Privacy Policy

This Privacy Policy describes how Noura AI ("Noura", "we", "us") processes personal data when you use our AI nutrition assistant delivered through WhatsApp. By using Noura, you agree to the practices described here. Noura is designed for nutrition tracking and habit building and does not provide medical diagnosis.

To provide the service, we may collect and process the following:

• WhatsApp messages: the content of the messages you exchange with Noura, including your phone number and WhatsApp profile identifiers.
• Meal records: descriptions of foods, portions and meals you log.
• Photos: images of meals you send for recognition and logging.
• Voice messages: audio you send, which is transcribed to log your entries.
• Weight: body weight measurements you choose to record.
• Water intake: hydration entries you report.
• Usage data: interaction metadata such as timestamps and feature usage to operate and improve the service.

Our website may use strictly necessary and analytics cookies to understand traffic and improve the experience. You can control cookies through your browser settings. The Noura assistant itself operates within WhatsApp and does not rely on website cookies to function.

Under the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018), we process your data based on: your consent; the performance of a contract to deliver the service you requested; our legitimate interests in operating and improving Noura; and compliance with legal obligations.

• To register and understand your meals, water intake and weight.
• To generate summaries, insights and progress tracking.
• To improve the accuracy and quality of the assistant.
• To communicate service updates and respond to support requests.

To understand text, voice and images, Noura uses third-party artificial intelligence services, including OpenAI. Message content, transcriptions and images may be sent to these providers solely to generate a response and log your entry. These providers process data on our behalf under their applicable data processing terms and do not use your content to train their models where such use can be disabled.

Noura operates through the WhatsApp Business Platform provided by Meta. Your messages are delivered via Meta's infrastructure and are subject to Meta's own terms and privacy policy. We only access the message content you send to Noura in order to provide the service.

We retain your data only for as long as necessary to provide the service and for legitimate or legal purposes. When you delete your account, we remove your personal data within a reasonable period, except where retention is required by law.

You may request deletion of your account and associated data at any time by messaging Noura on WhatsApp or emailing support@nouraai.com.br. We will process your request in accordance with the LGPD.

We apply technical and organizational measures to protect your data, including encryption in transit and at rest, access controls and monitoring. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

Some of our service providers may process data outside Brazil. When we transfer personal data internationally, we take steps to ensure an adequate level of protection consistent with the LGPD and applicable safeguards.

Under the LGPD, you have the right to:

• Confirm the existence of processing and access your data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymization, blocking or deletion of unnecessary data.
• Request data portability.
• Withdraw consent and object to processing.
• Be informed about data sharing with third parties.

For any privacy-related questions or to exercise your rights, contact our data team at support@nouraai.com.br.