Privacy Policy

Overview

Effective date: June 24, 2026

Nurra Family Hub ("Nurra", "we", "our", or "us") is a family organization application designed to help families manage daily life, communication, safety, household coordination, school information, health records, subscriptions, and other family-related activities.

This Privacy Policy explains how we collect, use, store, protect, share, and delete information when you use the Nurra Family Hub mobile application, website, and related services.

If you do not agree with this Privacy Policy, please do not use Nurra.

1. Who We Are

Nurra is designed primarily for families, parents, legal guardians, children, youth members, adult family members, service/helper users, and pet/household coordination.

• App name: Nurra Family Hub
• Website: https://nurra.app
• Company / Operator: Projekt X d.o.o.
• Contact email: support@nurra.app
• Address: Sarajevo, Bosnia and Herzegovina

2. Scope of This Privacy Policy

This Privacy Policy applies to:

• the Nurra Family Hub mobile app;
• the Nurra website;
• Nurra user accounts;
• family profiles and family circles;
• parent/guardian accounts;
• child/youth accounts or profiles;
• service/helper access where enabled;
• pet profiles;
• paid subscription and entitlement features;
• support, review, and demo accounts used for app review or testing.

2.1 Covered Nurra Modules

This Privacy Policy covers all Nurra modules, including:

1. Family Core / Multi-Family Circles
2. Shared Family Calendar
3. Tasks & Chores
4. Routines & Habits
5. Rewards & Coins
6. Shopping Lists
7. Family Notes / Bulletin
8. School Hub
9. Family Communication Hub
10. Maintenance / Inventory
11. Emergency, Alerts & Locations
12. Health Records
13. Family Budget & Bills
14. Pets

3. Core Privacy Principles

Nurra is built around the following privacy principles:

• We collect only the data needed to provide the features selected by the user.
• Most family information is optional and entered by the user or family administrator.
• We do not sell personal data.
• We do not use personal family data for advertising.
• We do not allow advertisers to access your private family content.
• We do not intentionally expose private family content in push notifications.
• We use authentication, access controls, encryption, and other safeguards to protect sensitive information.
• Parents and family administrators control access to family spaces and role-based permissions.
• Users may request account deletion according to the process described in this policy.

4. Information We Collect

The information Nurra collects depends on which features you use. Not every user will provide every type of data listed below.

4.1 Account Information

When you create or use an account, we may collect:

• email address;
• password or authentication credential;
• account ID;
• name or display name;
• phone number, if provided;
• profile image or avatar, if provided;
• account role;
• login status;
• account creation and update timestamps;
• device and session information.

Email is required for account registration. Other profile details are generally optional unless needed for a specific feature.

4.2 Family and Household Information

For Family Core and Multi-Family Circles, we may collect:

• family name;
• family description;
• family avatar or image;
• family members;
• family roles;
• parent/guardian relationships;
• child/youth profiles;
• household settings;
• family invitations;
• role history;
• membership status;
• family preferences.

Family administrators may add other users to a family circle. Adult users may be invited by email. Child or youth access may be created through supported child-access flows, such as QR code or invitation flow, where implemented.

4.3 Role and Permission Information

Nurra uses role-based access controls. We may process role and permission information for:

• RC1 Family Administrator;
• RC2 Parent / Legal Guardian;
• co-parent or custody-related access;
• adult family member access;
• service/helper access;
• child/youth access;
• observer or emergency-only access;
• pet-related access.

This information is used to determine what each user can see, edit, create, delete, or manage.

4.4 Calendar Information

For the Shared Family Calendar, we may collect:

• event title;
• event date and time;
• location, if added by the user;
• notes;
• reminders;
• repetition settings;
• participants or family members linked to an event.

Calendar data is used to display and manage family events and reminders.

4.5 Tasks, Chores, Routines, and Habits

For Tasks & Chores and Routines & Habits, we may collect:

• task title;
• task description;
• assigned family member;
• due date;
• recurrence;
• completion status;
• rejection or approval notes;
• routine title;
• routine steps;
• habit completion information;
• activity history.

This data is used to organize family tasks, chores, routines, and habits.

4.6 Rewards and Coins

For Rewards & Coins, we may collect:

• reward title;
• reward description;
• coin balance;
• coin transaction history;
• redemption requests;
• approval or rejection notes;
• fulfillment notes;
• reward activity metadata.

This information is used to support family reward systems and child/youth motivation features.

