Security & privacy

Your health data belongs to you

A health app deserves more rigor than an ordinary one. Here is what is in place, what is optional, and what we don’t promise.

How your data is protected

No professional access: Nilera is not a remote-monitoring platform. There is no doctor portal, no clinician dashboard, no way to share one account with another. Nobody can view your data from the outside, because nothing was built to allow it. What your doctor sees is the report you show them.
Per-account isolation: every account is isolated at the database level: access rules are enforced row by row, server-side, not just inside the app. One account cannot read another’s data.
Encryption and locking: exchanges between the app and our servers are encrypted (TLS) and stored data is encrypted at rest, on an infrastructure built on Supabase. The token that keeps your session is held in the system’s secure store — Keychain on iOS, Keystore on Android. You can also turn on one-time-code two-factor authentication and a biometric lock at launch: both are optional, and you choose the level.
Hosting in the European Union: your tracking data is hosted on infrastructure located in Ireland, in the European Union, and therefore subject to the GDPR. The app’s publisher is established in Benin; the hosting itself stays European.
Minimization: we only collect what directly serves a feature you use. No “just-in-case” data, no reselling, no targeted advertising.
No artificial intelligence: in this version, none of your data is sent to an AI model, neither by us nor anywhere else. What the app shows is computed from public composition tables and written rules — not inferred by a model.
Offline access: your tracking data and the food catalogue stay viewable on your phone, even without a connection.
Deletion: deleting your account — and the associated data — is available directly in the app, with no justification required and no hidden form. It also wipes the data kept on the phone.
What we don’t promise: your data is hosted on infrastructure we administer. So we will not claim it would be technically impossible for us to access it: that would be false, and an end-to-end encryption promise we don’t keep would be worse than no promise at all. Our commitment is about use: no reselling, no advertising, no profiling, and no access beyond what running the service and the law require.

And today, on this site

One area asks who you are: every page on this site can be read without leaving anything behind. One exception, “Manage my subscription”: to see your plan there, you enter a single-use code sent to your account email. Your session then stays in your browser's memory and nowhere else. No tracking cookie, on any page.
Analytics: this site uses a single analytics tool: Cloudflare Web Analytics — an aggregated measurement with no cookie and no browser fingerprinting, provided by the site’s own host. Nothing changes for you: no consent banner, because there is nothing to consent to.
The site and the app stay separate: outside the “Manage my subscription” area, this site has access to nothing. Even signed in, it reads only your subscription and your referrals: your readings, your treatments and everything you record stay in the app, and the site never sees them. This site’s analytics knows nothing about your use of the app — and the app itself ships with no advertising SDK. It includes two technical tools, kept within clear bounds: crash reporting with no personal data, which you can opt out of, and anonymous usage measurement that only turns on if you check a dedicated box — never pre-checked, and you can turn it off at any time.

The full details (purposes, retention, your rights) are in our privacy policy.

Transparency that will continue

Nilera is coming soon to the App Store for iPhone; the Android version will follow on Google Play. Tracking data is hosted in Ireland, in the European Union. The regulatory status applying to the publisher and any health-data hosting obligations are documented on this page. We prefer to announce what’s verified rather than promise.

Questions? Reach us via the contact page.