Privacy Policy
Effective: 21 August 2026. Owner approved for production release on 21 August 2026.
Noverron Health is a Bangladesh-focused clinical nutrition platform. This policy explains how account, subscription, payment, professional/institutional, support, and clinical patient information is handled when the service is used.
Information we process
Depending on the selected plan and workflow, the service may process Google-authenticated account identity, profile/contact information, subscription and payment-submission details, professional or institution information, support requests, patient identifiers and contact details, nutrition/clinical inputs, calculations, recommendations, follow-up records, and security/audit metadata.
Why information is used
Information is used to authenticate users, operate the subscribed service, enforce plan entitlements and seat limits, support clinical-nutrition workflows, generate authorized outputs, process manual payment approval, provide support, prevent abuse, preserve auditability, and maintain service security and reliability.
Clinical and sensitive information
Clinical and patient information is treated as sensitive. Access is restricted by authentication, active client context, membership/role, entitlement and resource ownership checks. Platform operational analytics should use aggregate or minimum-necessary data rather than unrestricted patient detail.
Sharing and processors
Information is not intended to be sold to advertisers. Information may be processed by service providers needed to operate authentication, hosting, communications, security, or payment-support workflows, subject to applicable contractual and legal requirements. Manual bKash payment submissions are reviewed by authorized Noverron staff.
Retention and deletion
Records are retained only as necessary for service operation, clinical continuity, account/subscription administration, security, audit, backup/recovery, dispute handling, and applicable legal obligations. Deletion or correction requests may be subject to identity verification, legitimate retention requirements, and technical backup cycles.
Security
The service is designed with server-side authorization, tenant isolation, prepared database queries, CSRF protection, secure sessions, audit records, protected configuration and restricted access to secrets. No internet service can guarantee absolute security.
Your choices and requests
Subject to applicable law and verification, users may request access to, correction of, or other legally available actions concerning personal data associated with their account or organization. Requests should be made through the in-app Support channel or the official contact channel published by Noverron.
Children and family use
Family-plan users should provide information about minors only when they are authorized to do so and when it is appropriate for the intended nutrition workflow.
International services
Some infrastructure or authentication providers may process technical/account data outside Bangladesh. Where applicable, Noverron should apply safeguards required by law and service-provider terms.
Legal framework
This policy is intended to be reviewed against applicable Bangladesh law, including the Personal Data Protection Act, 2026 and relevant cybersecurity/data-governance requirements. It does not waive rights or obligations created by applicable law.
Changes
Material policy changes should be dated and published on this page. Where legally required, additional notice or consent should be obtained.