Privacy Policy

Last updated: 15 June 2026

Nerida is built so that your health data stays private and yours. This policy explains what we collect, why, and the control you have. It is a starting template — have it reviewed by a qualified professional before relying on it commercially.

1. Who we are

Nerida ("we", "us") provides a perimenopause symptom-tracking application. For questions about your data, contact us at the email address listed in the app.

2. What we collect

We only collect what we need to run the service:

Account data: your email address (for sign-in).
Profile data: year of birth, menstruation status, goal, reminder time, and the symptoms you choose to focus on.
Health log data: the daily symptoms, cycle, measurements, notes and interventions you enter.
Quiz leads: if you take the public quiz, the email you submit and your score.
Usage analytics: privacy-friendly, cookieless aggregate metrics (e.g. page views, key events) that do not identify you.

3. Special category (health) data

Your symptom logs are health data — a special category under the GDPR. We process it only to provide the service to you, on the basis of your explicit consent, which you give by creating an account and logging data. You can withdraw consent at any time by deleting your data or your account.

4. Why we process it

To run the tracker, generate your trends and your doctor-ready report.
To send the sign-in code and (if enabled) your daily reminder.
To understand, in aggregate, which features are useful — never to sell your data.

5. Where your data lives

Data is stored with our infrastructure provider (Supabase) in the European Union (Frankfurt). It is protected by row-level security, meaning each account can only access its own data, and is encrypted in transit and at rest.

6. Sharing

We do not sell your personal data. We share data only with the processors needed to run the service (hosting, database, email delivery, cookieless analytics), under appropriate agreements. Your doctor-ready report is exported by you, to whom you choose.

7. Your rights

Under the GDPR you have the right to access, correct, export and erase your data, and to withdraw consent. You can export everything as JSON and delete your tracking data directly in the app under "Your data". For account deletion or other requests, contact us.

8. Retention

We keep your data while your account is active. When you delete your data or account, it is removed from our live systems.

9. Cookies

We use only essential cookies required to keep you signed in. Our analytics is cookieless and does not track you across sites. See the cookie note shown on your first visit.

10. Changes

We may update this policy; we will revise the date above when we do.