NERVELI Privacy Policy

Last Updated: August 6, 2026

PRIVACY POLICY

Last Updated: August 6, 2026

WELCOME

Nerveli, Inc. (“Nerveli,” “we,” “us,” or “our”) provides a mobile application and related digital services designed to help individuals understand and manage chronic pain through pain and symptom tracking, personalized education, cognitive behavioral therapy-informed tools, artificial intelligence-assisted coaching, assessments, reports, and related support.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use: the website located at https://getnerveli.com; the Nerveli mobile application; pain-tracking, assessment, educational, coaching, reporting, and related app features; services offered through healthcare providers, employers, health plans, benefit programs, research partners, and other organizations; contact, waitlist, demonstration, account-registration, support, and subscription pages; notifications, customer support, surveys, research activities, and other communications; and any other product, platform, feature, or service that links to this Privacy Policy (collectively, the “Services”).

This Privacy Policy applies to personal information that Nerveli processes for its own purposes. It also explains Nerveli’s role when we process personal information on behalf of a healthcare provider, health plan, employer-sponsored program, or other organizational customer.

This Privacy Policy is intended for Services offered in the United States. It does not apply to third-party websites, applications, or services that process information under their own privacy notices.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

2. INFORMATION WE COLLECT

We collect personal information that you provide to us, information generated through your use of the Services, information collected automatically, and information received from healthcare providers, health plans, employers, organizational sponsors, service providers, research partners, and other third parties.

2.1 Contact, Account, and Profile Information

When you contact us, join a waitlist, request information or a demonstration, create or use an account, participate in a sponsored program, or otherwise interact with us, we may collect contact, account, profile, and administrative information, including your name, email address, telephone number, age or birth year, login credentials, account and subscription status, communication preferences, organization or professional affiliation, eligibility or enrollment information, access or referral codes, and the contents of communications you send to us. We may also collect information used to authenticate accounts and prevent spam, fraud, bots, or misuse.

2.2 Health, Wellness, and AI-Coach Information

When you use the Services, you may provide or generate information concerning your health, wellness, symptoms, pain experience, and use of Nerveli’s AI-assisted features. This may include information about pain and symptoms; body location and perceived triggers; assessment, questionnaire, body-map, survey, or check-in responses; stress, mood, sleep, fatigue, activity, functioning, treatments, medications, therapies, and healthcare utilization; goals, progress, program participation, notes, journals, and feedback; and reports, scores, trends, insights, or other information generated through the Services.

When you interact with Nerveli’s AI-assisted coach or other interactive features, we may also process your prompts, messages, questions, responses, health-related information contained in those interactions, AI-generated responses and summaries, feedback concerning AI-generated content, and related safety, quality, and troubleshooting information. If an enabled feature allows you to submit photographs, videos, audio, documents, or other content, we may process that content and associated metadata as necessary to provide the feature.

2.3 Subscription and Transaction Information

Nerveli may offer paid subscriptions, trials, sponsored access, or other paid features. Payments may be processed through the Apple App Store, Google Play, Stripe, or another third-party payment provider. The applicable payment provider processes payment credentials in accordance with its own terms and privacy notice. Nerveli may receive transaction, subscription, payment-status, or other limited billing information necessary to administer the transaction, but generally does not receive complete payment-card credentials processed by the provider.

2.4 Information from Organizations and Other Sources

We may receive personal information from healthcare providers, health plans, employers, universities, benefit programs, research or program partners, and other organizations through which you receive or participate in the Services. Depending on the relationship, this information may include contact information, eligibility or enrollment information, organizational affiliation, referral or access information, limited demographic or administrative information, health information where permitted by applicable law and the applicable agreement, and other information necessary to provide, administer, or evaluate the applicable program.

We may also receive information from app stores, payment and subscription providers, authentication and communications providers, hosting, development, analytics, security, and other service providers, referral sources, publicly available sources, and other parties authorized by you or permitted by law.

2.5 Research, Surveys, and Feedback

If you participate in research, a survey, feasibility study, program evaluation, interview, or similar activity, we may collect responses, health or behavioral information, utilization and outcome information, demographic information, testimonials, comments, feedback, and other information described in the applicable study materials or consent form. Where required, we will provide a separate consent form or supplemental notice, which will control with respect to the applicable activity to the extent it conflicts with this Privacy Policy.

