Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

Account Information: Name, email address, password, and the U.S. state you provide during registration and profile setup. You may also choose to provide a phone number, which is used to send SMS reminders if you opt in and as contact information available to your care team. Depending on the platform you use, you may also provide demographic information in your profile, such as gender assigned at birth, Hispanic/Latino ethnicity, and race.

Health and Medical Information: Medication names and dosages (e.g., Wegovy, Zepbound), symptoms, side effects, pain levels, sleep, exercise, nutrition, and other health-related information you share during conversations with Koa.

Voice and Conversation Data: Audio recordings of your voice conversations with Koa, any messages you type to Koa, the text transcripts generated from them, and session metadata (timestamps, topics, duration).

Meal Photos: Photos of meals or snacks you choose to capture or upload in the Koa mobile app, which are analyzed to give you nutrition feedback.

Device Health and Activity Data: If you choose to connect Apple Health (on iOS) or Health Connect (on Android), Koa imports daily activity summaries from your device, including steps, distance, active minutes, and workouts. Your activity then appears in your journey and helps personalize your coaching. Koa only reads this data; it never writes to Apple Health or Health Connect. Connecting is optional, and you can disconnect at any time from your Profile. When you disconnect, Koa also deletes the activity data it previously imported from Apple Health or Health Connect.

Device and Usage Information: Device type, operating system, app version, and general usage patterns. If you enable notifications on the mobile app, we also collect a push notification token, which is used to deliver reminders and occasional check-in messages from Koa.

2. How We Use Your Information

We use your information to: provide and personalize the Koa voice coaching experience; track your symptoms, medication adherence, and health trends over time; if you connect Apple Health or Health Connect, incorporate your daily activity data (steps, distance, active minutes, and workouts) to show your activity in your journey and personalize your coaching; analyze meal photos you share to give you nutrition feedback; generate session summaries and medical metrics for care continuity; send SMS reminders, push reminders, and occasional check-in notifications you have opted into; improve the quality and accuracy of our AI service; and communicate with you about your account and the service.

3. Artificial Intelligence and Data Processing

Koa uses artificial intelligence services to power voice conversations and analyze your health information. Your voice conversations are processed by voice AI providers such as ElevenLabs for real-time speech recognition, conversation, and speech synthesis. Conversation transcripts and any meal photos you share are analyzed by AI models hosted on Amazon Web Services (AWS) to extract medical metrics, key moments, health insights, and nutrition feedback. We may change or add AI service providers from time to time; any provider we use is bound by contractual obligations to protect your information and may use it only to provide services to Koa, and we will update this Privacy Policy to reflect any material change.

AI-generated analysis may contain errors and should not be relied upon as medical advice. Always consult your healthcare provider before making medical decisions.

The medical information Koa references about GLP-1 medications is drawn from reputable, publicly available clinical knowledge bases rather than generated on its own. You can review the full list of these sources on the Medical Sources page in Koa (under the Profile tab) or online at https://koa.nuveeai.co/sources.

4. Data Sharing and Third Parties

We do not sell your personal information, and we never use your health information — including activity data imported from Apple Health or Health Connect — for advertising, marketing, or use-based data mining. We share limited data with service providers solely as necessary to deliver the Koa service. These service providers include:

Eleven Labs Inc. (ElevenLabs) — for real-time voice conversation processing (speech recognition and speech synthesis). Amazon Web Services (AWS) — for secure data storage, AI model inference (including analyzing your conversations, meal photos, and any connected device activity to generate insights), and email/SMS delivery. Microsoft Presidio — for automated de-identification of personal health information in transcripts.

We may engage additional or replacement service providers from time to time. Any service provider we use is contractually required to safeguard your information and may use it only to provide services on our behalf. We will update this Privacy Policy to reflect any material change in our service providers.

Your healthcare providers or care team administrators may access your session summaries and health metrics through the Koa admin dashboard, if your care program includes clinical oversight.

We may disclose information if required by law, regulation, or legal process, or to protect the safety of our users.

5. Data Security

We implement industry-standard security measures to protect your data. Data is encrypted in transit using TLS and at rest using AES-256 encryption. Voice recordings and transcripts are stored in secure cloud infrastructure with access controls. Authentication tokens are stored in encrypted device storage.

6. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the service.

You may delete your account at any time through the Profile screen in the App. When you delete your account, we delete or de-identify your personal information, except for data we are required to retain under applicable law or that we keep only in de-identified or aggregated form. De-identified data is no longer associated with you, and we do not attempt to re-identify it. We immediately remove your name, phone number, and other directly identifying information, and we permanently purge remaining personal data from our active systems and backups within 90 days.

Device-derived activity data (imported from Apple Health or Health Connect) is always fully deleted when you disconnect the integration or delete your account, and is never retained in de-identified form.

7. Your Rights

You have the right to: access your personal data (via the data export feature in the App); correct inaccurate information (via your Profile settings); delete your account and personal data; opt out of SMS communications at any time; and withdraw consent for data processing by deleting your account.

8. Children's Privacy

Koa is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected data from a minor, we will take steps to delete it promptly.

9. Communications

SMS: If you consent during registration, we may send SMS messages for medication reminders, session follow-ups, and service updates. Standard message and data rates may apply. You may opt out at any time by updating your preferences or contacting us.

Push notifications: If you turn on notifications in the mobile app, we send the reminders you have set up, and Koa may also send you an occasional check-in notification when you have not had a conversation in a few days. These notifications never contain health details. One setting controls both, and you can turn them off at any time in the app's notification settings or in your device settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

NuVee, Inc. Email: help@nuveeai.com Website: nuveeai.com