Privacy Policy

Last updated: 10/17/2026

Welcome to Nisone ("we," "us," "our"). Nisone is a journaling and health‑tracking application that allows users to record personal measurements and to pool data with other users on the basis of shared independent variables such as treatment exposure and subpopulation specifiers. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with applicable laws. Nisone operates in and provides its service to the United States and Canada.

By using Nisone, you agree to the practices described in this Privacy Policy.

1. Information We Collect

A. Information You Provide

We collect information you provide directly to us, including:

Your measurements, journal entries, and intake answers are consumer health data. We collect and share them only with the consents you give in two documents of their own, the Consumer Health Data Collection Consent and the Consumer Health Data Sharing Consent: pseudonymously, as part of the pooled data of the studies you join.

B. Automatically Collected Information

When you use Nisone, we automatically collect:

We do not log your IP address.

We do not use analytics tools or tracking for advertising.

C. Sensitive Health Information

Because Nisone allows you to record health‑related measurements, we may process information that is considered sensitive personal data under certain privacy laws. We only process this information to provide the core functionality of the app and never use it for marketing.

When we receive a claim that material published on Nisone infringes someone else's copyright, we need to be able to identify the person who published that material. Your account email address is what identifies you for this purpose, together with the record of which studies and treatments your account owns.

In Canada, the Copyright Act (ss. 41.25–41.27) requires us, on receiving a notice of claimed infringement, to retain records allowing the person responsible for the material to be identified, and to keep them for six months. In the United States, these records support the repeat‑infringer policy we maintain under the DMCA (17 U.S.C. § 512). Your account details serve both.

We do not use these records for advertising. We do not voluntarily share them. We disclose them only where legally required, such as in response to a valid copyright infringement notice or a lawful order (such as a Norwich Order).

2. How We Use Your Information

We use your information to:

We do not use your private content for advertising or resale.

We process personal data under the following legal bases:

You may withdraw consent at any time.

4. How We Share Information

We do not sell your personal information. We do not use it for targeted advertising, we do not profile you, and we do not use it to train large language models or any other machine‑learning system.

We share data only:

A. With Service Providers

Trusted companies that help us operate Nisone:

A provider may only use your data on our behalf for the purpose of providing our services, under a written contract that binds it to confidentiality.

B. As Legally Required

We may disclose information if required by law or to protect our rights, users, or the security of the service.

C. With Your Direction

If you choose to publish a study or a treatment guide, it becomes visible to others.

D. With Other Participants in Open Research

Your measurement log entries and intake answers are shared pseudonymously with other Nisone account holders as part of the pooled data of the studies you join, and the author of a study you join can see that your account has enrolled and which arm it is in. The Consumer Health Data Sharing Consent describes this sharing in full; it happens only with the consent you give there when you create your account.

5. International Data Transfers

We store and process data in the United States.

If you are located outside the United States, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your information when it is transferred internationally.

6. Your Rights

Privacy laws differ from place to place in which rights they give you. We give every user the following rights, whichever law applies to you:

How to exercise them. For your measurements you need not ask: in the Nisone application you can change and delete individual measurements and delete your account, and from account settings on the website you can download everything you have recorded, including your intake answers, as a CSV file. For anything else, email us at support@nisone.org from the address on your Nisone account, which is how we confirm the request is yours; we will not ask you for anything more to verify it. Intake answers cannot be changed in the application; email us and we will correct them.

How quickly. We respond within 30 days of confirming a request came from you. Where the law allows us one extension and we need it, we tell you within the original period and say why. We complete deletions within 30 days. Requests are free; if you make more than one request of the same kind in a twelve‑month period we may charge a reasonable fee or decline a request that is manifestly unfounded or repetitive, and we will say so.

Appeals. If we decline a request we tell you why and how to appeal. You appeal by replying to the denial, and we answer every appeal in writing within 45 days. If an appeal is denied we tell you how to contact the attorney general or supervisory authority responsible for you.

Health data. Your measurements, journal entries, intake answers, and study participation are consumer health data. We ask for your consent to collect them and, separately, to share them, in the Consumer Health Data Collection Consent and the Consumer Health Data Sharing Consent. Where a state's law requires a consumer health data privacy policy of its own, we publish one, linked from the footer of every page.

7. Data Retention

We retain your personal data for as long as necessary to provide the Nisone service or as required by law.

The copyright compliance records described in Section 1.D are your account details and the studies and treatments your account owns; they are retained for as long as your account exists. Where we have received an infringement notice concerning a study, the records for that study are preserved until the matter is resolved, as the law requires.

You may delete your account at any time. Within 30 days we will erase all identifiers from the associated data and anonymize it, unless retention is legally required, and we will instruct our hosting provider to do the same with anything it holds on our behalf. Personal data we no longer need for the purposes above is disposed of within 60 days of our no longer needing it.

8. Security

We use industry‑standard security measures to protect your data, including encryption in transit, secure hosting, and access controls. While no system is perfectly secure, we work continuously to safeguard your information. If we learn that your data has been accessed, taken, or disclosed without authorization, we will tell you by email within 30 days of discovering it, and we will notify the authorities the law requires.

9. Children's Privacy

Nisone is not intended for children under 18, or under the age required to consent to data processing in your country. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We tell you about a material change before it takes effect, as its own notice in the application, so that you can read what changed and, if you prefer, withdraw your consent or delete your account first. A change to how we process your health data requires your renewed consent, which the application asks for. The date at the top of this policy is the date of its most recent change.

11. Contact Us

If you have questions or concerns about this privacy policy, you can contact us at: support@nisone.org