2.6 Automatically Collected Information

When you access or use the Services, we and our service providers may automatically collect technical and usage information, including IP address; device, browser, operating system, app version, and language information; device, cookie, SDK, session, and similar identifiers; approximate location derived from IP address; referring URLs; pages, screens, features, and content accessed; app interactions, session duration, and usage timestamps; notification and subscription status; and diagnostic, crash, performance, security, and audit information.

3. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

  • provide, operate, maintain, secure, and improve the Services;
  • create, authenticate, and administer accounts;
  • determine eligibility for sponsored or organization-provided access;
  • provide pain tracking, body maps, assessments, questionnaires, and check-ins;
  • analyze pain, symptoms, stress, sleep, mood, function, and other user-provided information;
  • identify trends and generate personalized insights, education, recommendations, and activities;
  • operate the AI-assisted coach and other interactive features;
  • create reports, summaries, progress information, and visualizations;
  • provide cognitive behavioral therapy-informed tools and educational content;
  • administer subscriptions, trials, purchases, renewals, and cancellations;
  • send requested reminders, notifications, program communications, and security alerts;
  • respond to customer-support requests and troubleshoot technical issues;
  • communicate with healthcare providers, health plans, employers, or other organizational sponsors as described in this Privacy Policy and applicable agreements;
  • administer and evaluate provider, employer, health-plan, benefit, and research programs;
  • conduct research, evaluate outcomes, and prepare aggregated or deidentified statistics;
  • understand how users interact with the Services and improve functionality, accessibility, performance, and user experience;
  • develop and evaluate new products, features, content, and services;
  • prevent fraud, misuse, unauthorized access, and security incidents;
  • comply with legal, regulatory, contractual, tax, accounting, and reporting obligations;
  • enforce our agreements and protect our legal rights;
  • establish, exercise, or defend legal claims; and
  • carry out another purpose disclosed when information is collected or with your consent.

We may create, use, disclose, license, or otherwise make available aggregated or deidentified information for analytics, research, benchmarking, product development, business development, marketing, commercial insights, program evaluation, public-health or safety initiatives, and other lawful purposes. This may include providing aggregated or deidentified information or insights to healthcare organizations, life-sciences and pharmaceutical companies, researchers, business partners, or other third parties. We maintain information represented as deidentified in deidentified form and do not attempt to reidentify it except as permitted by applicable law.

4. HIPAA AND ORGANIZATIONAL PROGRAMS

4.1 When HIPAA Applies

Nerveli may provide certain Services on behalf of healthcare providers, health plans, or other organizations regulated by the Health Insurance Portability and Accountability Act of 1996 and its implementing regulations (“HIPAA”). When Nerveli receives or maintains protected health information on behalf of a HIPAA-covered entity under a business associate agreement, Nerveli processes that information in accordance with HIPAA, the applicable business associate agreement, and the covered entity’s instructions. The covered entity’s Notice of Privacy Practices may also apply. Not all health information collected through the Services is protected health information under HIPAA. Health information that you provide directly to Nerveli through a consumer service may be protected by this Privacy Policy and other applicable privacy laws but may not be subject to HIPAA unless Nerveli is processing the information on behalf of a HIPAA-covered entity. If an applicable business associate agreement or customer agreement conflicts with this Privacy Policy regarding Customer Data, the agreement will control to the extent of the conflict.

4.2 Healthcare Providers

If you receive the Services through or choose to connect with a healthcare provider, Nerveli may disclose reports, summaries, progress information, pain trends, assessment information, and other health information to the provider:

  • at your direction or with your authorization;
  • as part of a provider-sponsored program;
  • as permitted under HIPAA and an applicable business associate agreement; or
  • as otherwise permitted or required by law.

Your provider controls how it uses information it receives for treatment, payment, healthcare operations, or other purposes and is responsible for its own privacy practices.

4.3 Health Plans and Payors

If a health plan or payor sponsors or administers your access, Nerveli may disclose eligibility, enrollment, engagement, outcomes, utilization, reporting, or other information as permitted by applicable law, the applicable agreement, and any required authorization. The information disclosed may vary depending on whether Nerveli acts as a business associate, service provider, independent business, or other regulated party.

