Privacy Policy

Introduction

Welcome to N3W™ ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use N3 Wellness (our native iOS app), the public website at n3w.io, and related services.

By using N3W, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Data We Collect

Information You Provide

• Account Information: Email address, name, profile picture (via Google or Sign in with Apple)
• AI Interactions & chat history: When you are signed in, your chat messages are stored in our database (hosted on Supabase) so you can sync conversations across devices and restore history. Access is restricted with row-level security so only your account can read your messages. Messages are also processed in real time by AI providers as described in "AI Provider Data Sharing." Separately, key details from conversations (preferences, goals, context) may be extracted and stored as AI memories via Mem0 to personalize your experience.
• Uploaded Images & Files: May be stored temporarily to support the app (for example analysis and chat context) and may be removed periodically or when you delete the related content or account
• AI Memories: Important details about your preferences, goals, and context automatically extracted from conversations (stored via Mem0)
• Uploaded Images: Photos of food, body tracking, supplement labels, or other wellness-related images you share
• Professional Applications: If you apply as a professional, we collect professional credentials, licenses, and related details you provide (self-reported unless we state otherwise). Identity verification is handled by Stripe Identity, which may collect a government-issued ID and selfie for biometric matching. Stripe processes that information as our service provider; we receive verification status and session metadata only — we do not store or access your government ID images or selfie images in N3 systems.
• Subscription status: For consumer plans, purchase and renewal data from Apple In-App Purchase, reconciled via RevenueCat (we do not receive your full payment card number from Apple)
• Professional billing & identity: Stripe processes professional identity verification (Stripe Identity) and may process certain professional subscription payments where disclosed at checkout; we do not store your full card number
• Support Communications: Messages you send through our support system

We may store your messages to provide chat history and improve the service. Some sensitive information is filtered before being sent to AI providers, but stored messages may still reflect what you originally entered.

Automatically Collected Information

• Usage Data: Pages viewed, features used, time spent on platform, interaction patterns
• Device Information: Browser type, device type, operating system, IP address
• Technical Data: Error logs, performance metrics (via Sentry)
• Cookies: Session cookies, preference cookies, analytics cookies (see Cookie Policy)

Data We Actively Filter and Avoid Storing

• We try to limit storing sensitive health details (for example diagnoses, medications, or treatment specifics) in long-term AI memory using automated rules and moderation—but no system is perfect, and such details may still appear in your saved chat until you delete them
• Highly sensitive health information may still be processed when you send a message; avoid sharing anything you are not comfortable having in your chat history or processed by AI
• We do not track your browsing activity outside of N3W
• We do not sell your personally identifiable information to third parties

Note: While we use automated content moderation to filter sensitive health information, no system is perfect. Users should avoid sharing information they're uncomfortable having temporarily processed by AI.

How We Use Your Data

We use your information for the following purposes:

Service Delivery

• Provide AI-powered chat and wellness guidance
• Connect users with independent wellness professionals
• Process subscriptions (consumer: Apple/RevenueCat; professional: where applicable, Stripe)
• Send service-related notifications

Platform Improvement

• Analyze usage patterns to improve features
• Improve reliability and performance using aggregated and anonymized usage patterns (we do not use your personal data to train our own AI models)
• Debug errors and optimize performance
• Develop new features based on user needs

Safety & Security

• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Verify professional credentials
• Protect user safety and platform integrity

Legal Compliance

• Comply with legal obligations
• Respond to law enforcement requests
• Enforce our rights and protect our users

AI Processing & Data Usage

We use third-party AI providers (for example, via OpenRouter) to generate responses and power features within the app.

When you interact with the AI assistant, your messages may be processed by these providers solely to deliver the requested functionality.

We do not use your personal data to train our own AI models.

We may analyze aggregated and anonymized usage patterns to improve system performance, response quality, and user experience.

Third-Party Sharing

We share your data with the following trusted service providers:

Infrastructure & Storage

• Supabase: Database, authentication, and file storage
• Vercel: Application hosting and deployment

Subscriptions & Payments

• Apple: In-App Purchase billing for N3 AI, N3 Plus, and N3 Pro consumer subscriptions
• RevenueCat: Subscription status and entitlement reconciliation for the iOS app
• Stripe: Professional identity verification (Stripe Identity) and certain professional or legacy payment flows—not consumer AI subscription billing

AI & Machine Learning

• OpenRouter: AI model routing and API proxy
• Through OpenRouter, your messages may be processed by:
  • OpenAI (GPT models & Vision API)
  • Google (Gemini models & Vision API)
  • Anthropic (Claude models)
  • Meta (Llama models)
  • Perplexity (Sonar models for real-time research)
• Mem0: AI-powered memory storage for conversation context and personalization

Monitoring & Analytics

We use analytics tools—such as Umami and Vercel Analytics—to understand how the app is used and to improve the experience, alongside error monitoring below.

