Privacy Policy

Effective Date: 13 August 2026

Privacy at a glance

We do not sell your personal information, use it for advertising, or track you across other companies' apps or websites.
We use your selected fertility journey only to tailor breathing support and organise your app experience. We do not send it to analytics, subscription or diagnostic services.
App usage statistics are not linked to your Nora account.
The app and website use separate systems. Website services receive information only when you use the website, a form, the waitlist or email.

The sections below explain why we use information, how long we keep it, who receives it, and your choices and rights.

1. Introduction

Welcome to Nora & You. We offer gentle emotional support for women navigating challenging fertility journeys. Because the information you share can feel deeply personal, we want to be clear about what we collect, why we use it, and the choices available to you.

Navidani Ltd, trading as Nora & You, is the data controller for personal data processed through the Nora & You app, our websites, and related support, waitlist and privacy communications. You can contact us at privacy@noraandyou.com or at the registered office in section 12.

This policy explains how we process personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection laws.

2. Information We Collect

The Nora & You app

Account and sign-in information: your name, email address, account identifier, sign-in method, authentication records, and information provided by Apple or Google if you use those sign-in options.
Your journey: your selected fertility journey and associated consent record. Nora uses this information to tailor breathing support and organise your app experience.
Breathing activity: records of completed breathing sessions and the settings used.
Purchases: subscription, transaction and access information from Apple and our subscription provider. Nora does not receive your payment-card details.
How you found Nora: the predefined answer you choose and, if you select Other, any optional short answer you enter. Analytics receives only the predefined answer, not your free text.
App usage: information about how the app is used and performs, including interactions with the app, purchase activity, app and device characteristics, and approximate location based on your internet connection. Analytics associates this information with a randomly generated identifier, not your Nora account.
Diagnostics: crashes, performance information, errors and limited technical context. We do not deliberately attach your Nora account identifier or email address to diagnostic reports.

Your responses to in-app check-ins stay temporarily on your device. Nora does not receive, retain, analyse or share them.

The website, forms, waitlist and enquiries

Website visits: our hosting and security providers process ordinary request information such as your IP address, requested page, time, browser or device information, response details and possible security events.
Website analytics and cookie choices: our consent service remembers your cookie choices. In the UK and EU, website analytics begins only if you accept it. In other regions, it may begin automatically. Our analytics provider then receives information about website use, browser or device details, approximate location and an analytics identifier. Website analytics are separate from app analytics, and you can stop future measurement through Cookie settings.
Forms and emails: when you submit a form or email us, we receive the information you provide, your message and ordinary delivery details. Copies may be held in our website and email systems.
Waitlist: if you join the waitlist, we collect your email address so we can send the launch notice.
Authentication links: confirmation and recovery links may pass through our secure redirect website. Its hosting and security provider receives ordinary request and security information. The redirect page does not store the link and passes it to the app.

2A. Legal Basis for Processing

We rely on:

Contract to create and secure your account, provide Nora's defined service, including using your selected journey to tailor breathing support and organise your app experience, save completed breathing sessions, manage subscriptions and access, deliver authentication emails, and answer app-support requests.
Explicit consent, in addition to the contract basis, to use your fertility journey, which can reveal health information, for that tailoring and organisation.
Legitimate interests to keep Nora and our website secure and reliable, diagnose faults, answer enquiries, understand how people found Nora, produce aggregate service-use statistics, understand website use where an opt-in choice is not presented, and keep a minimal record needed to respect an opt-out. We apply the limits and choices described in this policy.
Consent for the waitlist and for website analytics where an opt-in choice is presented.
Legal obligation when we must keep information, respond to lawful requests or handle a data-protection complaint.

For email signup, you must provide a name, email address and password. For Apple or Google sign-in, the provider must supply the account and authentication information needed to sign you in. Without the information required for your chosen sign-in method, we cannot create or secure your Nora account.

You must also select a journey and grant journey consent to complete app setup. You can withdraw the consent later by deleting your Nora account because Nora cannot provide its defined service without using your selected journey. Withdrawal does not affect processing that was lawful beforehand.

3. How We Use Your Information

We use app information to:

Create and secure your account.
Tailor breathing support and organise the app around your selected fertility journey.
Save completed breathing sessions and maintain your session history and totals.
Manage subscriptions, purchases, restores and access.
Deliver account verification and recovery emails.
Understand how people find and use Nora.
Diagnose faults, protect Nora and meet legal or accounting obligations.

We use website and correspondence information to:

Deliver, protect and maintain the website.
Remember cookie choices and understand website use where permitted.
Receive and answer support requests and other enquiries.
Send the launch notice to people who join the waitlist.
Route app confirmation and recovery links.
Meet legal obligations and protect our rights and users' safety.

4. Data Security

We use encrypted connections, account-level controls, restricted administrative access, managed infrastructure and monitoring to protect your information. Sign-in providers handle credentials; Nora does not store readable passwords.

No system is completely secure. Keep your login details private and report concerns to privacy@noraandyou.com.

4A. International Data Transfers

Some service providers may process personal information outside the UK, including in the European Economic Area and the United States. Where required, we use a recognised adequacy decision, the UK Addendum to the EU Standard Contractual Clauses, the UK International Data Transfer Agreement, or another valid UK safeguard. We also complete the required data-protection assessment where applicable.

Contact privacy@noraandyou.com if you would like more information about a particular transfer or the safeguards that apply.