4.4 Employers and Other Program Sponsors

If an employer or another non-clinical organization sponsors access to the Services, Nerveli generally provides that organization with:

  • aggregate or deidentified participation and outcome information;
  • program-level engagement and utilization statistics; and
  • limited administrative information necessary to determine eligibility or administer access.

Nerveli does not provide an employer, manager, or human-resources representative with your identifiable pain, symptom, AI-coaching, assessment, or other health information unless you expressly direct or authorize the disclosure, the disclosure is required by law, or another legally permitted basis applies.

5. ARTIFICIAL INTELLIGENCE AND AUTOMATED FEATURES

Nerveli uses artificial intelligence, algorithms, assessments, and other automated tools to analyze information you provide and generate personalized education, coaching, insights, recommendations, summaries, and other content. These tools may process health information, AI-coach messages, assessment responses, app activity, preferences, and other information described in this Privacy Policy. AI-generated content may be retained to provide conversation history, personalize the Services, maintain safety and security, respond to support requests, assess quality, and improve the Services.

Nerveli may use information generated through or relating to use of the Services to evaluate, test, develop, and improve its artificial-intelligence models, algorithms, features, and related Services, subject to applicable law and any contractual restrictions applicable to the information. Where information is used for broader analytics, research, model development, benchmarking, marketing, or other commercial purposes outside the provision of Services to an identifiable user, Nerveli may use aggregated or deidentified information for those purposes.

Nerveli may use third-party AI, voice, analytics, hosting, or technology providers to support these features. Those providers may process information on Nerveli’s behalf subject to contractual and legal restrictions. Nerveli does not use personal information to make decisions based solely on automated processing that produce legal effects concerning an individual or similarly significantly affect an individual.

6. COOKIES, SDKs, AND SIMILAR TECHNOLOGIES

6.1 How We Use These Technologies

We and our service providers may use cookies, pixels, software development kits, local storage, authentication tokens, web beacons, scripts, and similar technologies to:

  • operate the website and mobile application;
  • authenticate users and maintain sessions;
  • remember preferences;
  • process forms and prevent spam or misuse;
  • understand use of the Services;
  • diagnose errors and improve performance;
  • measure communications and engagement;
  • administer subscriptions;
  • maintain security; and
  • provide requested functionality.

6.2 Categories

  • Strictly Necessary: These technologies are required to operate and secure the Services, authenticate users, maintain sessions, process forms, administer purchases, and prevent fraud or misuse.
  • Functional: These technologies remember preferences and support requested or customized functionality.
  • Analytics and Performance: These technologies help us understand how visitors and users interact with the Services, identify errors, evaluate performance, and improve the Services.
  • Communications: These technologies may help us determine whether messages are delivered, opened, or selected and evaluate the effectiveness of communications.
  • Marketing: We may use cookies and similar technologies on our public-facing Services to measure marketing, advertising, and outreach, understand campaign effectiveness, and support other lawful marketing activities. We do not use PHI or identifiable consumer health data for targeted advertising. We may use aggregated or deidentified information for marketing, advertising, analytics, business development, and other lawful commercial purposes.

6.3 Your Choices

Where required by applicable law, we obtain consent before using non-essential cookies or similar technologies. You may manage available choices through our cookie preference tool, browser settings, device settings, or app privacy settings. Blocking or deleting certain technologies may affect functionality, including account login, subscriptions, saved preferences, and app performance.

Some browsers offer a “Do Not Track” signal. Because there is no uniform industry standard governing these signals, we do not currently respond to Do Not Track signals. Where required by applicable law, we recognize legally valid opt-out preference signals, such as Global Privacy Control, for the activities to which they apply.

7. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information as described below.

7.1 Service Providers

We may disclose personal information to vendors that provide:

  • cloud hosting, database, and storage services;
  • application development and technical support;
  • authentication and identity services;
  • AI, machine-learning, voice, or content-processing services;
  • analytics, performance, and crash-reporting services;
  • email, push-notification, and communications services;
  • customer support;
  • payment, subscription, and app-store services;
  • cybersecurity, fraud-prevention, and auditing services;
  • research and program-evaluation support; and
  • legal, accounting, insurance, and other professional services.

These providers may process personal information only as necessary to provide services to Nerveli or as otherwise permitted by contract and applicable law.

7.2 Healthcare Providers and Health Plans

We may disclose information to healthcare providers, health plans, care-management organizations, and other healthcare entities as described in Section 4, at your direction, pursuant to an applicable program, or as permitted by HIPAA and applicable law.

