Privacy Policy

Last updated: 8 September 2026

This is a starting template written for an Irish business under the GDPR. Have it reviewed by a lawyer before you rely on it.

The short version. Studying a remedy and the prepared example cases run entirely in your browser and send nothing to us. When you type your own case and ask Nikolife to read it, that text is sent securely to our AI providers (OpenAI and Anthropic) only to identify the matching repertory rubrics; it is used to return that result, is not stored by us, and is not used to train AI models. We otherwise handle only limited data such as your contact email (if you write to us) and, when paid plans launch, billing handled by Stripe.

1. Who is responsible for your data

The data controller is Nikolife Health, registered in Ireland (CRO 780832), business address 36 Fennor Lodge, Slane, Co. Meath, C15 XK7E, Ireland. For any privacy question or to exercise your rights, contact nikolife.international@gmail.com.

2. What this policy covers

This policy applies to the Nikolife Service at app.nikolifehealth.com.

3. What we collect

Case notes and symptoms you enter

Studying a remedy and the prepared example cases run entirely in your browser and send nothing to us. When you type your own free-text case and ask Nikolife to read it, that text is sent securely to our AI providers — OpenAI (to turn the text into a numeric representation, an embedding, used to find matching rubrics) and Anthropic (to select and structure the matching rubrics from our fixed catalogue). That text is processed only to return the rubric matches for you; it is not stored by us, and under these providers' API terms it is not used to train their models. The ranking of remedies always happens on your device. If you prefer not to send any text off your device, use the prepared cases or the study mode instead.

Information you give us

If you contact us, we receive your email address and whatever you write. When accounts and paid plans launch, we will collect an account email and billing details; card payments are handled by Stripe and we do not store full card numbers.

Technical information

Our hosting provider (Netlify) processes standard server logs (such as IP address, browser type, and pages requested) to serve and secure the site. We do not use third-party analytics.

Your browser storage

We store a small preference in your browser's local storage (for example your language and light / dark theme choice). It stays on your device, is not a tracking cookie, and we do not read it from our servers.

4. Health-related information

A case you type can include health-related information, which is “special-category” data under the GDPR. When you choose to run free-text analysis, that text is sent to our AI provider only to return rubric matches and is not stored by us; we rely on your explicit consent (GDPR Article 9), given by choosing to run the analysis, and you can avoid it entirely by using study mode or the prepared cases, which send nothing. We do not build health profiles about you.

5. Why we use data and our legal basis

To provide and maintain the Service — performance of a contract and our legitimate interests.
To take payment for paid plans — performance of a contract.
To respond to your messages — our legitimate interests.
To meet legal and accounting obligations — legal obligation.

6. Who we share data with

We use trusted providers who act on our instructions: hosting (Netlify), AI processing of free-text cases (OpenAI for embeddings and Anthropic for rubric selection), and payments (Stripe). If you email us, that message is received through Google (Gmail). They process data under agreements with us. We do not sell your personal data.

7. International transfers

Some of our providers are based outside the EEA. Where that happens, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. How long we keep data

We keep personal data only as long as needed for the purposes above or as required by law (for example, billing records for accounting). In practice we keep messages you send us only as long as needed to deal with your query, and billing records for as long as Irish tax and accounting law requires (generally six years).

9. Your rights

Under the GDPR you have the right to access, correct, erase, restrict, or object to our use of your personal data, to data portability, and to withdraw consent where we rely on it. To exercise a right, contact nikolife.international@gmail.com. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie).

10. Children

The Service is intended for adults (18+) and we do not knowingly collect data from children.

11. Changes to this policy

We may update this policy; we will change the date above and, for material changes, notify you where appropriate.

12. Contact

nikolife.international@gmail.com · Nikolife Health, registered in Ireland, CRO 780832.