Privacy & Data Policy

Testing environment. HIPAA-conscious architecture — not HIPAA certified, not validated for clinical use, not for emergency use. Reflective only — not clinical advice.

What this platform is

Niaralis is a longitudinal reflection and transformation intelligence platform for individuals and the professionals they choose to work with. It is not a medical device and does not provide medical advice, diagnosis, or treatment. It does not endorse, facilitate, or recommend the use of any controlled substance.

Professional connection and user ownership

New users normally enter through an invitation from an approved professional and connect during onboarding. Once linked, you choose what to share with them. Adaptive check-in data, journal summaries, and full journal entries are each separate sharing choices you make during onboarding and can update at any time from Account settings.

Sharing is explicit and controlled by you

When you link with a professional, nothing is shared automatically. During onboarding you choose which categories the professional supporting you may see: adaptive check-ins, journal summaries, or full journal entries. Each is a separate explicit choice. You can update these at any time from Account settings. Revoking access takes effect immediately.

Journal sharing remains optional

Journal entries are private by default. You choose whether to share journal summaries or full journal entries with the professional supporting you, on a per-entry basis from within the journal. Journal sharing is never automatic and is always user-controlled. You can revoke journal sharing at any time.

How your data is stored

In cloud mode (the default), your data is stored in a Supabase cloud database with row-level security. Only you and your linked professional can access your records. In local mode (no Supabase configured), data is stored in your browser's localStorage only.

Professional access is logged

All professional access to your data is recorded in an audit trail with timestamps. You can view this log at any time from Account settings. Note saves, override changes, and consent changes are all recorded.

Revoking professional access

You may revoke professional access at any time from Account settings. Upon revocation, your data will no longer be visible to that professional. Revoking professional access may prevent supported use of the app with that professional. Existing audit log entries are retained as a record of prior consent.

AI-generated reflections

Reflections may be generated by a local deterministic engine or, if configured, by a third-party language model (Anthropic Claude or OpenAI). All AI outputs are clearly labelled as reflective only — not clinical advice. AI does not decide what an experience means and never replaces human judgment.

HIPAA-conscious architecture — not HIPAA certified

Niaralis is designed with a HIPAA-conscious architecture: role-based access control, audit logging, minimum-necessary data collection, explicit consent, revocable access, and row-level security. It is NOT currently HIPAA certified and is not designed for regulated healthcare deployment without further legal and technical review.

Testing environment

This version of Niaralis is a private testing environment. Do not enter highly sensitive medical or crisis information. Not intended for emergency use. Not validated for clinical or regulated healthcare settings.

Your rights

You may request deletion of your account and all associated data at any time by contacting the Niaralis team. In cloud mode, this permanently removes your profile, sessions, journal entries, professional relationships, and sharing permissions.

Compliance architecture

Niaralis is built with a GDPR-conscious, HIPAA-conscious, and SOC 2-ready architecture. This means data practices align with these frameworks — minimum-necessary data collection, audit logging, revocable consent, role-based access control, and TLS encryption in transit. However, Niaralis is not yet GDPR audited, not HIPAA certified, and not SOC 2 certified. These certifications are intended future milestones, not current status.

Consent governance

Every consent decision you make on Niaralis is recorded in an immutable consent ledger: what you consented to, when, from which part of the platform, and under which version of our consent policy. This record is append-only — it cannot be modified or deleted while your account is active.

You can view your complete consent history from the Trust Center, or download it in your account export.

Aggregate intelligence and research participation

If you opt in to aggregate research participation, your journey data (never your journal) may contribute to anonymised collective intelligence. This requires both your profile-level consent and journey-level consent — both must be active for any journey to contribute.

Collective insights are only published when at least 5 eligible participants contribute to protect individual privacy. Groups with fewer than 5 eligible participants are suppressed and shown as “<5.” Aggregate data may include transformation contexts, longitudinal themes, and de-identified pattern frequencies. It never includes journal entries, AI reflections, professional notes, or any directly identifiable data.

You can opt in or out at any time from Account settings. Opting out excludes your data from all future computations. Aggregate intelligence already computed cannot be individually reversed, because individual contributions are not identifiable in existing outputs.

Deletion transparency

When you delete your account, all directly identifiable data is permanently removed: your profile, journal entries, check-ins, journeys, insights, professional links, AI memories, and sharing choices. If a service-role key is configured, the underlying authentication record is also deleted.

A deletion receipt is created when your account is deleted. This receipt uses a one-way cryptographic identity (not your user ID, not your email, not your name) to record that deletion occurred and which data was removed. This receipt does not re-identify you and cannot be used to reconstruct your data.