7.3 Employers and Organizational Sponsors

We may disclose aggregate, deidentified, eligibility, enrollment, and limited program-administration information to employers and other organizational sponsors as described in Section 4.

7.4 Apple, Google, and Payment Providers

We may exchange subscription, purchase, app, device, and account information with Apple, Google, and other payment or subscription providers to distribute the application, administer trials and subscriptions, validate purchases, process cancellations and refunds, prevent fraud, and comply with app-store requirements.

7.5 Research and Program Partners

We may disclose information to research institutions, investigators, advocacy organizations, clinical collaborators, and program partners:

  • with your consent;
  • under an applicable research authorization or consent form;
  • in aggregated or deidentified form;
  • where permitted by HIPAA or another applicable law; or
  • as otherwise disclosed when you participate.

7.6 Aggregated and Deidentified Information

  • We may disclose, license, or otherwise make available aggregated or deidentified information and related insights to healthcare organizations, researchers, life-sciences and pharmaceutical companies, business partners, program sponsors, and other third parties for research, analytics, benchmarking, product development, business development, marketing, commercial insights, program evaluation, and other lawful purposes. Such information will not be disclosed as PHI or in a form that Nerveli reasonably believes identifies an individual, except as otherwise permitted by applicable law.

7.7 At Your Direction

We may disclose information when you direct or authorize us to do so, including when you:

  • share a report with a provider;
  • invite another person to view information;
  • participate in a sponsored program;
  • connect a third-party service;
  • share an achievement or other content; or
  • request that we transmit information to another person or organization.

7.8 Legal and Safety Matters

We may disclose information when we reasonably believe disclosure is necessary to:

  • comply with applicable law, legal process, or governmental request;
  • protect the rights, safety, security, or property of Nerveli, our users, or others;
  • respond to a medical or safety emergency where permitted by law;
  • detect, investigate, or prevent fraud, misuse, or security incidents;
  • enforce our agreements and policies; or
  • establish, exercise, or defend legal claims.

7.9 Business Transactions

We may disclose or transfer personal information in connection with an actual or proposed merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar transaction, subject to applicable legal restrictions.

7.10 With Consent

We may disclose personal information for another purpose with your consent or as otherwise disclosed when the information is collected.

8. CONSUMER HEALTH DATA PRIVACY NOTICE

This Section applies to “consumer health data” subject to applicable U.S. consumer-health privacy laws and is intended to serve as Nerveli’s Consumer Health Data Privacy Notice. It does not apply to information exempt from those laws, including protected health information processed under HIPAA where an applicable exemption applies.

8.1 Consumer Health Data We Collect

Consumer health data may include:

  • pain, symptoms, body locations, triggers, treatments, and health history;
  • assessment, questionnaire, sensory-test, and body-map responses;
  • stress, mood, sleep, fatigue, activity, function, and emotional-wellness information;
  • healthcare utilization and provider-related information;
  • medication, therapy, and self-management information;
  • AI-coach messages and health-related user content;
  • photographs, videos, audio, or other content that reveals health information;
  • data concerning participation in a provider, health-plan, employer, research, or benefit program;
  • information that identifies an individual as seeking or using a chronic-pain or health-related service; and
  • inferences derived from any of the foregoing information.

8.2 Sources

We may collect consumer health data:

  • directly from you;
  • from your use of the Services;
  • from healthcare providers or health plans;
  • from organizational customers or program sponsors;
  • from research or program partners;
  • from devices, applications, or integrations you authorize; and
  • from service providers acting on our behalf.

8.3 Purposes

We collect and use consumer health data to:

  • provide the Services you request;
  • track and analyze pain and related experiences;
  • personalize education, coaching, assessments, reports, and recommendations;
  • provide AI-assisted features;
  • support provider, health-plan, benefit, and research programs;
  • maintain security and prevent misuse;
  • conduct research or program evaluation with appropriate authorization;
  • comply with legal obligations; and
  • carry out another purpose with your consent.

8.4 Disclosure of Consumer Health Data

We may disclose consumer health data to:

  • service providers processing information on our behalf;
  • healthcare providers and health plans;
  • research or program partners where authorized;
  • persons and entities you direct us to share with;
  • legal or governmental recipients where required or permitted by law; and
  • parties involved in a business transaction, subject to applicable law.