4.7 Shopping Lists

For Shopping Lists, we may collect:

• shopping list title;
• shopping item names;
• item status;
• catalog item names;
• list event history;
• notes or payload information related to list changes.

This information is used to create, update, and share shopping lists within a family.

4.8 Family Notes / Bulletin

For Family Notes / Bulletin, we may collect:

• note title;
• note text;
• note items;
• author or creator;
• timestamps;
• family visibility settings.

This information is used to share family notes, reminders, and bulletin-style information.

4.9 School Hub Information

For School Hub, we may collect:

• school name;
• grade or class;
• section or group;
• teacher name;
• classroom;
• school phone;
• school email;
• subject names;
• grades or assessment values;
• assessment labels;
• school notes;
• school-related items.

School Hub information is entered by the family and used to help organize school-related information. Nurra does not verify school records with schools unless a separate feature or integration is explicitly introduced.

4.10 Family Communication Hub

For Family Communication Hub, we may collect:

• chat messages;
• message sender;
• message timestamps;
• family chat participation status;
• message metadata;
• moderation or access settings.

Family chat is intended for family members only, unless otherwise configured. Service/helper users are not automatically included unless a future feature explicitly permits it.

4.11 Maintenance / Inventory Information

For Maintenance / Inventory, we may collect:

• household asset names;
• asset categories;
• asset location;
• maintenance item titles;
• recurrence information;
• service provider names;
• notes;
• service records;
• inventory item names;
• storage location;
• expense notes;
• document names or references;
• service contact details.

This information helps families manage household assets, supplies, inventory, service providers, and maintenance records.

4.12 Emergency, Alerts, and Location Information

For Emergency, Alerts & Locations, we may collect:

• emergency profile information;
• emergency contact names;
• emergency contact phone numbers;
• child name or profile label;
• emergency notes;
• emergency alert messages;
• safe-place or safe-zone names;
• safe-zone addresses;
• latitude and longitude;
• location accuracy;
• altitude, speed, or heading where supported;
• device name or model;
• operating system version;
• network type;
• emergency session data;
• location update timestamps.

Location data is used only for emergency, safety, safe-place, or location-related family features that the user or parent/guardian enables.

Nurra should request location permission only when a feature requires it. If background or "Always" location access is used, it should be limited to clearly explained safety or safe-place functionality.

4.13 Health Records

For Health Records, we may collect sensitive health-related information entered by users, parents, or guardians, including:

• blood type;
• height and weight;
• allergies;
• current medications;
• important medical conditions;
• primary doctor information;
• insurance information;
• emergency contact details;
• emergency medical notes;
• medication names;
• dosage;
• frequency;
• instructions;
• vaccine records;
• doctor appointment details;
• clinic information;
• medical document titles;
• safety items;
• growth records;
• development notes.

Health Records are optional and user-entered. Nurra is not a medical provider and does not provide medical advice, diagnosis, treatment, or emergency medical services.

4.14 Family Budget & Bills

For Family Budget & Bills, we may collect:

• money account names;
• linked bank account reference labels, if provided;
• budget category names;
• bill names;
• bill due dates;
• payment method labels;
• notes;
• money transfer notes;
• wallet transaction notes;
• money request reasons.

Nurra is not a bank, financial advisor, payment processor, or regulated financial institution. Budget and bills features are for family organization only unless a future regulated integration is clearly introduced.

4.15 Pets

For Pets, we may collect:

• pet profile information;
• pet color or markings;
• microchip ID, if provided;
• pet health records;
• allergies;
• conditions;
• surgeries;
• injuries;
• emergency notes;
• emergency phone number;
• insurance number;
• pet document titles or references;
• vaccine records;
• medication details;
• vet visit information;
• clinic and veterinarian names;
• treatment notes;
• pet care routines;
• pet expense notes.

Pet information is used to help families organize pet care, health, documents, routines, and expenses.

4.16 Subscription and Payment-Related Information

If you purchase a subscription or paid feature, Apple App Store or Google Play may process your payment. We may receive or store subscription-related information needed to verify entitlement, such as:

• subscription plan;
• product ID;
• purchase status;
• entitlement status;
• transaction identifiers;
• original transaction identifiers;
• purchase verification payloads;
• subscription renewal or cancellation status;
• sandbox/test subscription status where applicable.

We do not directly collect full payment card details through the app. Payments are processed by Apple, Google, or other approved app-store/payment providers.

