Privacy Policy

1. Who operates N&S WholeLife

N&S WholeLife is a product of N & S Confidence Reaction Services. References to “we,” “us,” or “our” in this policy mean N & S Confidence Reaction Services. For privacy or data questions, contact privacy@nandswholelife.com.

2. Scope

This policy covers the current version of the N&S WholeLifewebsite (this site) and the current version of the N&S WholeLife native app for iOS and Android. It does not cover any third-party site or app you reach through a link from N&S WholeLife.

3. Information you provide

• Email address — required to create and sign in to your account.
• Display name — optional; your legal name is never required.
• Onboarding and profile preferences — region, preferred language, primary wellness goal, movement preference, and meal preference. These are collected during onboarding to personalise your experience and are optional except where onboarding itself requires a selection to continue.
• Optional tracker entries— see “Wellness and fitness information” below.
• Account-deletion requests— see “Deletion” below.

4. Account and access information

We record trial and subscription entitlement information (such as your trial end date and subscription status) so the app can determine whether your account currently has access. The native app only reads this entitlement status — it never collects a card number, bank detail, or other payment instrument itself. Where a purchase happens on our website, see “Payment information” below.

5. Wellness and fitness information

If you choose to log them, we store the following entries against your account so your progress can be shown back to you:

• Water intake
• Movement / activity minutes and general workout completion
• Sleep / rest hours
• Mood check-ins

We do not describe all of this as simply “fitness” data. Sleep, mood, hydration, and maternal-wellness information can be sensitive wellness/health-related information, and we treat it with the same care as the rest of your account data — it is private to you, used only to power your own progress views, and never used for advertising.

All tracker logging is optional. You can use the app fully without ever logging a tracker entry.

6. Motherhood information

The Motherhood section offers pregnancy, postpartum, and nursing wellness content and guided movement sessions, organised by stage. It does not include any fertility, menstrual-cycle, or medical-record tracking, and it does not diagnose or treat any condition.

Completion and timer state for a Motherhood guided workout session stays on your device only — it is not transmitted to or stored on our servers.

7. Local-only information

Some information never leaves your device and is not collected by us at all:

• Your grocery list, built from Meals selections
• Motherhood guided-session completion and timer state
• In-progress countdown/timer state while you are inside a guided workout session

8. Service providers

Supabase provides authentication, database, and backend infrastructure for N&S WholeLife. Where a feature requires server-side storage (for example, tracker entries, onboarding preferences, or account/entitlement records), the relevant account or wellness data is processed by Supabase on our behalf to operate that feature. We do not use Supabase for advertising or cross-app tracking.

On the website only, we also use Paystack for payment processing (see “Payment information” below), Vercel Analytics and Speed Insights to measure page performance, and Sentryfor error reporting — see “Cookies and tracking” below for how each is limited. The native app does not include any analytics, advertising, or crash-reporting SDK.

9. How we use information

• To operate your account and verify sign-in
• To determine your access/entitlement status
• To provide app functionality you request (meals, workouts, Motherhood content)
• To show your own tracker entries and workout history back to you
• To maintain account and platform security
• To process account-deletion requests

We do not use your information for advertising or personalised-ad targeting — N&S WholeLife has no advertising SDK or ad-targeting feature of any kind.

10. Sharing and disclosure

We do not sell your personal data, and we do not share it with advertisers. Data is sent to the service providers named above strictly to operate N&S WholeLife(for example, Supabase to store and serve your account data, or Paystack to process a website purchase you initiate) — not for those providers' own independent purposes. We may also disclose information where required to comply with a legal obligation. N&S WholeLife has no public profile, feed, or social-sharing feature, so your wellness data is never made visible to other users.

11. Payment information

We do not store full card numbers or card security codes. Website payment processing — including your card details — is handled by Paystack, our third-party payment provider. The native app never displays a price, never links to a checkout flow, and never collects any payment-card or bank detail itself.

We do retain limited transaction-verification and audit records for each website payment: the provider's transaction reference, amount, status, event type, relevant dates, your account identifier, and masked or tokenised metadata where Paystack supplies it. These records are kept only as reasonably necessary for payment support, fraud prevention, dispute handling, accounting, tax, and legal or regulatory obligations, and are not retained for longer than necessary for those purposes.

12. Security

Data in transit between the app and our backend uses HTTPS/TLS. Server-side access to your data is scoped to your own account through Supabase's row-level security, and neither the web nor native app uses a privileged service-role key for ordinary reads or writes. No method of transmission or storage can be guaranteed 100% secure, and we cannot promise absolute security.

13. Retention

We do not commit to a fixed retention period here. Account and wellness data is retained for as long as reasonably needed to operate your account and the features described in this policy, and to meet legitimate accounting, tax, or legal obligations where applicable. Exact retention specifics beyond this are not yet finalised and remain a founder/legal decision — this policy will be updated once that decision is made, rather than stating a number now that is not yet true. Deletion requests are handled under the request-based process described below.

14. Deletion

You may request deletion of your account and associated data at any time — from inside the app under Settings → Account, or using our account deletion page. Submitting a request records that you want your account deleted — it does not delete anything immediately. Requests are normally completed within 30 calendar days — this may include identity verification and can pause where identity, fraud, legal or regulatory verification is genuinely outstanding — and our operator will confirm completion directly. Any payment already made is not automatically reversed, and this excludes limited transaction and audit records we are required or permitted by law to retain for the purposes described above.

Your rights

• You may request access to any personal data we hold about you.
• You may request correction of any inaccurate data.
• You may request deletion of your account as described above.
• You may withdraw any optional consent at any time.

To make a data or privacy request, contact us at privacy@nandswholelife.com.

15. Children

N&S WholeLife is intended for adult account holders. We have not yet set a specific minimum-age policy for this service — that exact wording remains a founder/legal confirmation, and we are not stating an age threshold here until it is finalised.

Cookies and tracking

N&S WholeLife uses only essential session cookies required for authentication and app functionality. We do not use third-party advertising trackers or cross-site tracking cookies.

We do use two privacy-conscious services on the website to keep it working properly. Vercel Analytics and Speed Insights measure which pages are visited and how quickly they load. They set no cookies, do not follow you across other websites, and are not given your name, email address or any account details.

We also use Sentry on the website to alert us when something breaks — for example a failed payment confirmation or a page that will not load. These diagnostic reports are configured to exclude personal information: no passwords, no password-reset links, no payment card details, no email addresses and no message contents are sent. Where a report needs to be linked to an account so we can fix that person's problem, only an internal account identifier is included. The native app does not include Vercel Analytics, Speed Insights, Sentry, or any other analytics/crash-reporting SDK.

16. Changes to this policy

We may update this policy from time to time. The current version always lives at this page. Material changes will be reflected here with an updated date.

Contact

For all privacy and data enquiries: privacy@nandswholelife.com

N&S WholeLife — A product of N & S Confidence Reaction Services