Privacy Policy

1. Introduction

NORA ("Navigating Obstetric Resources & Access") is an AI-powered maternal health companion designed to support individuals through pregnancy, postpartum, and family planning journeys. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using NORA, you agree to the practices described in this policy. If you do not agree, please discontinue use of the service.

2. Information We Collect

We collect only the information necessary to personalize your NORA experience:

• Journey information: Your current stage (trying to conceive, pregnant, postpartum), pregnancy week, due date, and last menstrual period (LMP).
• Location: ZIP code (used to surface relevant local resources).
• Contact information: Phone number and SMS consent status, if you opt in on your profile to receive one-time texts of NORA's responses.
• Conversation data: Messages you send to NORA to generate responses and improve the service.
• Anonymous identifier: A randomly generated ID stored in your browser to maintain session continuity without requiring account creation.

We do not collect your full name, date of birth, insurance information, or medical records unless you explicitly provide them in conversation.

3. How We Use Your Information

Your information is used solely to:

• Personalize NORA's responses to your current journey stage and pregnancy week.
• Surface relevant local health resources based on your ZIP code.
• Send a one-time SMS message containing NORA's response, if you have opted in on your profile and requested it.
• Improve the accuracy and quality of NORA's guidance.
• Maintain session continuity across visits.

4. Information We Do Not Share

We are committed to protecting your privacy. We will never:

• Sell your personal information to third parties.
• Share your data with advertisers or marketing companies.
• Use your information for purposes unrelated to your NORA experience.
• Disclose your health-related information to employers, insurers, or government entities except as required by law.

We may share data with trusted service providers (such as our hosting provider, Supabase) who process data strictly on our behalf and are bound by confidentiality obligations. These providers do not use your data for their own purposes.

5. SMS Communications

You opt in to NORA's SMS program once, as a standalone step, by entering your phone number and checking the SMS consent box on your NORA profile. This checkbox is unchecked by default, and opting in is entirely optional — it is never required to use NORA. Immediately after you opt in, you will receive a one-time confirmation text welcoming you to the program.

After that, each time you ask NORA a question and choose to have that specific response texted to you, we send a one-time message containing that response. Messages are not recurring or scheduled.

• Message and data rates may apply depending on your mobile carrier plan.
• One confirmation message is sent immediately when you opt in, and one additional message each time you request a response be texted to you. Message frequency varies based on your use of NORA — there is no other ongoing or scheduled messaging.
• Reply STOP at any time to unsubscribe from all SMS messages, or uncheck the SMS consent box on your profile.
• Reply HELP for assistance or contact us at the address below.
• Your phone number will never be shared with third parties for marketing purposes.

6. Data Storage & Security

Your data is stored securely using Supabase, a SOC 2 Type II compliant database platform. We implement industry-standard security practices including:

• Encrypted data transmission (TLS/HTTPS).
• Row-level security policies restricting access to your data.
• Access controls limiting which personnel can access user data.

While we take reasonable measures to protect your information, no system is completely secure. We encourage you not to share highly sensitive medical or financial information through the chat interface.

7. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you.
• Deletion: Request that your data be deleted from our systems.
• Correction: Request corrections to inaccurate information.
• Opt-out: Withdraw consent for SMS communications at any time by replying STOP or by unchecking the SMS consent box on your profile.

To exercise any of these rights, contact us using the information in Section 10.

8. Minors

NORA is intended for individuals 18 years of age and older. We do not knowingly collect personal information from minors. If you believe a minor has provided information to NORA, please contact us immediately and we will delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Continued use of NORA after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please reach out: