Trust & Privacy
Your family's health data, in safe hands.
Health data is some of the most personal information a family has. This page sets out what we do with yours, and how you can control it.
Our promise
Your family's health data is yours.
Nuri is built by one person, and that shapes how this works. Nuri does not sell your data, does not run advertising against it, and does not collect anything I cannot give you a reason for. Every decision about what gets collected, where it is stored, and who can see it starts with the same question: would I be comfortable if this were my family?
If the answer is no, it does not ship.
The short version
What we do, and what we never do
Ten commitments follow, each specific enough to check.
What we do
-
Store your data on encrypted servers, both in transit and at rest.
-
Let you export your Nuri data, at any time, in a readable format.
-
Delete your account and all associated data permanently, on request.
-
Keep our data practices up to date as laws and best practices evolve.
-
Tell you clearly if anything important changes: no buried policy updates.
What we never do
-
Sell your data to anyone. Not data brokers, not insurance companies, not advertisers.
-
Show ads. Nuri's only business model is a subscription you pay for directly.
-
Use your health data to train AI models. The medication safety checks only ever read your data to give you an answer.
-
Share your data with third parties who don't need it to make Nuri work.
-
Make it hard to leave. If you go, you take your data with you.
Security
Protected at every step
Two things protect your data: encryption, and strict limits on who can see it.
Encrypted in transit and at rest
Every byte travelling between your phone and our servers uses TLS (the same encryption your bank uses). The data we store is encrypted at rest as well, adding another layer of protection.
Strict access controls
Every API request is authenticated. Our database rules are written so that each account reads and writes only its own records. We log anomalies and rate-limit requests to limit damage if any credential were ever compromised.
We try to be honest about what "secure" means: we follow current best practices and we fix vulnerabilities quickly when they're reported. No system is perfectly invulnerable. If you find a security issue, please email nuricare.co@gmail.com.
Data location & regulations
Where your data lives
Nuri's infrastructure runs on established cloud providers, using regions with strong data-residency practices. We chose our providers in part for their security posture and transparent data-handling policies.
We operate in alignment with Singapore's Personal Data Protection Act (PDPA): we collect only what we need, we tell you why we're collecting it, we keep it only as long as necessary, and we give you access and correction rights.
We also follow GDPR-aligned practices for users in applicable jurisdictions, including the right to erasure and the right to data portability.
Nuri is not a medical device and does not claim HIPAA compliance. If you need healthcare-grade compliance for a clinical setting, Nuri is not the right tool for that use case, and we'd rather tell you now.
Some safety features, like the medication safety checks, send the details you enter to a trusted AI provider so it can generate the result. That information is used only to give you the answer. It is never used to train AI models, and never sold.
What data we collect
- Account info (email, name): to identify you and send account notifications.
- Medications, schedules, and dose logs: so reminders and safety checks work.
- Appointments and provider details: to power the shared calendar and directory.
- Wellbeing check-in responses: to surface trends over time.
- Location: only if your parent switches location sharing on, so family can see where they are against the places you've named. Off unless they turn it on.
- Basic usage analytics (crash reports, which features get used): looked at in aggregate to fix bugs and improve the app.
You're in control
You decide what leaves your account, and who gets to see it.
Export or delete your account
From inside the app, you can request a full export of your data in a standard format, or permanently delete your account and every record associated with it. Deletion takes effect immediately, and backup copies clear within 90 days.
They decide what family sees
Family members only see what your parent has shared with them. This is built into how Nuri works, not an optional setting that can be overlooked. They can connect and disconnect family members at any time, and can limit exactly which information each person can access.
Family-consent model
When a family member asks to connect with your parent's account, your parent must explicitly approve. No one can follow their health without active, informed consent, and they can end that connection at any time.
Notifications you control
Push notifications for medication reminders, alerts, and family updates can be managed, or turned off entirely, in your device settings. We never send marketing push notifications.
Accessibility
Built to be usable by everyone
Nuri targets WCAG 2.1 Level AA across the app and this website. That means, in practice:
- Large, readable text: the app screens your parent uses have a minimum 18pt body size, well above AA requirements.
- High contrast: we design body text to meet a 4.5:1 contrast ratio and interactive elements to meet 3:1, the WCAG AA thresholds.
- Screen reader friendly: meaningful alt text, logical heading structure, and proper ARIA labels throughout.
- Reduced motion: all animations respect the "prefer reduced motion" system setting.
- Four languages: the app is available in English, Chinese, Malay, and Tamil, so your parent can read it in the language they're most comfortable in.
Tell us if something's hard to use
Accessibility is never finished, and one person building an app will miss things. If anything about Nuri, the app or this website, is hard to read, navigate, or understand, please tell us.
Your report comes straight to me, and I read every one.
Email us about accessibility →Full Privacy Policy
The detailed legal document covering everything we do with your data, written for the regulator as well as for you.
Read the Privacy Policy →Terms of Service
What you agree to when you create an account: your rights, our responsibilities, and how disputes are handled.
Read the Terms →Questions or concerns?
Questions about privacy, security, or your data rights? There is a real person at the other end, and I read every email.
nuricare.co@gmail.com →Bring Nuri home.
Set it up with your parent this weekend. It takes an afternoon, and it works on the phone they already own.