Nerveli does not sell consumer health data and will not sell consumer health data without obtaining any authorization or consent required by applicable law. This restriction does not prohibit Nerveli from using or disclosing information that has been aggregated or deidentified in accordance with applicable law and is no longer treated as consumer health data under applicable law.

8.5 Consumer Health Data Rights

Subject to applicable law, you may have the right to:

  • confirm whether we collect, use, or disclose your consumer health data;
  • access consumer health data;
  • obtain a list of third parties and affiliates with which it has been shared;
  • withdraw consent for certain collection or sharing;
  • request deletion of consumer health data;
  • appeal a denial of a request; and
  • exercise other rights provided by applicable law.

You may submit a request using the contact information in Section 17. We may verify your identity before responding. If we deny a request, you may appeal by contacting us and stating that you are appealing a prior consumer-health-data request.

9. SALE, SHARING, TARGETED ADVERTISING, AND DEIDENTIFIED DATA

Nerveli does not sell personal information in exchange for money and does not sell consumer health data except pursuant to any authorization or consent required by applicable law. Nerveli does not use PHI or identifiable consumer health data for targeted advertising.

Nerveli may, however, create, use, disclose, license, or otherwise make available aggregated or deidentified information for research, analytics, benchmarking, product development, business development, marketing, commercial insights, program evaluation, and other lawful purposes, including to healthcare organizations, researchers, life sciences and pharmaceutical companies, and other business partners. Such activities are not intended to involve PHI or information that reasonably identifies an individual.

Where applicable privacy law treats the use of cookies, advertising technologies, or other disclosures of personal information as a “sale,” “sharing,” or targeted advertising, Nerveli will provide any notices, consent mechanisms, or opt-out rights required by applicable law.

Nerveli does not knowingly sell or share the personal information of individuals under sixteen years of age.

10. DATA RETENTION

We retain personal information only for as long as reasonably necessary and proportionate to fulfill the purposes described in this Privacy Policy, including to provide the Services, maintain accounts and subscriptions, administer organizational programs, comply with legal and contractual obligations, maintain security, conduct authorized research, resolve disputes, and protect legal rights.

Retention periods depend on the nature of the information and why it was collected:

  • account and profile information may be retained while your account remains active and for a reasonable period thereafter;
  • health and wellness information may be retained while necessary to provide the Services and as otherwise required by an applicable customer agreement, business associate agreement, research consent, or law;
  • AI-coach messages, interactions, and outputs may be retained for as long as reasonably necessary to provide conversation history and personalization, maintain safety and security, evaluate quality, improve the Services, resolve support issues, and satisfy applicable legal or contractual requirements;
  • subscription and transaction records may be retained for accounting, tax, app-store, fraud-prevention, and legal purposes;
  • eligibility and sponsored-program records may be retained as necessary to administer and document the program;
  • HIPAA-regulated information may be retained as required by the applicable covered entity, business associate agreement, and law;
  • research information may be retained as described in the applicable consent or authorization;
  • communication-consent and opt-out records may be retained as necessary to honor preferences and demonstrate compliance;
  • support records may be retained to resolve requests and maintain appropriate business records;
  • security, audit, authentication, and technical logs may be retained for a limited period appropriate to their purpose; and
  • aggregated and deidentified information may be retained for longer periods because it does not identify an individual.

When personal information is no longer reasonably necessary, we may delete, deidentify, aggregate, or otherwise dispose of it in accordance with applicable law and our retention practices. Information stored in backups may remain for a limited period until deleted or overwritten in the ordinary course.

11. SECURITY

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, loss, or disclosure. Where Nerveli acts as a HIPAA business associate, we maintain safeguards designed to comply with the applicable requirements of the HIPAA Security Rule.

Our safeguards may include:

  • encryption in transit and protections for stored information;
  • authentication and access controls;
  • role-based and least-privilege access;
  • logging and monitoring;
  • vulnerability and patch management;
  • backup and recovery procedures;
  • vendor review and contractual protections;
  • workforce privacy and security training;
  • risk assessments;
  • incident-response procedures; and
  • other safeguards appropriate to the sensitivity of the information.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for protecting your credentials, securing your device, and promptly notifying us of suspected unauthorized account access. If a security incident triggers notification obligations under applicable law, we will provide legally required notices to affected individuals, regulators, customers, or other required parties.

