Last updated: 28 October 2026

Niyora Privacy Policy

Niyora is made in Norway. When this policy says "we" or "us", it means Niyora. Questions go to neha@niyora.com.

The short version

• The app has no accounts. You do not give us your name or email to use it.
• What you write in the app is stored on your phone, encrypted, and in your iPhone's own backups if you make them, still encrypted. We do not run a server that keeps it, and we cannot read it.
• When you ask Moon for a reflection, or talk to Moon out loud, what you share is sent to Google's Gemini AI to write the reply and to check whether you might need crisis support. It is not used to train AI models.
• On the website, we ask for your email only if you sign up for something, such as the PMS guide or the email course. You can unsubscribe at any time.
• If you connect Apple Health, Niyora reads your period dates, the cycle symptoms you log, and your moods if you log them there, to place your cycle and show your patterns. That data stays on your phone. Only one thing is sent: when Moon replies to you, Google is told whether today is one of the days before your period.
• If you bring your history from another app, Niyora reads the export file on your phone. Nothing in it is uploaded.
• We do not sell your data, and we do not use it for advertising.
• Niyora is not a medical, therapy or crisis service.

In the app

What stays on your phone

The moments you write, the feelings you name, the replies you draft and your history all stay on your phone, along with history you bring in from another app's export file and the symptoms and moods Niyora reads from Apple Health. Your words are encrypted everywhere they are stored, including drafts, a moment you have not finished and messages you saved for later. The key that encrypts them is created on your phone and is never sent to us or to Google. Photos you attach are held only while that moment is open and are not saved.

Your history moves with your iPhone. When you move to a new iPhone by transferring directly from your old one, or by restoring an encrypted backup made on your computer, your history and its key come with you, still encrypted. If you restore an iCloud Backup onto a different iPhone, your earlier entries come across but cannot be read there, because Apple ties that key to the iPhone it came from. The app keeps them as they are and starts fresh beside them.

Deleting your history, or the app, removes the stored data from your phone. Your iPhone may keep the encryption key after the app is deleted, but without the data it opens nothing. A backup you made keeps its copy until you delete that backup.

What is sent to give you a reply

To write a reflection, the app sends the moment you wrote, and a photo if you attach one, to Google, which processes it on our behalf. It goes through Firebase AI Logic to Google Cloud's Vertex AI, where Google's Gemini models write the reply. The same request is used for a safety check that can add crisis resources to the reply. Before text is sent, the app removes many personal details, such as email addresses, phone numbers and names it can recognise. It cannot catch every detail, so please leave out anything you would not want to leave your phone. To keep Moon's reply connected to what you've been through, the app may also send a few of your earlier entries on the same topic, with the same personal details removed. The app also tells Google whether today is one of the days before your period, so Moon can keep it in mind. It sends only that, never your dates, and it may come from dates you logged, from Apple Health or from another app's file.

If you ask Moon a question about your history in My History, the app sends your saved moments with your question: the date, the feeling and topic, what you wrote and any reply you sent. Names and contact details it can recognise are removed first, the same as for any other message to Moon.

Google processes the request to return the reply. Under Google Cloud's terms, Google uses it only to provide the service to us, does not use it to train its AI models, and protects it at least as well as this policy does. No person reads it in normal use. The one exception is Google's own abuse check: if its automated safety systems flag a request as possible misuse of its service, Google may keep that request for up to 90 days, and an authorised Google employee may look at it, only to decide whether its rules were broken. It is never used to train AI. We do not receive or keep a copy.

When you talk to Moon out loud

If you start a voice conversation, the app uses your microphone, only after you allow it and only while the conversation is open. Your voice is streamed the same way to Google's Gemini so it can hear you and answer out loud. Spoken words cannot have personal details removed before they are sent the way written ones can, so Google hears what you say as you say it. To keep the conversation connected, the app may also send the feelings and topics of your recent moments, the words from your last voice conversation if it was in the past two days, and whether today is one of the days before your period.

We do not record or keep your audio, and the same terms apply as for text: it is not used to train models, and no person listens to it in normal use. To keep a long voice conversation going past Google's connection limit of about 10 minutes, Google may hold the conversation so far, including your voice and Moon's replies, for up to 24 hours, and then deletes it. It is never used for training. The captions of what you said are saved on your phone, encrypted, like a written moment, and are deleted with your history. The same safety checks run on the captions, and a conversation that shows signs of crisis ends with crisis resources and is not saved.

Speaking instead of typing

When you write a moment, you can tap the microphone and speak instead of typing. This uses Apple's speech recognition, built into your iPhone, and asks for your permission first. Depending on your iPhone and language, Apple may process the audio on its own servers to turn it into text, under Apple's privacy policy. Niyora only receives the text, which you can edit before anything is sent to Moon. Niyora does not record or keep the audio. This is separate from talking to Moon out loud.