4.17 Device, Technical, and Security Information

We may collect technical information needed to operate, secure, and troubleshoot the service, including:

• device type;
• operating system;
• app version;
• language/locale;
• IP address;
• authentication logs;
• error logs;
• security events;
• push notification token;
• device identifier used by the app;
• crash or diagnostic information, if crash reporting is enabled.

This information is used for security, debugging, reliability, abuse prevention, and service improvement.

4.18 Website and Cookie Information

When you visit our website, we may collect limited website data such as:

• browser type;
• device type;
• pages visited;
• approximate region;
• referral source;
• cookies or similar technologies, if used.

If analytics cookies or marketing cookies are introduced, the website should explain them and provide any required consent mechanism.

5. How We Use Information

We use information to:

• create and manage user accounts;
• create and manage family circles;
• support role-based access and permissions;
• provide each Nurra module selected by the family;
• send reminders and notifications;
• support emergency and safety features;
• process subscription entitlement status;
• provide customer support;
• maintain security;
• prevent abuse or unauthorized access;
• improve reliability and app performance;
• comply with legal obligations;
• respond to account deletion or privacy requests.

We do not use private family content for third-party advertising.

6. Legal Bases for Processing

Where applicable under privacy laws such as the GDPR, we process personal data based on one or more of the following legal bases:

• performance of a contract, to provide the Nurra service;
• consent, where required for optional data or permissions;
• legitimate interests, such as security, fraud prevention, and service improvement;
• compliance with legal obligations;
• protection of vital interests, where emergency or safety features are used.

For child/youth profiles and family-managed accounts, parents or legal guardians are responsible for creating, managing, and authorizing the relevant family data where required by law.

7. Children and Family Accounts

Nurra is designed for family use and may include child/youth profiles or child/youth access features managed by parents or legal guardians.

Parents or legal guardians may create, manage, or supervise child/youth profiles. Children should not create independent accounts or provide personal information without appropriate parent or guardian involvement where required by law.

Parents or legal guardians may:

• create child/youth profiles;
• manage access permissions;
• control participation in family modules;
• request deletion of child/youth data;
• manage emergency and safety information;
• control whether a child/youth device is linked to the family.

We do not knowingly collect personal data from children without parental or guardian involvement where required.

8. Location Data

Nurra may process location data only when location-related features are enabled or used, such as:

• emergency alerts;
• child safety status;
• safe places or safe zones;
• location sharing requested by a parent/guardian;
• emergency session tracking;
• location-based family safety indicators.

Location permission should be requested only when needed for the relevant feature. If a user denies location permission, Nurra should still allow non-location features to function where possible.

Location data may include approximate or precise location depending on the feature and operating system permission selected by the user.

Nurra does not sell location data. Nurra does not use family location data for advertising.

9. Health and Emergency Information

Health and emergency information may be sensitive. This information is optional and entered by users, parents, or guardians for family organization and emergency preparedness.

Nurra is not a healthcare provider. Nurra does not provide medical advice, diagnosis, treatment, or emergency response services. In an emergency, users should contact local emergency services.

Health and emergency information should be shared only with trusted family members or authorized users according to family permissions.

10. Push Notifications

Nurra may send push notifications for:

• family updates;
• task reminders;
• calendar reminders;
• chat or communication updates;
• emergency or safety alerts;
• location/safe-place events;
• subscription or account-related notices.

Sensitive push notifications should be generic where possible. Push payloads should not include private family content such as health details, exact location coordinates, full chat content, budget details, or sensitive child information unless explicitly necessary and permitted.

Users can manage push notification permissions through their device settings.

11. Data Sharing

We do not sell personal data.

We may share limited information only in the following situations:

11.1 Within Your Family Circle

Information may be visible to family members or authorized users based on roles and permissions. For example, a parent or family administrator may see more information than a child/youth user or limited observer.

11.2 Service Providers

We may use service providers for:

• hosting;
• database infrastructure;
• email delivery;
• push notification delivery;
• crash reporting or diagnostics, if enabled;
• subscription verification;
• security monitoring;
• customer support.

Service providers may process data only as needed to provide services to Nurra and should be subject to appropriate confidentiality and security obligations.

11.3 App Stores and Payment Providers

Apple, Google, and related payment systems may process subscription purchases, refunds, cancellations, and entitlement information according to their own terms and privacy policies.

11.4 Legal or Safety Reasons

We may disclose information if required to:

• comply with law;
• respond to valid legal requests;
• protect users, children, families, or the public;
• investigate fraud, abuse, or security issues;
• enforce our terms.

