Privacy notice
Effective 16 July 2026. NuraCheck processes questionnaires in your browser by default. This notice also explains the optional, disabled-by-default Brazil account pilot for records a verified adult explicitly chooses to save.
Controller and contact
NuraCheck is a service operated by Guilherme Passero, an individual established in the Netherlands. NuraCheck is the service name and is not presented as a registered trade name. For privacy, support or accessibility requests, email privacy@nuracheck.com.
Data kept on your device
Questionnaire answers, local consent state, progress and calculated results use session or local storage according to your choice. This processing occurs on your device until you explicitly save a completed record. Session data ends with the browser session. Persistent local data remains until you delete it or clear browser storage.
Optional account and cloud records
The controlled pilot is limited to verified adults who self-declare residence in Brazil. Supabase Auth processes email, password hash, verification and session data. NuraCheck stores account consent state and completed records in an EU-jurisdiction Cloudflare D1 database. Each health record is encrypted in the Worker before D1 storage. D1 does not store email. Raw answers leave the browser only after separate health-data consent and an explicit save action for that result.
Technical data and providers
Cloudflare hosts and protects the website and may process request metadata needed to deliver it securely. Persisted Workers logs, observability and application analytics are disabled. If the account pilot is enabled, Cloudflare D1 stores encrypted account records, Supabase provides authentication, and Brevo sends generic authentication email with tracking disabled. Authentication email never contains questionnaire identity, answers, scores or bands. NuraCheck has no advertising or behavioural analytics.
Purposes and legal bases
NuraCheck asks for specific consent before on-device health-data processing. Account terms and privacy acknowledgement are separate from explicit cloud health-data consent. Every upload requires another user save action. EU bases are GDPR 6(1)(a) and 9(2)(a); Brazil bases are LGPD 7(I) and 11(I). Consent can be withdrawn without deleting the login account; withdrawal deletes active cloud questionnaire records and blocks future uploads.
Retention
Session data ends with the browser session; persistent local data remains until you delete it. Completed cloud records remain until you delete them, withdraw cloud health-data consent or delete the account. Unverified identities are scheduled for deletion after seven days. Active D1 records are deleted immediately, while encrypted Time Travel residuals may remain for up to seven days. A random, non-identifying deletion receipt is retained for five years.
International transfers
Optional account records are stored in a D1 database created with EU jurisdiction. Brazil-to-EU transfer relies on ANPD Resolution 32/2026's EU adequacy decision. Provider request handling may still occur in other documented locations, so jurisdiction is not described as an execution-location guarantee. Applicable DPAs, subprocessors and transfer safeguards must be retained before the pilot is enabled.
Your choices and rights
You can delete browser-only questionnaire data locally at any time. Depending on local law, you may also request access, correction, deletion, restriction, portability or objection for limited technical or correspondence data. Email privacy@nuracheck.com; we aim to acknowledge requests within ten business days, while statutory response periods still apply. Do not include questionnaire answers or detailed medical information.
United States privacy disclosures
NuraCheck does not sell personal information, share it for targeted advertising, use questionnaire data for profiling or offer financial incentives for data. Before actively targeting the United States, the controller must document the applicable federal and state disclosure, rights and incident requirements.
Adults only
NuraCheck is intended only for people aged 18 or older and requires an age confirmation before a questionnaire starts. It does not knowingly accept questionnaire or contact information from children. Anyone under 18 must not continue and should use Delete your data to remove any local questionnaire state.
Important boundary
NuraCheck supports structured self-reflection. It does not diagnose, rule out, validate or recommend treatment for any condition.