turning off "Location tracking" stops family from seeing location and stops safe-zone alerts; an SOS still carries location if it is sent. Health-data sharing defaults to on and location tracking defaults to off. When something is hidden this way, the family screen shows a plain notice that sharing has been turned off, rather than showing nothing unexplained.
• With our service providers: as described in Section 5, for the purpose of running the Service.
• When required by law: if we receive a valid legal request (court order, regulatory requirement), we will comply and, where permitted, notify the affected user.
• In a business transfer: if Nuri is ever part of a merger, acquisition, or sale of assets, your data may pass to the new owner. They will be bound by privacy commitments no less protective than this policy, and we will notify you beforehand so you can export or delete your data first.

We never sell your data to data brokers, advertisers, or marketing platforms, and we never share it for advertising purposes.

Medication lists, health conditions, appointment records, and wellbeing check-in responses are sensitive. We treat them with extra care:

• Health data is stored encrypted at rest and transmitted over TLS.
• Access within the app is gated by your account credentials. Family sharing starts only when the person receiving care agrees to a pairing from their own account. That agreement is their consent for the paired family member to see their medicines, missed doses, readings, appointments, SOS alerts and, if Location tracking is on, their location, and to add or update their medicines, readings and appointments.
• The person receiving care can disconnect a family member at any time, immediately revoking that family member's access to shared care information, and can turn off health-data sharing or location sharing at any time from the app's privacy choices, as described in Section 6.
• No health data is used to train AI models, benchmarked against other users, or disclosed to third parties beyond the processors listed in Section 5.

Nuri is a personal care-management tool, not a regulated medical device or covered healthcare provider. We do not claim to diagnose, treat, or provide clinical advice.

We keep each kind of data for these periods:

• Account and health records: until you delete your account.
• Location history: 7 days, except the latest position, which is kept until the next one replaces it. A location sent with an SOS alert stays with that alert until the account is deleted.
• Arrivals at and departures from named places: 7 days.
• Consent records: until you delete your account.
• Security log: 365 days, including after your account is deleted. It records account actions such as changes to sign-in details, consent changes and data exports, and holds no health records. When you delete your account, the log's link to your account is removed.
• Information sent to Anthropic for AI features: Anthropic deletes it within 30 days of receiving it, under its published terms for its API, unless it must keep it longer to enforce its usage policy or to comply with the law.
• Usage analytics: Google keeps event-level analytics data from Firebase for no more than 14 months.
• Crash reports: kept by Sentry for no more than 90 days, under Sentry's published retention periods.

Export: You can export a copy of your data at any time from inside the app, under Settings, then Export my data, in machine-readable JSON. You can also request one by emailing nuricare.co@gmail.com, and we will provide it within 30 days.

Deletion: You may delete your account from within the app or by contacting us. Deletion takes effect immediately: your personal data and care records are removed from our live systems as the request is processed, not queued for later. Some data stays after deletion, for these periods:

• the security log, for up to 365 days, with its link to your account removed;
• if usage analytics and crash reports were on, Firebase event data for up to 14 months and Sentry reports for up to 90 days;
• information sent to Anthropic, for up to 30 days, or longer where Anthropic's usage-policy enforcement or the law requires;
• RevenueCat's subscription record and Apple's purchase records, under their own terms;
• Resend's email-delivery logs, under its terms;
• anonymised aggregate data (e.g., feature-usage counts).

Any backup copies are deleted within 90 days.

We take reasonable technical and organisational measures to protect your data:

• All data in transit is encrypted with TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 at the storage layer.
• Connections to our backend are made over HTTPS only; cleartext traffic is disabled at the platform level.
• Access to production data is restricted to essential team members and is controlled by role-based permissions.
• Row-level security policies in the database ensure each user can only access their own data (and data shared with them by the person they look after).
• Profile photos are the one exception. They are served from a content delivery network at long, randomly generated web addresses, so they are not listed or searchable, but anyone holding the exact address can open the image. Please keep that in mind when choosing a profile photo.

No system is perfectly secure. If you discover a vulnerability, please report it responsibly to nuricare.co@gmail.com.

Nuri is operated from Singapore. Your account and care data are stored on Supabase's servers in Tokyo, Japan. The service providers named in Section 5 process some data in the United States, the European Union and the United Kingdom. Your consent to running Nuri with your health information (Section 4) covers storage in Japan and the use of those named providers. Your consent to AI features covers sending data to Anthropic in the United States; while AI features are off, nothing is sent to Anthropic. We also rely on each provider's published data-processing terms for the services we use. For users in India, the Digital Personal Data Protection Act does not restrict transfers to any of these countries. For users in Indonesia, we transfer data on the basis of your consent and our contracts with these providers.

Everyone who uses Nuri has the following rights over their personal data, wherever they live.

You can name a person to exercise your rights under this policy if you die or lose the capacity to manage your own affairs. To do this, email nuricare.co@gmail.com from the email address on your account with your nominee's full name and their email address or phone number. You can change or cancel a nomination the same way at any time.

When your nominee contacts us, we ask them for proof of their identity and either a death certificate or a medical certificate confirming your incapacity. Once we have checked these, your nominee can access, correct, export or delete your data and raise a grievance on your behalf. A nominee cannot give new consents for you.

If a personal data breach affects you, we will tell you without delay, and within 72 hours of learning of it, by email and in the app. We will tell you what happened, which of your data was involved, what we have done about it, what you can do to protect yourself, and who to contact. We will also tell the regulators the law requires us to tell, including Singapore's PDPC, the Data Protection Board of India and India's CERT-In, and Indonesia's personal data protection agency once it is established.

Nuri is only for adults. You must be 18 or older to use it, and you confirm this when you sign up. We do not knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we delete it. If you believe a child has an account, please contact us.

We may update this policy from time to time. When we make a material change, such as a new category of data, a new use or a new way of sharing, we email you before we ask you in the app whether you agree or decline. Nothing new applies to you until you agree. If you decline, you can export your data and delete your account.

The "Last updated" date at the top of this page reflects the most recent revision.

For any privacy-related questions, data requests, grievances, or concerns, please write to us at:

Nuri Care Data Protection Officer nuricare.co@gmail.com

Response times are set out in Section 11. For a request about your data, please write from the email address on your account and include "Data Request" in your subject line.