Privacy policy.

Section 01Who we are.

Nagi is a mental health companion app made by Lumetrix Labs Limited, a company registered in England and Wales. The Nagi website is published at www.nagiandme.com. You can contact us at privacy@nagiandme.com.

Section 02What data we collect.

2.1 · Anonymous user account

When you first open Nagi we create a random ID (a UUID) for your account. It is held, encrypted, on our servers; until you create a Nagi code, though, it can only be reached from the phone or browser you started on. No name, no real or contact email address, no phone number. This ID is the only way we identify you.

Your Nagi code. You can create a 12-word Nagi code in the app at any time (in Settings; the web app also asks you to create one before you subscribe). Once you create a Nagi code, the app stores a one‑way, system‑generated identifier derived from it; only you hold the code itself. It is non‑deliverable, is never used to contact you, and cannot be reversed to identify you — it exists solely so you can open your anonymous account on another phone or browser. Until you create a code, your account can only be reached from the phone or browser you started on; creating a new code makes the old one stop working. Keep your Nagi code safe: it is the only way to restore your account, and we cannot recover it for you.

2.2 · Profile information you choose to share

During onboarding we ask optional questions — your age bracket, sex, whether you have a diagnosis of depression, anxiety, or both, and your region. All of these are optional. If you skip them, the app works normally. This information is stored against your anonymous UUID only.

2.3 · Mood logs

Your daily mood entries (Good, Low, Anxious, or Flat) and the date they were recorded.

2.4 · Wellbeing check-in scores

Your weekly S8 PROM responses and calculated scores.

2.5 · Medication diary

Medication names, doses, timing, and any side effect notes you add. We never share this with anyone.

2.6 · Conversation history

Your conversations with Nagi are stored so the app can provide continuity between sessions. To write Nagi's replies, your messages — together with your recent mood and check-in entries and any optional profile details you have given (age bracket, sex, diagnosis, region) — are processed by Anthropic (the company behind the Claude AI model) on our behalf. If you speak to Nagi, your voice message is transcribed by Groq, and Nagi's spoken replies are produced by Microsoft Azure Speech in its UK South, Australia East or US East region, chosen by where your request is handled (Asia-Pacific → Australia, North America → US, everywhere else → UK). Anthropic does not use your conversations to train their models. See Section 05 for more.

Your explicit consent is asked for first. Before your first message is sent, the app tells you that what you write is sent to Anthropic to generate Nagi's replies, and asks you to agree. We record the date you agreed. Without that agreement the app cannot send messages to Nagi, and you can withdraw it at any time by deleting your data in Settings.

2.7 · Subscription information

Subscriptions bought in the app are billed by Apple (App Store) or Google (Play Store); subscriptions bought on the web at app.nagiandme.app are processed by Stripe through our subscription partner RevenueCat, which manages all subscriptions. We receive only your anonymous subscription status — we do not receive your payment details, card number, or Apple/Google account details. For web purchases, receipts, renewal invoices and reminders are emailed by our payment processor to the address you give at checkout; that address is held by the processor (not by us) only while your subscription is active and is deleted when it ends.

2.8 · Technical data

Standard app diagnostics (crash reports, performance data) to keep the app running well. These contain no health information.

Device and installation identifiers. So that purchases can be validated and your subscription restored on a new device, our subscription provider (RevenueCat) and the app store receive a device or installation identifier together with your anonymous account ID. We do not use advertising identifiers, and none of your diary, mood, medication, or conversation data is ever sent to them.

Section 03What we do not collect.

Face ID and fingerprint authentication are processed entirely on your device by iOS or Android. Nagi never sees them.

Section 04How we use your data.

We use your data only for the following purposes:

Section 05Where your data is stored.

Your account and everything you record in the app — conversations, diary, mood, check-ins and medication diary — are stored, encrypted, on Supabase servers located in the EU (Ireland).

Some of the services that process data for us are based in the USA. Anthropic (USA) processes your messages, with recent mood and check-in entries and any optional profile details, to write Nagi's replies; it acts as a data processor on our behalf and does not use them to train its models. Groq (USA) transcribes spoken messages. Microsoft Azure Speech produces Nagi's spoken replies in its UK South, Australia East or US East region, chosen by where your request is handled (Asia-Pacific → Australia, North America → US, everywhere else → UK); processing in Australia and the US is under Microsoft's data protection terms, which include Standard Contractual Clauses. RevenueCat (USA) manages subscriptions and, for web purchases, Stripe (USA) processes payments and holds the email you give at checkout. These transfers are subject to Standard Contractual Clauses that provide adequate safeguards under UK GDPR.

Section 06Research opt-in.

If you choose to contribute to research in Settings, your anonymised data may be used to help improve mental health tools and outcomes. When data is used for research, your UUID is replaced with a separate research ID — there is no link table.

Opting in or out at any time has no effect on your access to the app.

Section 07How long we keep your data.

We keep your data for as long as your account is active. If you delete your account (Settings → Delete my account), all your data is permanently erased within 30 days. Backups are purged on the same schedule.

Section 08Your rights.

Under UK GDPR you have the right to:

• Access — download a copy of all your data (Settings → Export all my data).
• Erasure — delete your account and all associated data permanently.
• Rectification — correct inaccurate information by updating your profile.
• Restriction — ask us to stop processing your data while you raise a concern.
• Object — opt out of research data use at any time in Settings.
• Portability — your data export is provided in machine-readable JSON format.

To exercise any right not available directly in the app, contact us at privacy@nagiandme.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Section 09Third-party services.

We work with the following third-party services. We do not use advertising SDKs, social media trackers, or analytics platforms that share data with third parties.

Section 10Children.

Nagi is designed for people aged 18 and over. If you are under 18, please do not use the app. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, please contact us and we will delete it immediately.

Section 11Changes to this policy.

If we make material changes we will notify you in the app before the changes take effect. The "last updated" date at the top of this policy will always reflect the current version. You can always find the current policy at www.nagiandme.com/privacy.html.

Section 12Contact.