Noverra Privacy Policy

Effective date: 8 July 2026
Last updated: 15 September 2026

Noverra is a strength training and nutrition app for women in midlife. This includes women in perimenopause or menopause and those taking GLP-1 medication. In this policy, "we", "us" and "our" mean Noverra, and "the App" means the Noverra app.

This policy explains what personal data we collect, how we use it, who receives it and your rights.

The App collects health information. UK and EU data protection law calls this "special category data". We need your explicit consent, which means your clear permission, to use it. We ask for this during setup. You can withdraw your consent at any time.

This policy explains our data practices. It does not form part of your contract with us. It covers the UK GDPR, the EU GDPR where it applies, and the UK Data Protection Act 2018.

1. Who we are

Noverra is provided by Bruno Dalledone - The Health Coach, trading as Noverra, at 20 Little Britain, PureGym, City of London, EC1A 7DH, United Kingdom.

We are the "data controller". This means we are responsible for deciding how and why your personal data is used.

For questions about your data or to use your data rights, email noverra-privacy@brunodalledone.co.uk.

2. Data we collect

We collect the types of data listed below. We treat health information as special category data.

2.1 Account details

• Your name and email address.
• A protected version of your password, called a salted hash, stored by our sign-in provider. We never see or store your original password.
• If you use Sign in with Apple, the account identifier, name and email address Apple shares with us. This may be a private relay address if you hide your email.

2.2 Health and fitness profile

During setup, we collect the following information. You can update it in Profile.

• Your weight and height.
• Your menopause or perimenopause status.
• Whether you take GLP-1 medication, its name and your injection day. We do not ask for or store your dose.
• Your fitness level, equipment, gym access, preferred session length and training goals.
• The date and time you gave consent to use your health data.

2.3 Daily check-ins

When you complete a check-in, we store:

• Your energy level.
• Symptoms you report, such as nausea, joint pain or poor sleep.
• Whether it is an injection day and how severe any reported side effects are.
• The recommended session type and the explanation and tip shown to you, including any text written by AI.

2.4 Body measurements

You can choose to record your weight, upper-arm and mid-thigh measurements, and the number of push-ups or squats in a test. All these measurements are optional.

2.5 Training and nutrition activity

• Completed workouts, sets, repetitions, weights, effort ratings and mood after training.
• Protein intake and any food names you enter.
• Articles you read in the Learn tab.

2.6 Apple Health data

With your permission, the App reads sleep data from Apple Health for your daily check-in. It also writes completed workouts to Apple Health so they appear with your other activity.

• We request only the HealthKit data types described here.
• We never sell HealthKit data or use it for advertising or marketing.
• We use it only to provide the App's main features.
• You can withdraw permission in iOS Settings. Open Privacy & Security, Health, then Noverra. We then stop reading new data. Previously imported data is removed when you delete your account, as explained in section 8.

2.7 Subscriptions and payments

Apple processes purchases through the App Store. We do not receive or store your card details.

RevenueCat manages subscription access. It receives your Noverra account identifier and access status, such as an active subscription or free trial. This allows the App to unlock Pro features.

RevenueCat tells our servers when a subscription starts, renews or ends. We store your Free or Pro status, access end date and founding-member status with your account. This lets us check access without contacting RevenueCat for every request. We do not store payment details.

2.8 Optional usage analytics

Usage analytics helps us understand which features people use. It is off until you choose to turn it on. You can make this choice on the first setup screen or in Profile, under Your data. You can turn it off there at any time. You can use Noverra without analytics.

If you agree, PostHog, hosted in the EU, receives events such as:

• Setup steps and app opens.
• Check-ins and the start, completion or early end of a workout.
• Programme completion and views of the subscription screen.
• Subscription trials and cancellations.

We do not collect events before you agree or add them later.

These records use an identifier linked to your account. They are "pseudonymous", rather than fully anonymous. When you sign up, we link your temporary identifier to your Noverra account identifier.

The account details sent with analytics are limited to your signup week, device platform, app version and Free or Pro plan. Automatic screen capture, session recording and location lookup are off. Reports about session matching show only broad results: a match, an adjusted match, no available match or a rest day.

We never send health data to PostHog. This includes symptoms, medication status, weight, protein amounts and body measurements.

2.9 Crash and error reports

Sentry receives technical information when the App crashes or has an error. We use it to find and fix faults. We set it to exclude personal information by default. Crash reporting is off in development builds.

