Nora

Privacy Policy

Last updated: September 11, 2026

Nora is a private space. What you share here matters to us, and we take its protection seriously. This policy explains what we collect, how we use it, and what control you have over it.

Nora is a reflective AI companion, not a licensed therapist or medical provider. She does not diagnose or treat any medical or mental health condition, and using Nora is not a substitute for professional care. If you're in crisis, please contact the 988 Suicide & Crisis Lifeline or text HOME to 741741.

What we collect

We collect the following information when you use Nora:

Account information — your email address and display name, provided when you sign up
Conversation content — the messages you send to Nora and Nora's responses
Notebook entries — anything you write in the Me tab notebook
Onboarding answers — your responses to the initial setup questions
Usage data — which features you use, when sessions occur, and how the app is performing. No third-party analytics or tracking SDK is used to monitor your behavior; we do use Sentry for crash and error monitoring only (see Third-party services below)
Push notification subscription — if you opt in, your browser's push endpoint is stored to deliver notifications

How we use it

Your data is used to:

Provide and improve Nora's responses to you
Build Nora's memory of you over time, so responses become more specific and relevant
Send you push notifications if you have opted in
Monitor service performance and fix issues

We do not sell your data. We do not use your data to train AI models. We do not share your data with advertisers.

Third-party services

Nora relies on the following third-party infrastructure:

Supabase — your data is stored in a Supabase-hosted PostgreSQL database. Supabase is SOC 2 Type II certified. Supabase Privacy Policy
Anthropic — your messages are sent to Anthropic's API to generate Nora's responses. Anthropic does not use API inputs to train its models by default. Anthropic Privacy Policy
Vercel — the app is hosted on Vercel. Request logs may be retained by Vercel per their standard practices. Vercel Privacy Policy
Resend — used to send transactional emails (account confirmation, welcome). Resend Privacy Policy
Sentry — used for crash and error monitoring only, so we can find and fix problems. We do not use Sentry's session replay, analytics, or user feedback features. Sentry Privacy Policy

Push notifications

If you grant notification permission, your browser's push subscription endpoint is stored in our database and used only to deliver Nora's reminders. You can revoke this permission at any time in your browser or device settings. We will never send notifications for marketing purposes unrelated to your use of Nora.

Data retention

Your data is retained for as long as your account exists. If you delete your account, your conversations, notebook entries, and profile data are permanently deleted within 30 days. Anonymized, aggregated usage data may be retained longer for service improvement. You can also delete individual conversations from History in the app, which permanently removes that conversation's transcript. Nora's understanding of you, built from your conversations over time, is tied to your account and is removed when your account is deleted, not when a single conversation is.

Your rights

You have the right to:

Access a copy of your data
Request correction of inaccurate data
Request deletion of your account and all associated data
Withdraw consent for push notifications at any time

To exercise any of these rights, email support@asknora.me.

Children

Nora is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us and we will delete the account promptly.

Changes to this policy

We may update this policy as Nora evolves. Material changes will be communicated via email to registered users. Continued use of Nora after changes constitutes acceptance of the updated policy.

Governing law

This policy is governed by the laws of Washington State.

Contact

Questions or requests: support@asknora.me