• Umami: Product and page usage analytics
• Vercel Analytics: Web traffic and performance metrics for our hosted application
• Sentry: Error tracking and performance monitoring

For a complete list of subprocessors and data flows, see our Data Processing Addendum.

Data Sharing

We do not sell your personal information for monetary value.

We may share data with trusted service providers (such as infrastructure, payment, and AI providers) solely to operate, secure, and improve the platform, as described in this policy and our subprocessors list.

If you are a California resident, this addresses "sharing" as defined under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): we do not sell personal information, and we disclose categories of sharing in the sections above.

AI Provider Data Sharing

IMPORTANT: When you use N3W's AI features, your messages and uploaded content are sent to third-party AI providers.

What AI Providers See

• Your chat messages and conversation context, including messages stored in your account for cross-device sync
• Images and files you upload (processed by Vision APIs for analysis; may be stored temporarily as described under "Data We Collect")
• Context and memories needed to generate personalized responses

AI Memory System (Mem0)

We use Mem0, a third-party AI memory service, to store personalized context about your preferences, goals, and wellness journey. This enables N3W to provide tailored recommendations across conversations.

• What's Stored: Dietary preferences, fitness goals, wellness interests, lifestyle habits (extracted automatically from conversations)
• Long-term memory: We try to limit storing sensitive health details in Mem0 using automated rules and moderation, but extraction is not guaranteed to catch everything—avoid sharing highly sensitive health information you would not want retained or processed
• Your Control: View, pause collection, or delete memories anytime in Settings → Memory
• Retention: Memories persist until you manually delete them or delete your account

Learn more about Mem0's privacy practices at mem0.ai/privacy

Image Analysis (Vision APIs)

When you upload images (food photos, supplement labels, body tracking), they are sent to AI vision models for analysis:

• OpenAI Vision: Analyzes image content, extracts text from labels
• Google Vision API: Performs image recognition and content analysis
• Image retention: Images may be stored temporarily to support the app and may be deleted periodically or when you delete related chats or your account
• Privacy Protection: EXIF metadata (GPS, camera info) is stripped before upload

How AI Providers Use Your Data

Different providers have different policies:

• OpenAI: Does not train on API data by default. Retains data for 30 days for abuse and safety monitoring only. Learn more
• Google: API data is not used for training by default. Data may be retained temporarily for service improvement with specific opt-in. Learn more
• Anthropic: Does not train on API data. Retains for trust and safety purposes only. Learn more
• Perplexity: Processes web search queries to provide real-time research results. Does not train on API data. Learn more

Your Control

To minimize data sharing with AI providers, we implement:

• Automatic PII redaction (emails, phone numbers, SSN, etc.) before messages are sent to AI providers (stored chat may still contain what you typed unless you enable stricter storage options where available)
• EXIF metadata stripping from images (GPS, camera info)
• Limited conversation context sent to models

Data Security

We implement industry-standard security measures to protect your data:

Technical Safeguards

• Encryption: All data encrypted in transit (HTTPS/TLS) and at rest (AES-256)
• Access Controls: Row-level security (RLS) ensures users can only access their own data
• Authentication: Secure sign-in via Sign in with Apple and Google (OAuth)
• File Security: EXIF stripping, MIME validation, and size limits
• PII protection: Automatic redaction of common sensitive patterns before sending content to AI providers

Operational Safeguards

• Regular security audits and penetration testing
• Automated monitoring and alerting
• Incident response procedures
• Employee training on data protection

For more details, see our Security Statement.

Your Rights

You have the following rights regarding your personal data:

Access & Portability

• View Your Data: Access your chats, messages, and account information in the N3 Wellness app when signed in
• Export Your Data: Contact privacy@n3w.io to request a copy of your data where applicable law requires it

Control & Deletion

• Manage Memories: View, pause collection, or delete AI memories in Settings → Memory (in the app)
• Delete Chats: Remove individual conversations in the app where available
• Delete uploaded images: Remove conversations that contain them, or delete your account; images may otherwise be kept for a period while the service needs them
• Delete Account: In the N3 Wellness app, go to Settings, choose delete account, and confirm by typing DELETE. This initiates permanent deletion of your account and associated data we control, subject to legal retention requirements. Active Apple subscriptions must be cancelled separately in your Apple ID settings.
• Opt Out: Unsubscribe from marketing emails (if applicable)

Correction

• Update your profile information at any time
• Correct inaccurate data by contacting support

GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users)

If you are a California resident, you have rights under CCPA:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to deletion
• Right to non-discrimination

To exercise any of these rights, contact us at privacy@n3w.io

Cookies & Tracking

On the public marketing website (n3w.io), we store your cookie consent choice and load optional analytics (such as Umami) only if you enable analytics cookies. Hosting metrics (Vercel Web Analytics) may still run as part of our deployment. Details are in our Cookie Policy.