Breathing with the moon

Breathe into the moon uses your microphone, only after you allow it and only while it is open, to measure your breath on your phone. No sound is recorded, kept or sent anywhere. It keeps a few numbers about how your breath sounds on each microphone, so it can hear you better next time. Those numbers stay on your phone.

Pairing with your Mac

If you use Niyora on your own Mac, you can pair it with your phone. Pairing asks for local network permission. The two then talk directly over your own network, encrypted, with nothing going through the internet. Your phone shares the breathing and mindfulness sessions you finish, and the Mac shares its own practice progress. Nothing you write in a moment is sent to the Mac.

What else the app checks

When it opens, the app checks for its current settings and for small updates, and it confirms that requests come from the genuine app to prevent abuse. These checks use a random installation ID and your device's network address, like any internet request. They carry nothing you have written.

Apple Health

If you choose to connect Apple Health, Niyora asks for permission to read your menstrual flow records, which tell the app when your periods were, the symptoms you log in Cycle Tracking (such as cramps, headache, bloating or mood changes), and, on iOS 18 and later, the moods you log in Health. The first time you connect, it reads your whole history, so your past cycles are there from day one. It uses your periods to show your cycle on the calendar, to estimate your next period and your PMS window, and to time reminders, and keeps your symptoms and moods with your history, encrypted like your moments. Niyora only reads. It never writes anything to Apple Health.

Health data stays on your phone and is never sent to us or to anyone else, and it is never used for marketing. The one exception is the yes or no on whether today is one of the days before your period, sent to Google as described above.

Bringing your history from another app

If you export your data from another period, cycle or mood app and open the file in Niyora, the app reads it on your phone. The file is not uploaded, and nothing in it is sent to us or to anyone else. The one exception is the yes or no on whether today is one of the days before your period, sent to Google as described above. If the file is locked, the password is used once to open it and is not kept. Your past periods are added to your cycle history. The days, feelings, symptoms and notes in the file are stored on your phone, encrypted like your moments. Deleting your history removes them.

Purchases

Premium is bought through Apple. Apple handles the payment, and we never see your card or Apple Account details. The app only stores whether Premium is active, on your phone.

On niyora.com

Email sign-ups

If you sign up on the website, for the PMS guide, the email course, the research digest, the Android waitlist, updates or the steps to move to Niyora, we keep your email address, which list you joined, where on the site you signed up and when. For the steps to move to Niyora we also keep the app you said you are moving from, if you picked one. We first send you an email to confirm it was you, and we only send more once you confirm. Every email has an unsubscribe link, and unsubscribing takes effect straight away.

We use your email only to send what you asked for. We never ask for health details in a sign-up, and quiz answers are not stored with your email. When a new person signs up, our team gets a short notice with the email address and the list.

The legal basis is your consent, which you can withdraw at any time by unsubscribing or by writing to us.

Analytics

We measure how the website is used, such as which pages are visited and which buttons are tapped, so we can improve it. This is done without advertising cookies and without building a profile of you. Text you type into forms is masked and not recorded. The legal basis is our legitimate interest in running and improving the site.

Security

The site and its forms run on a hosting and security provider that may check a request to block bots and abuse. Like any website, it handles your network address to deliver pages.

Who helps us

We use a small number of service providers to host the website, deliver email, measure site use and run the AI replies in the app. They process data only on our instructions and under data processing agreements. Some of them may process data outside Norway and the EEA. When they do, the transfer is covered by safeguards the law recognises, such as the European Commission's standard contractual clauses. We do not share your data with anyone else, unless the law requires it.

How long we keep things

• App content: on your phone, and in your iPhone backups if you make them, until you delete it, the app or the backup. We hold no copy.
• Email sign-ups: until you unsubscribe, or until we stop sending that list. After you unsubscribe we keep a record that you did, so we do not email you again by mistake.
• Website analytics: for as long as it is useful to understand how the site is used, and in a form that does not identify you.

Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to how we use it, or withdraw your consent. Write to neha@niyora.com and we will reply within a month. Because the app has no accounts and your moments stay on your phone, most app data is already in your hands. If you are unhappy with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority where you live.

What we do not do

• We do not sell or rent your data.
• We do not use your data for advertising, and there are no ads in the app.
• We do not track you across other apps or websites.
• We do not use what you write to train AI models.

Children

Niyora is for adults. You must be at least 18 to use the app or sign up on the website. It is not designed for or directed at children, and we do not knowingly collect data from anyone under 18.

Niyora is not a medical service

Niyora is a self-help tool. It is not a medical device, therapy or a crisis service, and it does not diagnose or treat any condition. If you are struggling, please talk to a doctor or another qualified professional. If you are in danger, contact your local emergency number right away.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top. If a change affects how we use your email, we will tell subscribers by email.

Contact

Questions about privacy: neha@niyora.com.