How Neia protects your data

Neia handles intimate and health information. That is why our rule is simple: collect only what the app needs to work, explain how data is used, and never sell health, cycle, fertility, sexual activity, symptom or note data.

This is an English translation of the Portuguese policy. If the two differ, the Portuguese version prevails.

Developer and data access

Neia is created and developed by an independent developer. The name shown as the developer on the App Store identifies who publishes the app; that label alone does not describe who can access each record. The app does not automatically email the developer a copy of cycle records. Synced data is stored in Supabase and, when you ask Neia AI a question, your prompt and the minimum context needed are sent to OpenAI.

Under the current setup, the developer is also the data controller and operator of the service, so they may have administrative access to its systems. Their legal identity and the service providers involved are described in this policy.

Data controller

The controller of your personal data is Edgar Alexandre Costa Pinheiro, in Portugal. For any privacy question or to exercise your rights, write to neia.app.suporte@proton.me.

At this stage, Neia does not have a designated data protection officer. The same contact handles requests about the processing of your data.

Neia is a women's health app that helps you log your cycle, period, symptoms, mood, energy, sleep, fertility, sexual activity, notes and conversations with Neia AI. Neia helps you organise personal information; it is not a medical device, it does not diagnose or treat illness, and it does not replace health professionals.

Data we may collect

Account and profile: name, email, date of birth or age range, goal, preferences, optional profile photo and session status.
Cycle and health data: period dates, cycle length, flow, spotting, symptoms, mood, energy, sleep, pain, cervical mucus, basal temperature, fertility, sexual activity and notes.
Predictions and insights: cycle phase, predicted period, estimated ovulation, fertile window, patterns, data quality score and generated explanations.
Neia AI: messages you send, the assistant's replies, the recent context needed to answer, and safety flags when a message may indicate risk.
Use of the service: free plan, monthly count of AI messages and rate limits. The app does not currently offer purchases or subscriptions.
Technical data: app version, security events, diagnostics, errors, performance and non-sensitive product events.

How we use data

To calculate your cycle phase, period and ovulation predictions and daily context.
To keep your history, show patterns, explain the evidence and create useful summaries.
To answer with context in Neia AI, always within safety limits and without promising a diagnosis.
To manage your account, sign-in, usage limits, data export and deletion.
To prevent abuse, protect the app, fix errors and improve stability.
To understand whether the introduction, the first entry and the essential features work, using only technical events without symptoms, notes, cycle dates or AI text.
To meet legal, tax, security and app store obligations where applicable.

Legal basis and consent

We process the data needed to create and keep your account, provide the service and answer your requests because it is necessary to provide the service. We process cycle, symptom, fertility and other health data only after obtaining your explicit consent. You can withdraw it at any time in the app; if you do, we delete your active health entries, block predictions and AI, and keep only the minimum needed for the account, security and legal obligations.

We also process minimal technical data when needed to protect the service, prevent fraud and abuse, fix errors or meet legal obligations. Marketing emails or promotional notifications are only sent with a separate choice and can be turned off at any time; they are never based on health data.

AI and health data

Neia AI's answers are educational and based on the context you provide. Neia does not confirm illness, guarantee fertility, replace contraception, predict pregnancy with certainty or replace a medical appointment. For urgent signs, the app recommends seeking medical help or local emergency services.

The mobile app does not expose private AI keys. AI calls go through Neia's own backend, with authentication, usage limits and the minimum context needed.

Neia uses the OpenAI API with response storage turned off (store: false). Data sent through the API is not used to train models by default. Under the provider's standard controls, the question, the answer and technical data may still be kept for up to 30 days for abuse detection and security. Neia does not claim Zero Data Retention.

The chat with Neia AI is optional. Whenever you use the chat, we send OpenAI your message, the recent messages in the conversation and the health context needed for the answer (for example your cycle, symptoms and notes). If you don't use the chat, we send nothing to OpenAI; your cycle, entries and predictions keep working.

If you don't want your data sent to OpenAI, don't use the chat. If you have already used it and want us to delete your conversations with Neia AI, write to neia.app.suporte@proton.me from your account's email: we delete the conversations and, if you wish, the account. We answer without undue delay and within one month at most. You can also withdraw consent for health data in Profile, Settings and Data, which blocks the AI. Deleting the conversations does not delete what OpenAI may still keep for up to 30 days, as described above.

Where your data goes

On your phone: your profile photo and a protected local copy of the experience. The photo is not sent to your account in the current version.
At Supabase: account, profile, entries, conversations and usage count, for sign-in, sync, limits, export and deletion.
At OpenAI: the question and the minimum context needed to generate a Neia AI answer, subject to the retention limits described above.
At Apple and Google: distribution of the app through the App Store, TestFlight and Google Play. The app does not currently offer payments or subscriptions.

Sharing with service providers

We use Supabase for hosting, authentication and the database, OpenAI to generate Neia AI answers, Apple and Google to distribute the app, and Resend for transactional email. These providers may only process data to provide Neia's functionality, security, support or legal obligations.

International transfers

The main database is set up in Ireland. Some providers may process data outside the European Economic Area. When that happens, Neia only relies on a transfer permitted by applicable law and on appropriate safeguards, such as an adequacy decision or standard contractual clauses. You can ask for more information about the providers through the privacy contact.

What we don't do

We don't sell health, cycle, fertility, sexual activity, symptom, note or message data.
We don't use health data for behavioural advertising.
We don't show third-party ads.
We don't share data with data brokers.
We don't make medical diagnoses or automated clinical decisions.

Your rights

You can ask for access, export, correction, portability, restriction, objection or deletion of your data, as applicable. The app includes flows to export data and to request account deletion. Deletion may require strong confirmation because it is a destructive action.

You can withdraw consent for health data in Profile, under Settings and Data. This deletes the health history and health profile kept by Neia, blocks predictions and AI, and keeps the account with only the minimum data needed for sign-in and the subscription. To use these features again, you need to review and accept the consent choices again.

We answer rights requests without undue delay and, as a rule, within one month. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or with the data protection authority where you live.

Retention and security

Your account and profile are kept while the account is active. Health entries, predictions, insights and AI conversations are kept while your health consent is active, and are deleted from the active system when you withdraw that consent or delete your account. An export file is available for 7 days and is then deleted from Neia's storage.

While the account exists, we keep a minimal history of consents, to show what was accepted or withdrawn. When you delete your account, that history is deleted with it. We keep technical data for as long as needed for security and stability, and support requests only for as long as needed to answer them and meet applicable obligations. Backups follow the provider's technical cycle and are not used to reactivate an account or restore deleted data for normal use.

We use encryption in transit, authentication, per-user access rules, secrets kept outside the public app, and server-controlled export and deletion processes.

Minors

Neia is available from age 13. Between ages 13 and 15, the app asks for a parent or guardian's email and keeps health data, predictions and Neia AI locked until it receives a confirmation. The request to the parent or guardian does not include symptoms, cycle, conversations or other health content. Rules for minors may vary by country; if the required confirmation does not exist, Neia may limit the experience or delete the account.

Changes to this policy

We may update this policy when the app, providers, legal obligations or features change. Relevant changes should be communicated clearly in the app or by email.

Contact

Privacy: neia.app.suporte@proton.me

Support: neia.app.suporte@proton.me

Last updated: 17 October 2026.