Privacy Policy

Last updated: May 19, 2026 · Nosceau Pte. Ltd.

1. Who We Are

Innara is an educational and coaching platform operated by Nosceau Pte. Ltd. ("we", "us", "our"), incorporated in Singapore. We can be contacted at privacy@innara.io.

Our Data Protection Officer is Jessica Sanyoto, reachable at privacy@innara.io.

2. What Data We Collect

Data you provide directly

• Account information (name, email address)
• Cycle phase and day data
• Self-reported symptoms, mood, and emotional check-in responses
• Journal entries and coaching session responses
• Payment information (processed securely by Stripe — we do not store card details)

Data we collect automatically

• Log and usage data (IP address, browser type, session activity)
• Device data (device type, operating system, browser version)
• Approximate location data (inferred from IP address)
• Analytics data via Google Analytics and Firebase

3. How We Use Your Data

• To provide and personalise the Innara platform and its educational content
• To generate phase-contextual coaching insights based on your cycle data
• To process payments and manage your subscription
• To send service-related communications (no marketing without your consent)
• To improve the platform through anonymised analytics
• To comply with our legal obligations under Singapore's PDPA

4. Health Data

Cycle data, symptom inputs, and emotional check-in responses are considered sensitive personal data under Singapore's Personal Data Protection Act (PDPA). We collect this data only with your explicit consent, use it solely to provide the Innara service, and do not sell or share it with third parties for commercial purposes.

All health-adjacent data is encrypted at rest and in transit.

5. AI-Generated Content

Innara uses AI to generate educational insights based on your cycle phase and self-reported inputs. These insights are educational and population-level in nature — they are not medical assessments, diagnoses, or personalised medical advice. You may opt out of AI-based processing at any time by contacting us at privacy@innara.io.

6. Third Parties We Share Data With

• Google Firebase — database, authentication, and hosting. Data Processing Agreement in place.
• Google Analytics — usage analytics. Data Processing Agreement in place.
• Stripe — payment processing. Governed by Stripe's privacy policy.

We do not sell your personal data. We do not share your health data with advertisers.

7. Cookies

We use cookies and similar tracking technologies for analytics and platform functionality. Google Analytics sets cookies to help us understand how users interact with Innara. You can control cookie settings through your browser.

8. Data Retention

We retain your personal data for as long as your account is active. Upon a deletion request, your data is deleted within 30 days. Anonymous analytics data is retained for up to 26 months. Accounts inactive for 2 years may be deleted after prior notification to you.

9. Your Rights

Under Singapore's PDPA and, where applicable, the EU GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Opt out of AI-based processing
• Export your data

To exercise any of these rights, email us at privacy@innara.io. We will respond within 30 days.

10. Jurisdiction

This Privacy Policy is governed by the laws of Singapore. Innara is intended for users in Singapore. If you access Innara from another jurisdiction, you do so at your own risk and are responsible for compliance with local laws. We make no representation that the platform is appropriate or available in jurisdictions outside Singapore.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

For any privacy-related questions or requests:

• Email: privacy@innara.io
• Company: Nosceau Pte. Ltd.
• Jurisdiction: Singapore