Privacy Policy for Nora App

Last Updated: June 18, 2025

Southwest Institute for Emotional Intelligence (SWIEI) is committed to protecting your privacy. This Privacy Policy explains how the Nora mobile application (“Nora,” “the App,” or “we”) collects, uses, stores, and shares information when you use our App. By using Nora, you agree to the practices described in this policy. If you have questions, please contact us at support@swiei.com.

1. About the Nora App

Nora is an Emotional Intelligence (EI) and leadership coaching app that allows users to engage in text-based conversations with Nora, an AI-powered Emotional Intelligence and Leadership assistant. The App uses Firebase services for data storage, and analytics, and operates with SQLite for offline functionality on the iPhone. Nora is designed to provide personalized guidance without collecting personally identifiable information (PII) unless voluntarily provided by you in chats. Our user settings screen allows users to share a name and description, and we use this data to share with Nora to personalize the conversation.

2. Information We Collect

We collect the following types of information to provide and improve Nora’s functionality:

a. Information You Provide

Chat Content: Messages you send to and receive from Nora are stored to maintain your conversation history. This may include any information you choose to share, such as thoughts, preferences, or personal details. We do not require or prompt for PII (e.g., name, email, address), but if you include such information in chats, it will be stored as part of your conversation.
User Settings: Preferences like chat bubble color, background color, and dark mode settings, stored locally and synced to Firestore.

b. Automatically Collected Information

User Identifiers: A unique, anonymous user ID (generated via Firebase Authentication or UUID) links your chats and settings to your account. This ID is not tied to your real-world identity.
Device and Usage Information: We collect non-identifying device information (e.g., device model, OS version, app version) and usage data (e.g., session duration, feature interactions) via Firebase Analytics to improve the App’s performance and user experience.
Connectivity Status: The App checks your device’s internet connectivity to enable offline mode and sync data when online.

c. Information Not Collected

We do not collect PII such as your name, email address, phone number, or location unless you voluntarily provide it in chat content.
We do not access your contacts, photos, videos, or other device data outside of the App’s functionality.

3. How We Use Your Information

We use the collected information for the following purposes:

To Provide Core Functionality: Chat content and user IDs are used to display conversation history, sync chats across devices, and restore data in offline mode.
To Personalize Your Experience: User settings customize the App’s appearance (e.g., colors, dark mode).
To Improve the App: Device and usage data help us analyze performance, fix bugs, and enhance features.
To Ensure Security: Anonymous identifiers and connectivity checks maintain secure data syncing and prevent unauthorized access.

We do not use your information for targeted advertising, profiling, or tracking across other apps or websites.

4. How We Store and Protect Your Information

a. Storage

Firestore (Cloud): Chat content, user settings, and anonymous user IDs are stored in Google’s Firestore database, encrypted in transit and at rest, to enable syncing across devices, leveraging standard HTTPS and SHA-256 via Firebase SDKs.
SQLite (Local): Chats and settings are stored locally on your device in an SQLite database for offline access. We currently do not use encryption to manage or store data in the local device’s SQLite database.
Retention: Chat data is retained as long as your account is active. You can delete your chats via the App’s settings, which removes them from Firestore and your device.

b. Security

We use industry-standard encryption (e.g., TLS for data in transit, AES for data at rest) to protect your information.
Firebase Authentication ensures secure user ID management.
Access to your data is limited to authorized personnel and systems necessary for App operation.

5. Sharing Your Information

We do not share your information with third parties except as described below:

Google Firebase: We use Firebase services (Firestore, Authentication, Analytics) to store chats, manage user IDs, and analyze usage. Google processes this data on our behalf under strict data protection agreements. See Google’s Privacy and Security in Firebase for details.
No Backend AI Platforms: Your chat data is not shared with external AI platforms for processing or training. All conversation logic is handled within the App or Firebase services.
Legal Obligations: We may disclose information if required by law, such as in response to a court order or to protect our rights, safety, or property.
No Tracking or Ad Networks: We do not share data with advertising networks, data brokers, or third parties for tracking or targeted ads.

6. App Tracking Transparency (ATT)

Nora does not use the App Tracking Transparency (ATT) framework, as we do not engage in tracking as defined by Apple. We use Firebase Analytics to collect non-identifying usage data, such as app interactions and performance metrics, solely to improve the Nora app’s functionality and user experience. This data is not shared with third parties for advertising, ad measurement, or cross-app/website tracking purposes. We do not access the Identifier for Advertising (IDFA) or link user data across apps or websites owned by other entities. As a result, no ATT permission prompt is required, ensuring a seamless experience while maintaining your privacy.

7. Children’s Privacy

Nora is not intended for users under 13. We do not knowingly collect personal information from children under 13. If chat content includes data from a minor, it is treated as user-provided content and stored as described above. Parents or guardians can contact us to delete such data. We comply with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws.

8. Your Rights and Choices

Access and Deletion: You can view your chat history in the App and delete chats via the settings, which removes them from Firestore and your device.
Opt-Out of Analytics: You can disable Firebase Analytics via the App’s settings or by declining the ATT prompt.
Data Portability: Contact us to request a copy of your chat data in a structured format.

9. Third-Party Services

Nora uses Google Firebase services, which have their own privacy practices:

Firebase Firestore: Stores chat content and settings.
Firebase Authentication: Manages anonymous user IDs.
Firebase Analytics: Collects device and usage data.

We do not use other third-party SDKs for data collection or processing.

10. International Data Transfers

Your data may be processed on servers located outside your country, such as Google’s Firebase and Firestore servers, which operate in global data centers (e.g., USA, Europe, Asia). Firebase Authentication data is processed exclusively in the USA. We ensure compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), through Google’s Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework, and other safeguards, such as encryption and independent audits. For more details, see Google’s Data Processing Terms: https://firebase.google.com/terms/data-processing-terms.

11. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify you via the App or email (if provided) before significant changes take effect. The updated policy will be posted at swiei.com/nora-app-privacy-statement.

12. Contact Us

For questions, concerns, or to exercise your rights, contact us at:

Email: support@swiei.com
Website: swiei.com/contact-us
Address: Southwest Institute for Emotional Intelligence, PO Box 45289, Phoenix, AZ 85064