Privacy Policy

Nexora ('we', 'our', or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. By using Nexora, you agree to the collection and use of information in accordance with this policy.

We collect information that you provide directly to us and information that is automatically collected when you use our services:

• Account Information: Name, email address, phone number, and business information
• Appointment Data: Client names, appointment dates, session notes, and treatment records
• Client Information: Client contact details, medical history (if applicable), and service preferences
• Usage Data: App features used, frequency of use, and interaction patterns
• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Location Data (Business Location): If you want your business listed in the business directory, you can capture the precise location of your business using your device's location permission, or type the address in by hand. This coordinate is stored on your business profile; we keep only the current coordinate, we keep no location history, and it is not shown to other users unless you turn directory listing on yourself.
• Location Data (Nearby Business Search): When you browse businesses near you, your device's current location is sent with that single request so the list can be sorted by distance from you. This location is not stored and no history of your locations is kept.
• Location Permission: Location is read only while the app is open and on screen; no location is collected in the background or while the app is closed. Providing location is optional — you can decline the permission and type an address instead; a business with no saved location simply does not appear in the directory, and the rest of the app keeps working.

We use the collected information for the following purposes:

• To provide, maintain, and improve our services
• To process appointments and manage client records
• To send appointment reminders and notifications
• To communicate with you about service updates and support
• To analyze usage patterns and improve user experience
• To ensure security and prevent fraud
• To comply with legal obligations and protect our rights
• Technical service quality measurement: Detecting push notification service failures to measure and improve service quality (for operational metrics only, not for individual user tracking)
• To use location data for app functionality only: to place your business in the business directory and to sort listed businesses near you by distance. Location is never used for advertising, marketing, analytics, or tracking you across other apps and websites, and raw coordinates are never written to our logs, crash reports, or analytics events.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing
• Withdrawal: Withdraw consent where processing is based on consent
• Complaint: Lodge a complaint with your local data protection authority

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: (a) With your explicit consent, (b) To comply with legal obligations or respond to lawful requests, (c) To protect our rights, privacy, safety, or property, (d) With service providers who assist us in operating our services (under strict confidentiality agreements), (e) In connection with a business transfer or merger. We use industry-standard cloud infrastructure providers (such as AWS, Google Cloud) for data storage and processing, all of which are GDPR and SOC 2 compliant. For advertising measurement: to measure the effectiveness of our advertising and for remarketing, we may share your encrypted (SHA-256 hashed) identifiers (phone/email — never in raw form) and conversion events with Meta Platforms (Facebook/Instagram) and Google (Google Ads / Analytics). This sharing is based on your consent and can be withdrawn at any time from the app settings. These data are transferred internationally (to the United States). Location data is outside this advertising measurement sharing: your location information and business coordinates are never shared with Meta, Google, or any other third party for advertising, marketing, or analytics purposes. Your business coordinate becomes visible to other users of the app only when you turn directory listing on in your business settings; that choice is yours and you can turn it off at any time, which removes your business from the directory. The location you send with a nearby business search is not shared with anyone.

We implement industry-standard security measures to protect your data, including: encryption in transit (TLS/SSL), encryption at rest, regular security audits, access controls and authentication, secure data centers with physical security measures, and regular backups. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@getnexora.app