Privacy Policy

Privacy Policy

Last updated: 20 June 2026

1. Who we are

Nurtiva Care is a product of Nurtiva Health Technologies. We act as the data controller for personal data processed through the Nurtiva Care platform (the “Service”). You can reach us at privacy@nurtivahealthtechnologies.com.

2. What data we collect

  • Account data: name, email address, authentication identifiers.
  • Care data you enter: observations, night logs, quality-of-life entries, incidents, care notes and documents you upload.
  • Beta application data: caregiving situation, condition managed and your motivation for joining the program.
  • Technical data: IP address, browser type, session metadata and security event logs.
  • Consent records: a history of consents you grant or withdraw, including cookie preferences.

3. Why we process your data (legal bases)

  • To provide the Service — performance of a contract (Art. 6(1)(b) GDPR).
  • Health-related data — your explicit consent (Art. 9(2)(a) GDPR).
  • Security, abuse prevention and audit logs — legitimate interests (Art. 6(1)(f) GDPR).
  • Legal obligations — such as retention required by applicable law.

4. Sharing & processors

We do not sell your data. We share data only with vetted sub-processors strictly necessary to run the Service:

  • Hosting & database: Supabase (EU region).
  • Payments: Stripe.
  • Email delivery: Mailgun / Lovable Emails.

5. Security

Care data is scoped to each care profile and protected by row-level security. Data is encrypted in transit (TLS) and at rest. Sensitive admin actions are recorded in an append-only audit log. Documents are stored in a private bucket.

6. Retention

We keep care data while your account is active. Audit logs and consent records are retained for up to 7 years to meet healthcare-grade compliance. Account-deletion requests trigger a 30-day grace period after which all personal data is permanently erased.

7. Your rights (GDPR)

  • Access, rectification and portability of your data.
  • Erasure (“right to be forgotten”).
  • Restriction of processing and objection.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data-protection authority.

Use the in-app “Export my data” and “Delete my account” controls, or emailprivacy@nurtivahealthtechnologies.com.

8. Cookies

We use a small number of essential cookies required for authentication and session security. Analytics or marketing cookies are loaded only after you grant consent in the cookie banner. You can change your choice at any time from the footer.

9. Changes

We may update this policy. Material changes will be notified by email or in-app banner. Continued use of the Service constitutes acceptance.