The categories of recipients with whom we share personal information are:

With providers that help us host and secure Nora, manage accounts and subscriptions, send service emails, measure usage, diagnose faults, operate our websites and waitlist, or answer enquiries.
With Apple or Google when you choose their sign-in services, and with Apple when you use its App Store or subscription services. They also use information under their own privacy terms.
With professional advisers where necessary and subject to confidentiality.
With courts, regulators, law enforcement or other authorities where the law requires or permits it.

Providers working for us process personal information on our behalf under appropriate data-protection terms. We do not share personal information with advertisers or data brokers.

6. Your Choices and Data Rights

In the app, you can update your profile and journey, control future app analytics using Share usage statistics, manage your Apple subscription separately, and permanently delete your Nora account.

Share usage statistics is on by default. Turning it off stops future analytics collection on that device and does not reduce app functionality. Because analytics does not receive your Nora account identifier, we generally cannot identify historical analytics events as yours for deletion.

Deleting your Nora account removes your active account, profile, journey, consent, How you found Nora and breathing-session records from our active systems. It also stops future app analytics on that device, resets the local analytics identifier, clears other local account state, logs out of our subscription provider and signs you out of Nora. It does not cancel an Apple subscription or automatically erase records that Apple, Google or our service providers may keep under their own operational, archival or legal policies.

On the website, you can reject or withdraw website analytics through Cookie settings. You can withdraw from the waitlist before launch by emailing privacy@noraandyou.com, use the unsubscribe link in any waitlist email, or contact us about a form submission, email or other right.

Your right to object: you can object at any time to processing based on our legitimate interests. Use Share usage statistics to stop future app analytics on your device, or email privacy@noraandyou.com about other processing.

Depending on the circumstances, you may ask us to:

Give you a copy of your personal information.
Correct inaccurate or incomplete information.
Erase information we no longer have a lawful reason to keep.
Restrict how we use your information.
Transfer information you provided in a structured, machine-readable format.
Stop processing based on our legitimate interests.
Honour your withdrawal of consent.

These rights are not absolute, but exercising them is normally free. We may need to verify your identity and normally respond within one month. Email privacy@noraandyou.com.

If you want to make a data-protection complaint directly to us, email privacy@noraandyou.com. We will acknowledge it within 30 days, investigate without undue delay, keep you informed and tell you the outcome. You also have the right to complain to the Information Commissioner's Office.

7. Retention of Information

We keep personal information only for as long as needed for the purposes described in this policy, including any security, accounting or legal requirements.

App information

Account, journey, consent, How you found Nora and breathing-session information is kept while your account is active and removed from our active systems when account deletion succeeds. Backup copies expire under our backup schedule.
Detailed app analytics are kept for two months, with the period not reset by new activity. Summary reports may remain for longer.
Authentication email and diagnostic records are kept under the active service settings and for as long as needed for delivery, reliability, security or legal purposes.
Subscription and transaction records are kept for operational, accounting and legal purposes. Deleting your Nora account does not remove records held independently by Apple or our subscription provider.
Responses to in-app check-ins are not retained by Navidani or its service providers.

Website, waitlist and enquiries

Raw website server logs are kept for up to four days, and access-log analytics for up to 30 days.
Website analytics events are kept for two months. User-level analytics are kept for 14 months, with new activity restarting that 14-month period. Consent cookies are kept for 365 days.
Form submissions and correspondence are kept while needed to answer, follow up or resolve the request, and for any necessary operational or legal records.
Waitlist email addresses are kept on the active waitlist until you withdraw or 90 days after the launch notice, whichever comes first, unless you separately agree to receive further emails. We may keep only a minimal record that you opted out for as long as needed to respect that choice.
The authentication redirect page stores nothing. Its hosting provider may keep request and security records for operational or legal purposes.

8. Children's Privacy

Nora & You is for adults aged 18 or over. We do not knowingly collect children's information.

9. Emotional Safety and Privacy

We know fertility journey information can feel deeply personal. Nora uses your selected journey only to tailor breathing support and organise your app experience. We do not send it to analytics, subscription or diagnostic services, show it to other users, publish it, or use it for advertising.

10. Service Providers

We use service providers for:

Cloud hosting, databases, authentication and service email.
App analytics and technical diagnostics.
Subscription management, purchase validation and app-store services.
Website hosting, security, forms, cookie choices and website analytics.
Email, support enquiries and the launch waitlist.

These providers receive only the information needed for their role. Contact privacy@noraandyou.com if you would like us to identify a current provider, explain its responsibilities or provide information about the safeguards that apply.

10A. Cookies and Analytics Technologies

The app stores sign-in information and preferences on your device so you can stay signed in and Nora can remember your choices. App analytics uses a randomly generated identifier for usage statistics. It is not used for advertising or cross-app tracking, and Nora does not use advertising identifiers. You can stop future collection using Share usage statistics.

On the website, analytics starts only after acceptance in the UK and EU. In other regions, it may start automatically. You can object and stop future website analytics through Cookie settings at any time. More detail is available in the UK Cookie Policy and EU Cookie Policy.

Social media links: Our website includes ordinary links to our Instagram and TikTok profiles. We do not embed posts, tracking pixels or other content from those platforms. Nora does not send information to those platforms merely because you view our website. If you follow a link, the platform may collect information such as your IP address, browser or device details, cookies and activity on its service under the Instagram Privacy Policy or TikTok Privacy Policy.

11. Changes to this Policy

We may update this policy as Nora, the website or the law changes. We will update the effective date, give appropriate notice of material changes, explain a new use of personal information before it starts, and ask for consent where required.

12. Contact Us

Navidani Ltd, trading as Nora & You
Email: privacy@noraandyou.com
Registered Office: 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF
Company Registration Number: 14263196