Effective Date: 9 July 2026
Last Updated: 9 July 2026
Introduction
Nevora is a holistic nutrition and wellness application designed for users aged 18 years and older. This Privacy Policy explains how Nevora collects, processes, stores, uses, shares, retains, and protects information associated with the use of the Nevora mobile application, subscription services, AI-powered nutrition features, Apple Health integrations, food logging systems, and related services. By using Nevora, creating an account, connecting Apple Health, uploading food images, using AI-assisted nutrition features, or subscribing to premium services, users acknowledge the practices described in this Privacy Policy.
Lawful Basis for Processing
Where applicable under the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and other applicable privacy laws, Nevora processes personal information on one or more of the following legal bases:
- your consent;
- performance of a contract between you and Nevora;
- compliance with legal obligations; and
- Nevora's legitimate interests in operating, securing, maintaining, and improving the service, provided those interests are not overridden by your rights and freedoms.
Contact Information
- Operator Name: Nevora
- Support & Privacy Enquiries: nevoralabs@outlook.com
Eligibility
Nevora is intended exclusively for users aged 18 years or older. Nevora does not knowingly permit minors to create accounts or use the platform. If Nevora becomes aware that a minor has submitted information, Nevora may suspend or terminate the associated account and remove associated information where reasonably practicable.
Information Collected
Nevora may process account identifiers, email addresses, food logs, nutrition data, meal photographs, barcode scan information, subscription information, device information, diagnostics, crash information, technical logs, AI-generated reports, Apple Health-derived metrics, and user wellness preferences necessary to operate the service. Nevora does not use precise GPS location services and does not operate behavioural advertising systems or advertising identifiers.
Apple Health Data
Nevora may access Apple Health information only after explicit user permission. Apple Health information may include step count, active energy, basal energy, weight, height, sleep analysis, hydration information, dietary energy information, stand metrics, exercise metrics, and heart rate data depending on permissions granted by the user. Apple Health information is used solely to provide user-facing wellness functionality and is not sold, brokered, or used for cross-context behavioural advertising.
AI Processing
Nevora uses AI systems to generate wellness summaries, nutrition interpretations, meal recognition outputs, and daily or weekly insights. AI-generated outputs are generated automatically and may be incomplete, inaccurate, or unsuitable for your individual circumstances. Users should independently verify important information and should not rely solely on AI-generated content when making health-related decisions. Certain AI inputs, outputs, cached responses, diagnostics, and derived analytics may be temporarily retained for operational continuity, abuse prevention, debugging, service reliability, performance optimisation, infrastructure management, and user-facing historical functionality. Nevora aims to minimise retention of AI-related processing data and does not engage in population-level behavioural advertising using health-related user information.
AI requests are securely transmitted through Nevora's backend infrastructure before being processed by approved AI service providers. Nevora does not permit AI providers to use your information for behavioural advertising or to create advertising profiles about you.
Meal Images
Meal images uploaded or captured through the app may be temporarily processed, transmitted, cached, or retained as necessary to provide image recognition functionality, maintain service reliability, improve processing performance, troubleshoot issues, maintain continuity of user-facing features, and comply with legal obligations. Nevora does not operate a public meal-photo social feed or public image-sharing system inside the application.
Third-Party Processors
Nevora uses the following third-party services to operate the app. Each provider receives only the data needed for its function:
- Supabase — cloud database, authentication, and secure backend functions. Stores account profiles, food diary entries, and subscription referral records.
- OpenAI — AI meal recognition, nutrition estimates, daily and weekly insights, and suggestion features. Receives meal photos, food names, aggregated nutrition context, and user correction text when those features are used.
- RevenueCat — subscription and entitlement management. Receives your Nevora user identifier and purchase status from Apple.
- PostHog (EU) — privacy-first product analytics. Receives your Nevora user identifier and allowlisted app events such as onboarding, purchases, and feature usage. Session replay and behavioural advertising are disabled.
- Sentry (EU) — crash and error reporting. Receives your Nevora user identifier and technical error metadata. Food names, health values, and photos are excluded.
