Consumer Health Data Privacy Policy

Last Updated: August 19, 2026

NITROVENTUS - Unipessoal Lda provides Nooko. This policy describes the consumer health data Nooko collects, how it is used and disclosed, and how to exercise consumer health data rights.

Categories Collected and Purposes

• Pregnancy and reproductive information: Last menstrual period or dating-scan due date, derived pregnancy week and countdown, scheduled delivery or birth date, and optional baby details. Nooko uses this information to provide the pregnancy timeline, week-specific information, reminders, widgets, and related features you request.
• Journal, planning, and tracker content: Journal notes, moods, selected symptoms, attachments, checklists, reminders, prenatal appointments, bump photos, weight entries, kick-counting sessions, and contraction timing. Nooko uses this information to provide the recording, organization, private sync, export, and approved family-sharing features you choose.
• Account, family, purchase, and notification information linked to pregnancy-app use: Anonymous account identifier, family membership, role, permissions, invite status, subscription entitlement, push token, and generic notification-routing information. Nooko uses this information for authentication, private sync, partner access, purchases, restoration, and notifications you enable.
• Support and feedback content: Pregnancy or health information you choose to include in a support email or in-app feedback. Nooko uses it to answer your request and diagnose the issue you report.
• Diagnostic replay information: Earlier Nooko 1.1 builds configured Sentry Session Replay for 10% of sessions and sessions with errors. A replay could include on-screen pregnancy, tracker, journal, photo, or other app content. The August 12, 2026 production update disabled replay, console diagnostic logs, screenshots and view hierarchy, and reduced trace sampling to 10%. It applies when Nooko launches or reloads, so an older installed or not-yet-updated app process may retain the earlier configuration until the update takes effect.
• Website and newsletter health-interest information: Visits to pregnancy-related pages and a subscription to pregnancy tips or Nooko Updates, together with the limited website and sign-up metadata described below. Nooko uses it to operate and measure the website and deliver a newsletter you request.
• Product analytics: In analytics-configured production builds, Nooko counts fixed, coarse feature, screen, action, placement, result, app-variant, release, and build events to understand whether important product flows work. It is on by default after Nooko checks local Settings records so an existing opt-out cannot be bypassed. The app does not read an App Store storefront, locale country, IP address, account data, or a country code to decide whether analytics is enabled. Events exclude pregnancy dates or weeks, symptoms, journal text, photos, measurements, appointment details, notification times, invite codes, names, email addresses, account or family identifiers, advertising identifiers, and persistent device or session identifiers. They use one shared non-user identifier, one event per request, memory-only storage, EU hosting, disabled GeoIP enrichment, and no replay or autocapture. Settings → Your Data → Product analytics stops future collection.

Sources

• You, when you enter information, choose settings, subscribe, contact support, or use an app or website feature.
• An approved family member, when they add or change content permitted by the family role and permissions you configured.
• Nooko's app and website, when they derive a pregnancy week or countdown from the date source you selected, record feature activity needed to perform your request, or create a permitted coarse product event when Product analytics is enabled.
• Apple, RevenueCat, Expo, Sentry, Vercel, and Buttondown, when they return limited operational information needed for purchases, notifications, diagnostics, website operation, or newsletter delivery.

Categories Disclosed and Recipients

• Approved family members: Pregnancy content and capabilities allowed by the role and permissions configured in Nooko.
• Supabase: Anonymous authentication, pregnancy and tracker content, family permissions, private database sync, private file storage, and server-side app operations.
• Sentry: Technical errors, release and device/runtime context, limited performance traces, and feedback you deliberately submit. Earlier Nooko 1.1 builds configured sampled and error-session replay. The August 12, 2026 production update disabled replay, console diagnostic logs, screenshots and view hierarchy, and reduced trace sampling to 10%; an older app process may retain its earlier configuration until the update applies on launch or reload.
• Apple and RevenueCat: App distribution, product and purchase information, subscription status, entitlement delivery and restoration, and the anonymous Nooko account identifier used for Nooko+ access.
• Expo and Apple Push Notification service: A push token and generic title, body, and routing information needed for notifications you enable.
• PostHog EU: The excluded-and-minimized coarse product events described above when Product analytics is enabled; it is on by default in analytics-configured production builds unless you turn it off in Settings.
• Vercel: Pregnancy-page paths, referrer, coarse region, browser, operating system, device type, and web-performance measurements for website hosting, aggregate Web Analytics, and Speed Insights.
• Buttondown: Newsletter email address, subscription status, and sign-up metadata such as IP address and referrer for a pregnancy newsletter you request.
• Authorities or transaction participants: Consumer health data only when required by law or as part of a legally permitted corporate transaction subject to applicable consumer health data obligations.

We do not sell consumer health data. We have no specific affiliate with whom we share consumer health data.

Your Consumer Health Data Rights

Depending on applicable law, you may ask whether we collect, share, or sell consumer health data concerning you; access that data and the applicable recipient list; withdraw consent from future collection or sharing; request deletion; and appeal a refusal to act on a request.

• In-app export: Settings → Export my data creates a JSON snapshot of the structured records you are currently authorized to read, including authorized photo and attachment metadata. It does not embed binary photo or attachment files. For a broader access request, email contact@nookoapp.com.
• In-app controls: Settings → Delete Account & Data first warns that deleting Nooko data does not cancel an Apple subscription or stop Apple billing and links to Apple Subscriptions. If you own the family, deletion includes the shared family space and its consumer health content, including contributions from approved members. The server removes applicable Storage objects, then uploader-prefixed attachment metadata, before deleting the account. Because this sequence is not atomic, a retryable failure may leave some online media already removed; Nooko keeps local state and the session until the server confirms deletion. Product analytics is on by default in analytics-configured production builds after Nooko checks local Settings records. Settings → Your Data → Product analytics changes the choice anytime; an explicit opt-out is stored locally.
• Email request: Send an access, recipient-list, withdrawal, or deletion request to contact@nookoapp.com with the subject “Consumer Health Privacy Request.” You do not need to create a new account. We may request information reasonably necessary to authenticate the request.
• Appeal: If we refuse to act, email contact@nookoapp.com with the subject “Consumer Health Privacy Appeal.” If an appeal is denied, our written response will explain why and provide a way to contact the applicable attorney general or regulator.

We will process authenticated requests and appeals within the time required by applicable law and will not unlawfully discriminate against you for exercising a consumer health data right.

Contact

Email: contact@nookoapp.com
Controller: NITROVENTUS - Unipessoal Lda
App: Nooko (co.alexiron.nooko)