Your data is yours alone
We say exactly where it is stored, who can see it and how to delete it. Point by point, no small print.
-
Where we store it
In the Amazon Web Services cloud, the Frankfurt region, Germany.
- Encryption Files and traffic are encrypted.
- File scanning They open only after a virus check.
- No public links There are no open or permanent links to the files.
- A copy on the phone Closed off from other apps.
-
Who has access
Only you. The team has no standing access to your files.
- Technical access Limited and written to a log.
- Owner check Every request verifies that the data is yours.
- Security log Records actions without medical data.
- Technical logs They contain no personal data.
What Nomi receives
Nomi works only with your consent to the assistant. Without it nothing is sent, and the rest of the app works as usual.
| What | Sent |
|---|---|
| The text you write to Nomi: telling it about yourself, a doctor's prescription, questions about test results | Yes, with your consent |
| Test results and prescriptions that you upload | Yes, recognised automatically after uploading. With your consent |
| All other documents | Only when you tap “Recognise”. With your consent |
| Data for advertising or for sale to third parties | Never |
Nomi keeps a conversation no longer than the session, and requests are sent to the model provider with an instruction not to store them.
What we keep, for how long and how we delete it
The periods for every kind of data, in one table.
| Data | Why | Retention period | How it is deleted |
|---|---|---|---|
| Documents and recognised data | Your archive, search and recognition | Until you delete the document or the account | Together with the document or the account, for good |
| Health profile and treatment | Courses, schedule and reminders | As long as the account exists | After a request to delete the account – 30 days to restore it, then for good |
| Email and account details | Sign-in and service emails | As long as the account exists | The same as the profile: 30 days after the deletion request |
| Files after consent to storage is withdrawn | Time to save the files or change your mind | 30 days | Automatically when the period ends, or straight away with the “Delete now” button |
| Export archive | Downloading all your data | No longer than 24 hours | The link stops working and the archive is erased |
| Consent and security logs | Proving that consent was given and protecting access | 3 years | Anonymised after the account is deleted, removed when the period ends |
| Waiting list data from the site | Inviting you to the beta | Until the app launches and for 6 months after, but no longer than 24 months | Deleted when the period ends |
-
Your consents and how to withdraw them
Every consent is separate and nothing is ticked in advance.
- Terms, Policy and health data Required; withdrawn by deleting the account.
- File storage Withdrawn in the settings; the files stay available for 30 days.
- The Nomi assistant Withdrawn at any moment; what you confirmed stays.
-
Export and deletion
Both actions are in the app settings.
- Export All data and files as one archive, by link.
- Account deletion With confirmation and a password; access closes at once.
- Restoring You have 30 days to change your mind, then everything is erased.
Still have questions about data?
Short answers are in the common questions. Sign up for the beta to try it among the first.
Free in beta No card Unsubscribe at any moment
Requests about personal data
-
In the app
Correct data, download an archive or delete the account yourself.
-
What you can request
A copy of the data, a correction, deletion, withdrawal of consent.
-
Response time
We answer a request within 30 days, as the GDPR requires.
Details are in the documents
-
-
-
Cookie policy
Which cookies we set and how to change your choice.