- Apple Sign In — authentication. Apple may share your name and email on first sign-in.
- Google Sign-In — authentication through Supabase OAuth. Google and Supabase handle sign-in tokens; profile details may be stored in your Nevora account.
- Apple HealthKit — on-device health data access only with your permission. Health data is used for in-app wellness features and is not sold.
- Apple StoreKit — in-app purchases and subscription billing through your Apple ID.
- Open Food Facts — barcode product lookup. Receives only the barcode scanned, not your user identity.
Subscriptions
Nevora offers recurring subscription services. Current pricing is displayed in the App Store prior to purchase and may vary by region and currency. Subscriptions renew automatically unless cancelled through Apple subscription management systems. Billing disputes, payment methods, cancellations, refunds, and subscription administration for Apple in-app purchases are handled by Apple. Deleting the application does not automatically cancel an active subscription.
Security
Nevora uses commercially reasonable technical, organisational, and administrative safeguards intended to help protect information associated with the service. These measures may include authentication systems, API proxying, access controls, infrastructure monitoring, encrypted communications, rate limiting, and operational security protections. No method of electronic storage, transmission, or processing can be guaranteed to be completely secure.
Data Retention
Retention periods may vary depending on feature functionality, operational requirements, backup cycles, cached infrastructure, debugging systems, local device storage, legal obligations, fraud prevention requirements, or continuity of user-facing historical analytics. Certain analytics, cached reports, historical metrics, and derived wellness summaries may persist for varying periods depending on the associated feature. When you delete your account, Nevora removes your profile, food diary, AI usage records, and referral data from Nevora systems. Voluntary diagnostic reports linked to your account are deleted using a hashed identifier. Server-side AI response caches are keyed by request content rather than user identity and expire automatically after a short retention period. Security audit logs may retain anonymised event records without your user identifier. Deleting your account does not cancel an active Apple subscription. Certain information may continue to be retained where required to comply with legal obligations, resolve disputes, prevent fraud, protect the security of the service, or establish, exercise, or defend legal claims.
User Rights
Depending on jurisdiction, users may have rights relating to access, deletion, correction, restriction, portability, or objection to certain processing activities. Nevora provides mechanisms for account deletion requests and privacy-related requests subject to technical limitations, backup retention cycles, security systems, fraud prevention requirements, and applicable law. Users may submit privacy-related enquiries using the contact details provided in this Privacy Policy. Nevora will respond within the timeframes required by applicable law where such rights apply.
International Users
Nevora may be accessible to users in the United Kingdom, European Union, United States, and other jurisdictions. Information may be processed through infrastructure providers operating in multiple regions. By using the service, users acknowledge that information may be processed in jurisdictions outside their country of residence.
No Marketing Emails
Nevora does not currently operate marketing email campaigns. Users may still receive essential transactional communications, account notices, security alerts, subscription notices, support communications, and operational service announcements.
Cookies and Website
If you visit the Nevora website, essential cookies or similar technologies may be used to provide website functionality, maintain security, improve performance, and analyse website usage. Where required by applicable law, consent will be obtained before non-essential cookies are used.
Changes to this Privacy Policy
Nevora may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, security practices, or the functionality of the service. The latest version will always display the Effective Date and Last Updated date at the beginning of this Privacy Policy. Continued use of Nevora after an updated Privacy Policy becomes effective constitutes acknowledgement of the revised policy.
Complaints
If you have questions or concerns regarding this Privacy Policy or Nevora's handling of your personal information, please contact Nevora using the contact details provided above. If you are located in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO). If you are located in another jurisdiction, you may have the right to contact your local data protection authority.
Medical Disclaimer
Nevora provides nutrition, wellness, and lifestyle information for educational and informational purposes only. The information, reports, recommendations, and AI-generated insights provided by Nevora are not intended to constitute medical advice, diagnosis, or treatment and should not be relied upon as a substitute for professional healthcare advice. Users should consult an appropriately qualified healthcare professional regarding any medical concerns or before making significant changes to their diet, exercise, or health management.