11.5 Business Transfers

If Nurra is involved in a merger, acquisition, restructuring, or asset transfer, user information may be transferred as part of that transaction, subject to this Privacy Policy or a replacement policy with appropriate notice.

12. Data Security

We use technical and organizational safeguards designed to protect user information, including:

• HTTPS/TLS for data in transit;
• authentication and access control;
• role-based permissions;
• server-side secret management;
• encryption for selected sensitive fields at rest;
• secure storage practices;
• logging controls;
• review of sensitive push payloads;
• restrictions on access to production systems.

No system is completely secure. Users should protect their account credentials and use strong passwords where applicable.

13. Data Retention

We keep information for as long as needed to:

• provide the Nurra service;
• maintain family records selected by users;
• support subscriptions and entitlement status;
• comply with legal obligations;
• resolve disputes;
• prevent abuse;
• maintain security.

When an account or family data is deleted, we will delete or de-identify associated personal data unless we are required to retain limited information for legal, security, fraud prevention, accounting, or compliance reasons.

Backup copies may remain for a limited period before automatic deletion according to backup retention schedules.

14. Account Deletion

Users may request deletion of their account through the app or by contacting us at:

support@nurra.app

Where required, Nurra will provide an in-app account deletion option.

Account deletion is intended to remove the user account and associated personal data, subject to legal, security, subscription, fraud-prevention, or operational exceptions.

Certain shared family data may require additional handling depending on:

• whether the user is the family administrator;
• whether other family members still use the family space;
• whether ownership must be transferred;
• whether child/youth profiles are managed by a parent or guardian;
• whether legal or safety retention obligations apply.

When an account is deleted, Nurra should also invalidate active sessions and remove or disable authentication tokens where technically possible.

15. Your Privacy Rights

Depending on your location, you may have rights to:

• access your personal data;
• correct inaccurate data;
• delete your personal data;
• object to certain processing;
• restrict certain processing;
• receive a copy of certain data;
• withdraw consent where processing is based on consent;
• complain to a data protection authority.

To exercise privacy rights, contact us at:

support@nurra.app

We may need to verify your identity before processing a request.

16. International Data Transfers

Nurra may process and store information in countries other than the country where you live. Where required, we use appropriate safeguards for international data transfers, such as contractual protections or other legally recognized transfer mechanisms.

17. Third-Party Links and Services

Nurra may contain links to external websites, app-store pages, payment systems, or third-party services. We are not responsible for the privacy practices of third parties. Users should review the privacy policies of those third parties.

18. Advertising and Tracking

Nurra does not currently use private family content for advertising.

Nurra does not sell personal data.

If Nurra later introduces advertising, attribution, analytics, or tracking technologies that materially change this policy, we will update this Privacy Policy and, where required, request consent or update app-store privacy disclosures.

19. App Store and Google Play Disclosures

Nurra's Apple App Store Privacy Nutrition Labels and Google Play Data Safety disclosures should be consistent with this Privacy Policy and the app's actual behavior.

Depending on enabled features, Nurra may disclose collection of data categories such as:

• contact information;
• identifiers;
• user content;
• health and fitness or health-related information;
• financial information related to budget/bills features;
• location;
• diagnostics;
• usage data;
• purchase/subscription information.

The exact store disclosures should be completed based on the final app build, enabled SDKs, analytics/crash reporting status, and actual data flows.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and may provide additional notice through the app, website, or other appropriate means.

Continued use of Nurra after an updated Privacy Policy becomes effective means you accept the updated policy where permitted by law.

21. Contact Us

For privacy questions, account deletion requests, or data rights requests, contact:

• Projekt X d.o.o.
• Email: support@nurra.app
• Website: https://nurra.app
• Address: Sarajevo, Bosnia and Herzegovina

22. Module-Specific Data Summary

The table below summarizes the main data types that may be processed by each Nurra module.

23. Data We Do Not Intend to Collect

Unless explicitly introduced in a future feature, Nurra does not intend to collect:

• full payment card numbers;
• government identification numbers;
• biometric identifiers;
• advertising identifiers for tracking;
• personal data for sale to advertisers;
• private family content for third-party advertising.

If this changes, this Privacy Policy and app-store disclosures must be updated before or at the time of the change.

24. Important Safety Notice

Nurra helps families organize information, reminders, and safety-related data. Nurra is not a substitute for emergency services, medical professionals, legal professionals, financial advisors, schools, or law enforcement.

In an emergency, contact local emergency services immediately.