Privacy Policy

Effective date: 24 June 2026

nrsh ("nrsh", "we", "us") helps you understand how your body responds to food. This policy explains what we collect, why, how we protect it, and the choices you have. It applies to the nrsh mobile app and the nrsh wearable during the current trial program.

1Who we are

nrsh is operated by Nrsh Health Pty Ltd (ABN 85 692 719 092), a company registered in New South Wales, Australia. For any privacy question, contact us at info@nrsh.health.

2What we collect

• Account details. Your email address and any name you choose to provide, used to create and secure your account.
• What you log. Meals you record (ingredients and quantities), symptoms you record (type, severity, and any notes you add), and the personal sensitivity profile nrsh builds from this over time.
• Wearable readings. During the trial, the nrsh wearable measures your body's response around mealtimes. These readings are used to generate your personal food signals in the app.
• Usage analytics. How you move through the app: screens you open, features you use, time spent on screens, and where you stop. See section 5.
• Technical and diagnostic data. Basic device and app information, and crash and error reports, so we can keep the app stable.

We do not collect your precise location, contacts, photos, or advertising identifiers. nrsh does not show ads and does not sell your data.

3Why we collect it

• To provide your personal food signals and build your sensitivity profile.
• To run the trial and improve the app experience before a wider release.
• To keep your account secure and the app stable.
• To respond to you when you contact support.

4Where it is stored

Your account data and what you log are stored on our secured backend (hosted with Render) and transmitted over encrypted connections (HTTPS). Analytics data is processed in the European Union (see section 5).

5Product analytics

To learn how the app is used during the trial and improve it, we use PostHog, a product-analytics service, on its European Union infrastructure. This data is pseudonymous: it is tied only to a random account identifier, never to your email or name.

We record how you interact with the app (screens, features, taps, timing and drop-off points). We do not send the content of what you log to the analytics service: no meal or ingredient names, no symptom notes, no search text, no sensitivity values, and no food results. The app enforces this with a fixed list of permitted data fields; anything outside that list is removed before sending.

The analytics service also records masked session replays so we can see where users get stuck. All on-screen text, all input fields, and all images are masked, so the replay shows how the app was used, not the personal information on screen.

You can turn analytics off at any time in Settings > Data and privacy > Share usage data. When it is off, no analytics events or replays are sent.

We use Sentry, separately, to receive crash and error reports so we can fix problems quickly.

6Sharing a report with a clinician

You can generate a report of your nrsh data and share it with a healthcare professional of your choosing. The report is created on your device from the data you have logged and is sent only through the sharing method you select. Once you share it, the recipient (for example your dietitian or gastroenterologist) controls that copy. nrsh does not transmit your report to any clinician automatically and does not store a copy of what you share.

7Who else processes your data

We use a small number of service providers ("sub-processors") that handle data on our behalf under contract:

• Render - backend and database hosting.
• PostHog (EU) - product analytics and masked session replay.
• Sentry - crash and error reporting.

We do not sell your personal information and do not share it for advertising.

8How long we keep it

We keep your account data and logs while your account is active. If you ask us to delete your account, we remove your personal data from our active systems within 30 days, except where we must keep limited records to meet legal obligations. Analytics data is retained according to PostHog's standard retention and is not linked to your identity.

9Your rights and choices

• Export. You can generate a report of your data in the app at any time.
• Opt out of analytics. Settings > Data and privacy > Share usage data.
• Access, correction, deletion. Contact info@nrsh.health to request a copy of your data, a correction, or deletion of your account.
• Depending on where you live (for example the EU or UK under GDPR, or under Australian privacy law), you may have additional rights, including the right to lodge a complaint with your local data protection authority.

10Security

We protect your data with encrypted connections, authenticated access, and restricted internal access. No system is perfectly secure, but we work to protect your information and to limit what is collected in the first place.

11Children

nrsh is not intended for children under 16, and we do not knowingly collect data from them.

12Changes to this policy

We may update this policy as the product develops. We will post the updated version here and change the effective date above. Material changes will be communicated in the app.

13Contact

Questions or requests: info@nrsh.health.