2.10 Food barcode scanning

If you choose Scan a food barcode, Noverra asks for camera access. Your phone reads the barcode. This feature does not save or upload camera images, video or audio.

We send only the barcode digits to Open Food Facts to find the product name and protein per 100g. The service also receives connection details, such as your IP address, needed to return the result. We do not send your account identifier, health answers, food diary or grams consumed.

Open Food Facts is an independent public product database. Read its privacy policy.

You confirm the grams consumed before saving. Noverra stores the food name, quantity and calculated protein in your nutrition log. It does not store the barcode in that log or send it to analytics.

Product details may be incomplete or out of date. Check them against the packet. You can add food manually without camera access.

2.11 Notifications

If you turn on notifications, we use a device push token to send reminders. This token is an identifier used to reach your device. Reminders may include a protein reminder on a low-appetite day. We do not send marketing notifications without separate consent.

3. Why we use your data

Data protection law requires a legal basis for each use of personal data.

You can withdraw consent to health-data processing at any time. We will then be unable to provide personalised recommendations. You can also delete your account, as explained in section 8.

4. How we use AI

Our own rules choose the session type: a full workout, short workout, recovery session or rest. AI writes the explanation and tip.

To write this text, we send limited data to Anthropic, which provides the Claude AI models we use. The request goes through our secure server. It includes the day's check-in answers and a few profile details, such as GLP-1 medication status and fitness level. It does not include your name, email address or details that directly identify you.

• Neither the App nor our AI provider makes medical decisions, diagnoses or decisions about medication doses.
• Each user has a daily limit on AI requests.
• Anthropic processes these requests on our behalf. Its contract limits use of the data to providing the service to us. Its privacy and data-use terms explain how it handles requests.

5. Who receives your data

We use the providers below to run the App. They must follow the data protection duties in their contracts with us.

We do not sell personal data. We never share health data with advertisers or data brokers, or for marketing.

We may also share data when the law requires it or to protect our legal rights. If the business merges with another business or sells its assets, data may be transferred. We will notify you, and this policy will apply until it is updated.

6. Data sent outside the UK or EEA

Some providers are outside the UK or European Economic Area, including in the United States. We use safeguards recognised by UK and EU data protection law for these transfers. These may include Standard Contractual Clauses, which set duties to protect transferred data to an equivalent standard.

Our database is hosted in Ireland. Your account and health data are stored there.

7. How long we keep data

We keep your account and health data while your account is active so we can provide and improve your personalised recommendations.

When you delete your account, we remove personal data, including health data imported from Apple Health, promptly and within 30 days. We may keep limited records for longer when the law requires it, such as transaction records needed for tax.

Your data rights also cover analytics linked to your account. Turning analytics off stops future collection. Contact us to request deletion of earlier records. We may keep combined statistics that cannot reasonably be linked to you.

8. Your rights and account deletion

Under the UK/EU GDPR, you have rights to:

• Access: request the personal data we hold about you.
• Correction: ask us to correct errors. You can edit most details in Profile.
• Deletion: ask us to erase your data, also called the right to be forgotten.
• Restriction or objection: ask us to limit how we use your data or object to its use.
• Data portability: receive your data in a format you can move to another service.
• Withdraw consent: remove your permission at any time. This does not affect data use that was lawful before you withdrew it.
• Complain: contact your local data protection authority. In the UK, this is the Information Commissioner's Office.

To delete your account, open Profile and select Delete Account. Type "DELETE" to confirm. This immediately and permanently removes your account and personal data from our systems. See section 7 for retention periods and legal exceptions.

To use another data right, email noverra-privacy@brunodalledone.co.uk.

9. Children

The App is for adults aged 18 and over. We do not knowingly collect children's data. If you believe a child has given us personal data, contact us so we can delete it.

10. Security

We encrypt data while it travels between systems. Database rules limit users to their own data, and access controls protect our servers. We also use technical and organisational measures suited to the sensitivity of the data. No method of sending or storing data is completely secure.

11. Policy changes

We may update this policy. We will tell you in the App or by email before important changes take effect. The date at the top shows the latest update.

12. Contact

Bruno Dalledone - The Health Coach
20 Little Britain, PureGym, City of London, EC1A 7DH, United Kingdom
noverra-privacy@brunodalledone.co.uk

---