Privacy Policy
Last updated: October 2026
Who we are
Nova Well is operated by trista cummings ("we", "us"), who is the data controller for the personal data described in this policy. That means we decide how and why your data is processed, and we're responsible for looking after it.
What we collect
- Account data — your email address and optional display name, used to create and secure your account.
- Wellness entries — your sobriety start date and goal, check-ins, craving logs, journal entries, reasons, goals, and milestones, used to provide the service to you.
- Usage and device data — basic technical information such as IP address, browser and device type, used for security, fraud prevention, and improving the product.
- Support messages — if you contact us, we keep the conversation so we can help you.
Payment details are collected and processed by our payment provider, Paddle, as Merchant of Record. We never see or store your card number.
Legal basis for processing
We process your data on the following bases: to perform our contract with you (providing the app and your account), based on our legitimate interests (keeping the service secure and improving it), with your consent (where required, for example optional features), and to comply with legal obligations (such as tax and accounting records handled via Paddle).
Who we share data with
- Paddle — our Merchant of Record, which receives the data needed to process your orders, manage subscriptions, handle tax compliance, and issue invoices.
- Service providers — hosting and infrastructure providers that store and serve the app under strict confidentiality.
- Professional advisers and authorities — where required by law.
We never sell your data, show ads, or share your entries with third parties for marketing.
How long we keep data
Your account and wellness entries are kept for as long as your account is active. If you delete your account, your entries are permanently removed. Support conversations are kept for up to 24 months. Order and transaction records are retained by Paddle as required for tax and accounting purposes. When data is no longer needed, it is deleted or anonymised.
How it's protected
Your entries are tied to your account and access-controlled so no other user can read them. We use appropriate technical and organisational measures, including encryption in transit and strict access controls.
Your rights
You can export all your data or permanently delete your account from Settings at any time. Depending on where you live, you may also have the right to access, correct, restrict, or object to processing of your data, to data portability, to withdraw consent, and to complain to your local data protection authority. To exercise any of these rights, contact us and we will respond within one month.
International transfers
Our service providers may process data outside your country. Where data leaves the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
Cookies
We use only essential cookies and storage needed to keep you signed in and run the app. We do not use advertising or marketing cookies.
Not medical care
Nova Well is a wellness tool, not a healthcare provider, and is not covered by health privacy laws such as HIPAA.