12. YOUR RIGHTS AND CHOICES

Depending on your state of residence and applicable law, you may have rights concerning your personal information.

12.1 Account Information

You may review or update certain account and profile information through the Services or by contacting us. If your account is administered or sponsored by another organization, you may need to contact that organization for certain requests concerning information it controls.

12.2 Your Privacy Rights

Subject to applicable law, you may exercise the following rights regarding your personal information:

  • Right to Know/Access: Confirm whether we are processing your personal information and request access to the specific pieces of data collected.
  • Right to Correct: Request the correction of inaccurate or outdated personal information.
  • Right to Delete: Request the deletion of personal information provided by or obtained about you, subject to certain legal exceptions.
  • Right to Data Portability: Obtain a copy of your personal information in a readily usable format to allow transfer to another controller.

All requests are subject to proper identity verification and statutory exceptions. To exercise any of these rights, please submit a request by contacting us at privacy@nerveli.com.

12.3 Account Deletion

You may request deletion of your Nerveli account through any account-deletion feature available in the app or by contacting us using the information in Section 17. Deleting the app from your device does not delete your account or cancel an active subscription. Deleting an account may not require deletion of information that Nerveli or an organizational customer must retain for legal, regulatory, security, research, healthcare, contractual, or record-integrity purposes.

12.4 Subscriptions

You may manage or cancel an Apple App Store or Google Play subscription through the applicable app-store account. Deleting your Nerveli account may not automatically cancel an app-store subscription.

12.5 Marketing and Notifications

You may opt out of marketing emails through the unsubscribe instructions in the communication or by contacting us. You may manage push notifications through the app or device settings. We may continue sending service, account, subscription, security, legal, healthcare-program, or other non-marketing communications.

12.6 Cookie and Device Choices

You may manage available cookie choices through our preference tool and may manage app permissions, notifications, camera access, photo access, or similar permissions through your device settings.

12.7 Non-Discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right.

13. U.S. STATE PRIVACY DISCLOSURES

This Section provides additional information for residents of California and other states with applicable comprehensive privacy laws. It applies only to the extent Nerveli is subject to the relevant law and the information is not exempt.

13.1 Categories of Personal Information

The table below describes categories of personal information Nerveli may have collected during the twelve months preceding the “Last Updated” date. The information actually collected depends on your use of the Services and relationship with Nerveli.

CategoryExamplesPurposesRetention Criteria
IdentifiersName, email address, telephone number, username, account ID, IP address, device identifiers, cookie or SDK identifiersAccounts, authentication, support, communications, security, subscriptions, and Service operationFor the account or applicable relationship and for a reasonable period thereafter based on legal, security, contractual, and recordkeeping needs
Personal information described in California Civil Code § 1798.80(e)Contact information, account information, communications, subscription information, and user-submitted contentAccount administration, support, subscriptions, organizational programs, and communicationsFor the applicable relationship and thereafter as reasonably necessary for legal, support, accounting, and recordkeeping purposes
Commercial informationSubscription plan, purchase history, trial status, renewal, cancellation, refund, and sponsored-access informationSubscription administration, billing support, fraud prevention, and app-store complianceFor the subscription period and thereafter as required for accounting, tax, fraud-prevention, dispute-resolution, and legal purposes
Internet or other electronic network activityWebsite and app activity, screens and features used, session information, reports viewed, interactions, technical logs, and notification activityService functionality, security, analytics, troubleshooting, and improvementFor a limited period appropriate to the applicable security, analytics, or operational purpose
Geolocation dataApproximate location derived from IP addressSecurity, fraud prevention, analytics, and regional functionalityFor a limited period appropriate to the applicable security or analytics purpose
Sensory informationPhotographs, videos, audio, or voice data if submitted or collected through an enabled featureProviding requested features, assessments, support, and AI-assisted functionalityFor as long as reasonably necessary to provide the feature and fulfill legal, security, or contractual obligations
Professional or employment-related informationEmployer, provider, health-plan, organization, practice, title, role, company size, and program affiliationBusiness inquiries, organizational programs, eligibility, relationship management, and reportingFor the applicable business or program relationship and for a reasonable period thereafter
InferencesPain patterns, symptom trends, likely triggers, personalized recommendations, program insights, engagement predictions, and inferred interestsPersonalization, coaching, reports, analytics, research, and Service improvementFor as long as reasonably necessary to provide or improve the relevant feature, subject to our retention practices
Sensitive personal informationHealth and wellness information, pain data, symptoms, treatments, mental or emotional-wellness information, account credentials, and AI-coach contentProviding and securing the Services, personalization, healthcare and sponsored programs, research, fraud prevention, and legal complianceOnly for as long as reasonably necessary for the applicable health, operational, legal, research, security, or contractual purpose

