Privacy Statement

1. Information We Collect

We collect information in the following ways:

• Information you provide directly — such as your name, email address, and any personal or health-related information you choose to enter into the Services (for example, care and disability information entered into Care Circle).
• Account information — credentials and preferences you set when creating or managing your account.
• Usage information — how you interact with the Services, including pages visited and features used, to help us improve reliability and experience.

2. Sensitive Data

Some of our Services, particularly Care Circle, are designed to handle sensitive personal information including disability and health data. We treat this data with the highest level of care. It is encrypted at rest and in transit, never used for advertising, and never sold or shared with third parties without your explicit consent.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services
• Authenticate your identity and keep your account secure
• Respond to your support requests and enquiries
• Send you service-related notices (not marketing, unless you opt in)
• Comply with legal obligations

4. Sharing Your Information

We do not sell your personal data. We only share it in the following circumstances:

• With your consent — for example, when you use Care Circle to share your information with a healthcare provider. You control who receives your data and can revoke access at any time.
• Service providers — trusted third parties who assist us in operating the Services (e.g. cloud hosting), bound by confidentiality obligations.
• Legal requirements — when required by law or to protect the rights and safety of our users.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Services. You may request deletion of your account and associated data at any time by contacting us. Certain information may be retained for a period after deletion where required by law.

6. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Receive a portable copy of your data

To exercise any of these rights, contact us athello@nomei.life.

7. Security and Assumption of Risk

We take reasonable steps to protect your data, including encryption in transit (TLS) and at rest. However, no system is completely secure. By using the Services, you acknowledge and accept that data transmission, storage, and access carries inherent risk, and you assume full responsibility for that risk — including the risk of unauthorised data access.

In the event of a data breach, unauthorised access to, or unauthorised disclosure of your information, Nomei shall not be liable for any resulting loss, damage, or harm. To the maximum extent permitted by Australian law, you waive any and all claims against Nomei arising from the exposure, loss, unauthorised access to, or unauthorised use of your data. Your use of the Services is entirely at your own risk.

8. Cookies

We use only essential cookies necessary to operate the Services (e.g. session authentication). We do not use tracking or advertising cookies.

9. Children's Privacy

Our Services are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Statement

We may update this Privacy Statement from time to time. We will notify you of material changes by posting the updated statement on this page and updating the "Last updated" date. Continued use of the Services after changes constitutes acceptance of the revised statement.

11. Contact

If you have any questions or concerns about this Privacy Statement or how we handle your data, please contact us athello@nomei.life.