Last updated: June 19, 2026
Nourata (“we,” “us,” or “our”) operates the Nourata platform at nourata.com. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service. By using Nourata, you agree to the practices described here.
Nourata is a B2B platform for qualified nutrition and health professionals (“Clinicians”). This policy covers the personal information of Clinicians who create accounts and use the Service. It also explains how we handle patient data that Clinicians input into the platform.
Name, email address, and password when you register.
Payment is processed by Stripe. We store only your Stripe customer ID; we never see or store your full card number.
As a Clinician you may enter patient names, health history, laboratory results, supplement plans, and appointment records. You are the data controller for this information under applicable privacy law; we process it only on your instructions to provide the Service.
Log data including IP address, browser type, pages visited, and actions taken, used for security and product improvement.
Session cookies for authentication and preference cookies. See our Cookie Policy.
We do not sell your personal information or your patients' data to third parties. We do not use patient data to train AI models.
The Kano analysis engine may send de-identified or pseudonymized lab data to third-party AI providers (Groq, Anthropic) solely to generate supplement recommendations on your behalf. These providers process data under their own data-processing agreements and are not permitted to use it for model training. Outputs are informational aids only — see our Terms of Service.
We share information only as follows:
Depending on your jurisdiction (Canada — PIPEDA; EU/UK — GDPR), you may have the right to access, correct, export, or delete your personal information. Clinicians can exercise these rights from Settings → Privacy (when logged in) or by emailing privacy@nourata.com.
You are responsible for handling any rights requests made by your patients regarding data you have entered into the platform.
We use encryption in transit (TLS) and at rest, row-level security on all patient data, audit logging of sensitive operations, and access controls to protect your information. No system is perfectly secure — please use a strong, unique password and notify us immediately of any suspected unauthorized access.
Our infrastructure is primarily US-based. If you are located in Canada or the EU, your data may be transferred to and processed in the United States. We take steps to ensure adequate protections are in place for such transfers.
We may update this policy from time to time. We will notify you of material changes by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.
Privacy questions or requests: privacy@nourata.com