Privacy notice

Last updated: 30 October 2026

Naura is a support app for people with epilepsy and the people close to them. Here we explain, in plain words, which data we use, why, and what your rights are.

1. Data controller

Naura S.a.s.
Via dei Trati 1
VAT no. 00000000000
Privacy contact: [EMAIL PRIVACY]

2. Which data we process and why

• Account: name, email, phone (optional), language, role (primary user or emergency contact). Your password is only stored in unreadable form (hash). Needed to provide the service (Art. 6(1)(b) GDPR).
• Health data (Art. 9 GDPR): helper card (medication and times, allergies, notes, typical seizure duration), diary (seizures, mood, factors, medication taken) and alerts (Aura and SOS, including those started from the watch). We process them only with your explicit consent (Art. 9(2)(a)), which you can withdraw at any time. Card, diary, home and walks are stored encrypted on the server.
• Location: only during an alert or a safe walk, to send it to your network, and your home location if you choose to set it. To show useful numbers we only use your region. Basis: consent, managed in Settings and in your phone's permissions.
• Emergency contacts and care network: name and number of the people you pick from your contacts or invite with a code or QR code. We only use them to alert them when you need help.
• Device data: notification identifier and phone type.

Data that stays on your phone and never reaches us: heart rate, heart rate variability, sleep, wellbeing index, unlock pattern and Face ID.

3. Who we share data with

• Your network: during an alert or a walk, the people you chose receive your name, the type of alert and your location.
• Helpers: the public card (link, QR code, widget) only shows rescue medication, allergies and notes, without your name or contacts.
• Providers, appointed as processors: servers in France (EU); Google Firebase for notifications; an SMS provider (Twilio) for emergency texts; Apple and Google to calculate routes; Google AdMob for ads in the free version.

Some providers may process data outside the European Union: such transfers rely on the safeguards set out by the GDPR (Data Privacy Framework or standard contractual clauses). We never sell your data and never use it for advertising.

4. Advertising

The free version shows a small banner at the bottom of some screens, never during an alert. Ads are non-personalised: we don't profile you and Google doesn't receive your health data. Where the law requires it, we ask for your consent with Google's form before showing ads; you can change it in Settings → "Ad privacy".

5. How long we keep data

• Alert and walk locations: deleted automatically after 90 days.
• Sign-in sessions: 30 days from last use.
• Invites: deleted 7 days after they expire.
• All other data: as long as you have an account. If you delete it, we erase it immediately and permanently.

6. Your rights

You can request access, rectification, erasure, restriction and portability, and object to processing. Many things you can do yourself in the app: Settings → Download my data (full copy), Delete account (permanent erasure), Privacy consents (withdrawal). For anything else write to [EMAIL PRIVACY]. You can also lodge a complaint with the Italian Data Protection Authority (Garante) or your local authority.

7. Children

Under 14, the account must be created and managed by a parent or guardian.

8. Security

Encrypted connections (HTTPS), health data encrypted on the server, app access protected by Face ID, fingerprint or pattern. No system is perfect: if we detect a breach affecting you, we will inform you as required by law.

9. Changes

If we change this notice we update the date at the top and, for important changes, let you know in the app.