Company privacy policy

When you use Nouri, whether you're visiting our site, filling out forms, or using our services, we collect:

Personal Details Your name, email address, and other contact info you choose to share. This helps us send you personalized care, respond to questions, and keep you updated.

Health Information Because Nouri supports child nutrition and obesity care, we may collect your child's age, health history, preferences, allergies, and related details through our tools. We treat this information with the highest sensitivity and confidentiality.

Technical and Usage Data To improve our services, we collect your IP address, browser type, time on site, and how you interact with content. We use cookies and similar technologies, described below.

We use your data to: Deliver personalized care and recommendations. Respond to questions or support requests. Improve site functionality and user experience. Understand what services are most useful to families. Send occasional updates or resources (if you opt in). Comply with laws and maintain platform security. We use your information only for the purposes it was provided. Your health data will never be used for unrelated marketing.

We use cookies to: Remember preferences. Understand site usage. Improve content. Measure marketing effectiveness. Show more relevant content. You can adjust your browser settings or use our Cookie Settings to control cookie usage. Some cookies are necessary for site function. We use trusted tools like Google Analytics and Hotjar to understand usage. These services do not receive your name, health data, or contact info.

We never sell your personal data. We may share limited data with trusted providers who help us operate the site, communicate, or analyze behavior. They only access what they need and are bound by confidentiality obligations.

If you sign up, we may email you with tips, updates, or offers. You can unsubscribe anytime by clicking the link in any email or emailing us at info@heynouri.com.

We keep personal information only for as long as we need it for the purposes described in this notice, and then delete it or de-identify it. Because Nouri supports pediatric care, some of what we collect becomes part of a medical record that we are legally required to retain for a minimum period, even after you stop using Nouri. Our standard retention periods are:

Health and clinical records Intake answers, growth and weight history, visit notes, care plans, lab and prescription records, and messages with your care team are retained for at least 7 years after the last date of service. Where care was provided to a minor, we retain these records until the patient turns 18 and for at least 7 years after that, or longer where state medical-record laws require it.

Account and profile information Your name, email address, phone number, login credentials, parent and child profile details, and device push tokens are kept while your account is active and for up to 24 months after you close it or stop using it, after which we delete or de-identify them. Anything that forms part of the medical record above is kept on the medical-record schedule instead.

Visit recordings, transcripts, and summaries Where a telehealth visit is recorded with consent, we keep the recording and transcript only as long as needed to complete and verify clinical documentation, and no longer than 12 months. The clinical notes written from them remain in the medical record.

Billing, insurance, and payment records Claims, invoices, eligibility and authorization records, and payment history are retained for 7 years to meet tax, audit, and healthcare-claims requirements. Full payment card numbers are handled by our payment processor and are never stored on our systems.

Consents, authorizations, and HIPAA documentation Signed consents, authorizations, acknowledgments, and related HIPAA records are retained for at least 6 years from the date they were created or last in effect, as HIPAA requires.

SMS and email records Records of your opt-in and opt-out are kept for at least 5 years so we can demonstrate consent and honor your choices. Contact details for people who never become patients are deleted or de-identified within 24 months of the last interaction. If you unsubscribe, we keep a minimal suppression record of your email address or phone number so that we do not contact you again.

Support and other communications Emails, support requests, and in-app support conversations are retained for 3 years from the last message, unless they form part of the medical record.

Analytics, device, and log data Cookie, analytics, and device data, including IP address, app version, and usage events, is retained for up to 26 months. Server, security, and crash logs are retained for up to 12 months.

Backups Our systems are backed up on an encrypted, rolling basis. When data is deleted from our live systems, residual copies may remain in backups until those backups age out, which takes no more than 90 days.

We may keep information longer where the law requires it, or where it is needed for an open claim, dispute, investigation, or legal hold. When we no longer need information, we securely delete it or de-identify it so that it can no longer be linked to you or your child.

You can ask us to delete your account and your data at any time. In the Nouri app, tap Delete Account at the bottom of the Account tab, or email us at info@heynouri.com from the address on your account.

Once we verify the request, we close the account and delete or de-identify your personal information within 30 days, except for records we are legally required to keep — primarily medical records, billing and claims records, and consent documentation. Those are retained for the periods described above and then securely destroyed. We will tell you what, if anything, we had to keep and why.

Uninstalling the app does not by itself delete data already stored on our servers. If you would prefer to access, receive a copy of, or correct your data rather than delete it, use the same contact above.

Nouri is available only in the United States. Under U.S. laws like CCPA, you can: Request your data. Ask for corrections or deletions. Know who data is shared with. Opt out of data use for targeted ads. To make a request, email us at info@heynouri.com. We'll respond within required timelines.

We use modern security practices including encryption, access controls, secure storage, and system monitoring. While no system is perfectly secure, we take every step to protect your data.

Nouri accounts are created and used by parents, legal guardians, and caregivers — not by children. We do not knowingly allow anyone under 13 to create an account, and we do not knowingly collect personal information directly from a child. If we learn that we have, we will delete it promptly.

Because Nouri supports pediatric nutrition and obesity care, we do collect health information about a child — such as age, growth and weight history, medical history, and eating habits — but only from the parent or guardian who provides it, with their consent, and only to deliver care. That information is treated as protected health information, is retained on the medical-record schedule described above, and is never used for advertising. A parent or guardian may review it, ask us to correct it, or ask us to delete it, subject to the medical-record retention requirements described above.

We may update this policy as laws or services change. Significant changes will be communicated via the site or email.

Have questions? We're here. 📩 Email: info@heynouri.com. Privacy is part of care. We take both seriously.