In the native app and signed-in product, we use authentication and session technologies as described elsewhere in this policy. The app does not show the marketing-site cookie banner. We do not use the app for cross-app advertising tracking.

Email Communications & Preferences

Types of Emails We Send

We send two types of emails:

1. Transactional Emails (Always Sent)

Essential account and security emails that we're required to send:

• Password resets and security alerts
• Email confirmations and account verification
• Subscription confirmations and billing receipts
• Professional application status updates
• Critical service announcements

You cannot opt out of transactional emails as they are necessary for account security and service delivery.

2. Marketing Emails (Optional)

Product updates and wellness content you can control:

• N3WS Updates: Product announcements, new features, and platform improvements
• Product Tips: How-to guides, best practices, and tips for using N3W
• Wellness Content: Wellness tips, partner offers, and promotional content

Managing Your Preferences

You can control marketing emails in two ways:

• Settings Page: Visit your n3w.io to manage all email preferences
• Unsubscribe Link: Click the unsubscribe link at the bottom of any marketing email

We honor unsubscribe requests immediately. Changes may take up to 48 hours to process.

Legal Compliance

Our email practices comply with CAN-SPAM Act, GDPR, and CCPA requirements. All marketing emails include:

• Clear sender identification
• Accurate subject lines
• One-click unsubscribe option
• Our physical mailing address

Anonymized & Aggregated Data

What We Collect

We may collect anonymized, aggregated data about wellness trends, feature usage, and user behavior patterns. This data is processed to remove all personally identifiable information before any use or analysis.

How We Use Anonymized Data

• Product Improvement: Understand how users engage with N3W to build better features
• Wellness Research: Contribute to nutrition, fitness, and mental health research (aggregated population-level insights only)
• Industry Insights: Generate trend reports and benchmarks (e.g., "Plant-based diet adoption increased 23% year-over-year")
• Platform Analytics: Monitor performance, identify bugs, and improve user experience

Anonymization Process

Before any data is used outside of core platform operations, we:

• Remove all user identifiers (user IDs, emails, names, IP addresses)
• Aggregate data from 100+ users minimum
• Round timestamps to prevent individual tracking
• Apply k-anonymity standards (k≥5) to prevent re-identification
• Exclude outliers that could identify individuals

Your Control

You can opt out of anonymized data collection in your n3w.io. Opting out will not affect your ability to use N3W's core features.

What We NEVER Share or Sell

Example of anonymized data: "Among 10,000 users who set weight loss goals, 68% increased protein intake." There is no way to identify any individual user from this aggregate statistic.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including:

• Uploaded images: Retained as needed to provide chat, vision features, and sync; removed when you delete the related content or account, or periodically as our systems clean up older data
• AI Memories: Until you manually delete them or delete your account (you control these in Settings)
• Chat Messages: Stored in your account so history can sync across devices. Messages older than a limited retention window may be automatically deleted by scheduled server cleanup (by default, messages older than 180 days, unless we configure a different period in production). A local cache may also exist on your device for faster loading. You can delete individual conversations or your entire account at any time.
• Account Data: Until you delete your account (see immediate account deletion below)
• Payment Records: 7 years (legal requirement)
• Professional applications & identity verification:Application materials and verification status we store are kept as needed to process applications and operate the directory. Government ID and selfie images for Stripe Identity are processed by Stripe as our service provider; retention of those images is governed by Stripe's policies, not by N3 systems.
• Audit logs, consent records, backups, and similar operational data: Retained as necessary for legal, security, operational, or compliance purposes, then deleted or de-identified when no longer needed

You can request earlier deletion by contacting us, subject to legal obligations.

Children's Privacy

N3 Wellness is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from someone under 18, please contact us immediately.

International Users

N3W™ is based in the United States. If you access our services from outside the US, your data may be transferred to and processed in the US and other countries where our service providers operate.

By using N3W, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)

Your continued use of N3W after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@n3w.io
• Support: support@n3w.io
• Security Issues: security@n3w.io