Privacy Policy for Nessa: Wellness AI
Last Updated: March 31, 2026
Nessa (“we,” “our,” or “the App”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose information when you use our mobile application.
1. HealthKit Data (Apple Health App)
Nessa allows you to sync your health data using the Apple HealthKit framework.
- Data Collection: With your explicit permission, we read data such as heart rate, heart rate variability (HRV), sleep duration, steps, active energy, and other vitals.
- Purpose: This data is used exclusively to provide personalized wellness insights, sleep readiness scores, and AI-driven health recommendations.
- Strict Protection: We do not use HealthKit data for marketing or advertising purposes. We do not sell HealthKit data to any third parties. Your health data remains on your device and is only transmitted to our analysis providers (see Section 3) via secure, encrypted channels.
To provide its core features, Nessa collects:
- Meal and Drink Photos: When you use the “Log Meal” feature, photos are processed to estimate nutritional content.
- Wellness Goals: Information about your fitness and health targets (e.g., weight loss, muscle gain).
- Manual Logs: Any data you manually enter, such as weight, height, or hydration.
3. AI Data Processing (OpenAI)
Nessa uses the OpenAI API to analyze your wellness data and provide recommendations.
- Data Shared: When requesting an analysis, specific health metrics (e.g., steps, heart rate trends, sleep duration) and user-provided medical conditions/allergies are sent to OpenAI.
- No Training: We use the OpenAI API (Enterprise/API tier). According to OpenAI’s policies, data sent via their API is not used to train their AI models.
- Equal Protection: We ensure that OpenAI provides the same or equal protection of your personal data as outlined in this Privacy Policy.
- Anonymization: We do not send your name, email, or any personally identifiable information (PII) to OpenAI.
- Explicit Consent: No data is shared with OpenAI without your explicit, opt-in consent provided within the App.
4. Data Storage and Security
- Local Storage: Most of your health data history is stored locally on your device using industry-standard encryption.
- Transmission: All data sent to our servers or third-party APIs is transmitted using Secure Sockets Layer (SSL/TLS) encryption.
5. Data Sharing and Third Parties
- Service Providers: We only share data with service providers (like OpenAI) necessary to perform the App’s functions.
- No Sale of Data: We never sell your personal or health data to brokers, insurance companies, or advertisers.
- Legal Requirements: We may disclose information if required by law or to protect the safety of our users.
6. Subscriptions and Payments
All financial transactions are handled securely by Apple through the App Store (StoreKit). Nessa does not store or have access to your credit card or bank account information.
7. User Control and Deletion
- HealthKit Permissions: You can revoke Nessa’s access to your Health data at any time via the iOS Settings app (Privacy > Health > Nessa).
- Data Deletion: You may delete your data within the App’s settings or by uninstalling the App.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy within the App.
If you have any questions about this Privacy Policy, please contact us at:
support@example.com