Privacy Policy

1. What Information We Collect

1.1 Information you provide

• Name and email address, when you sign up for our free guide or create an account.
• Health and medical information — including symptom logs, medication schedules, sleep data, exercise records, and therapy tracking data (such as Dr Constantini B1 Therapy dosing) — that you share with the AI companion via WhatsApp.
• Payment information, processed securely by Stripe. We do not store your full card details.
• Communications you send to the AI companion via WhatsApp.
• Optional caregiver or family member contact details.

1.2 Information collected automatically

• Device type, operating system, and browser when you visit our website.
• Usage data including pages visited and time spent.
• IP address and approximate geographic location.

1.3 Information from third-party integrations

If you connect a wearable device or health app (Garmin, Apple Health, Oura, or similar), we receive health and activity data in accordance with the permissions you grant. We only access data you explicitly authorise.

2. How We Use Your Information

• To provide and improve the Neura.Day service, including personalised health insights, symptom trends, medication reminders, and research summaries.
• To deliver the AI companion experience via WhatsApp.
• To send the free guide and other requested content.
• To send service-related communications such as subscription confirmations.
• To process payments via Stripe.
• To analyse usage patterns and improve AI response quality.
• To comply with legal obligations.

We do not use your health data for advertising, profiling for third-party commercial purposes, or any purpose other than providing and improving the service.

3. Legal Basis for Processing (GDPR)

• Contract: processing your name, email, and payment information is necessary to provide the service.
• Legitimate interests: usage and analytics data to improve our service.
• Consent: health data is processed on the basis of your explicit consent, which you may withdraw at any time.
• Legal obligation: compliance with applicable laws.

4. Health Data — Special Category Data

Your health information is classified as special category data under the GDPR and is treated with the highest level of care. We apply end-to-end encryption in transit, encryption at rest, and strict access controls.

We never sell your health data. We never share it with advertisers, insurers, employers, or any third party for commercial purposes.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Service providers bound by confidentiality agreements: Stripe (payments), Brevo (email delivery), WhatsApp/Meta (message delivery), and cloud hosting providers.
• Wearable/device integrations: only as required to enable the integration you authorise.
• Legal requirements: if required by law or governmental authority.
• Business transfers: in the event of a merger or acquisition, with prior notice.
• With your explicit consent: named caregivers or medical professionals you have authorised within the service.

6. Data Retention

We retain your data as long as your account is active. On cancellation:

• Your account data is retained for 30 days, during which you may request a full export.
• After 30 days, personal data is permanently deleted unless legally required to retain.
• Anonymised aggregated data may be retained indefinitely for research and service improvement.

7. Data Security

We implement industry-standard security measures including end-to-end encryption in transit, encryption at rest, strict access controls, and regular security reviews. No method of transmission is 100% secure — we strive to use commercially acceptable means to protect your data.

8. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request that we limit processing of your data.
• Portability — request a machine-readable export of your data.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

To exercise these rights, contact us at privacy@neura.day. We will respond within 30 days. If you are in the EEA or UK, you may also lodge a complaint with your local data protection supervisory authority.

9. Cookies

Our website uses only essential cookies for basic functionality. We do not use advertising or tracking cookies. You can control cookies through your browser settings.

10. WhatsApp and Meta

Our AI companion operates via WhatsApp, owned by Meta Platforms, Inc. Messages sent via WhatsApp are subject to Meta's own privacy policy in addition to ours. We access only messages sent directly to the Neura.Day companion account and do not access your broader WhatsApp conversations or contact list.

11. Children's Privacy

Our service is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe we have inadvertently done so, please contact us immediately and we will delete it promptly.

12. International Data Transfers

Your data may be processed in countries outside your own. Where we transfer data internationally, we ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

13. Medical Disclaimer

Neura.Day is a wellness and information tool, not a medical device. The information provided by the AI companion is for informational purposes only and does not constitute medical advice, diagnosis, or treatment. Always consult a qualified healthcare professional before making health decisions.

14. Changes to This Policy

We may update this Privacy Policy at any time. We will notify you by email of significant changes and update the "Last updated" date. Continued use of the service constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@neura.day
• Website: neura.day