13.2 Categories of Sources

We may collect personal information from:

  • you;
  • your device and use of the Services;
  • healthcare providers and health plans;
  • employers and organizational sponsors;
  • research and program partners;
  • Apple, Google, and payment or subscription providers;
  • development, hosting, AI, analytics, communications, and security providers; and
  • other parties authorized by you or permitted by law.

13.3 Categories of Recipients

We may disclose applicable categories of personal information to:

  • service providers and contractors;
  • healthcare providers and health plans;
  • employers and organizational sponsors as described in Section 4;
  • research and program partners;
  • Apple, Google, and payment or subscription providers;
  • persons or entities you direct us to disclose information to;
  • professional advisors;
  • governmental or legal recipients where required or permitted by law; and
  • parties involved in an actual or proposed business transaction.

13.4 Sale and Sharing

Nerveli does not sell personal information for monetary consideration and does not sell consumer health data except pursuant to any authorization or consent required by applicable law. Nerveli does not use PHI or identifiable consumer health data for targeted advertising. Nerveli may use or disclose aggregated or deidentified information for research, analytics, benchmarking, product development, business development, marketing, commercial insights, and other lawful purposes. Where applicable law characterizes particular advertising technologies or disclosures as a “sale,” “sharing,” or targeted advertising, Nerveli will provide applicable rights and choices as required by law.

13.5 Sensitive Personal Information

Nerveli uses and discloses sensitive personal information only for purposes permitted by applicable law, including to provide and secure the Services, personalize user experiences, administer healthcare or sponsored programs, fulfill user requests, conduct authorized research, prevent fraud, comply with law, and support other legally permitted purposes. Nerveli does not use PHI or identifiable consumer health data to infer characteristics about an individual for targeted advertising. This restriction does not prohibit the use of aggregated or deidentified information for marketing, analytics, research, product development, or other lawful purposes.

13.6 Exercising U.S. Privacy Rights

To submit a privacy request, contact us using the information in Section 17. Please provide sufficient information to identify your account or relationship with Nerveli and describe your request. We may verify your identity or authority before responding. An authorized agent may submit a request on your behalf where permitted by law, subject to appropriate verification.

We will respond within the period required by applicable law. Where applicable law provides a right to appeal, you may appeal by contacting us and stating that you are appealing a prior privacy-request decision.

14. CHILDREN’S PRIVACY

The Services are designed for adults and are not intended for individuals under eighteen years of age.

We do not knowingly collect personal information from individuals under 18 through the Services. If we learn that we collected personal information from a minor in circumstances requiring deletion, we will take reasonable steps to delete it.

15. THIRD-PARTY SERVICES AND LINKS

The Services may contain links to or integrations with third-party websites, applications, app stores, providers, health plans, research organizations, payment providers, devices, or other services. This Privacy Policy does not govern a third party’s independent processing of personal information. We are not responsible for the privacy or security practices of third parties, and we encourage you to review their privacy notices before using their services.

16. CHANGES TO THIS PRIVACY POLICY

We review this Privacy Policy periodically and may update it to reflect changes in our Services, practices, technologies, or legal obligations. When we make changes, we will revise the “Last Updated” date. If changes are material, we may also provide notice through the Services, by email, through an in-app notice, or by another appropriate method before the changes become effective, where required by law.

17. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, or a privacy request, please contact us at:

Address: Nerveli, Inc.
Attn: Privacy Officer
7300 State Hwy 121, Suite 300
McKinney, Texas 75070
United States

Email:support@nerveli.com


Privacy Requests:privacy@nerveli.com

®

More clarity. Less pain.

App Store

2025

Hexagonal seal with stars and text reading 'Seal of Compliance, HIPAA Compliant, Powered by Accountable'.

Get the app