Nemati Privacy Policy

1. Who controls your data

The controller of your data is FounderMate LLC, the operator of Nemati, a limited liability company registered in the State of Wyoming, United States. This policy forms part of the Nemati Terms of Use.

2. Your health data is sensitive data

What you log in Nemati, meaning your dose, your weight, your symptoms, your readings, and any meals, physical activity, medical reports, or answers about your health you add, is health data, and the Personal Data Protection Law classifies it as sensitive.

In practice that means three things: we process it only with your explicit consent, we do not use it for any purpose we have not named here, and you can withdraw your consent at any time by deleting your account.

3. What we collect

What you enter yourself: the medication you selected, your treatment week, your dose, your injection site, your weight, your symptoms and their dates, the meals, physical activity, water, and steps you log, your own ratings for food and exercise, and any note you write. If you enter them: your age, height, sex, goal weight, your answers to the health questions, your pen's type and strength, and your reminder times. And the readings you log: blood pressure, blood glucose, waist, body composition, and lab results.

From health apps: if you allow it, we read your steps, workouts, water, weight, body fat, and lean mass from Apple Health on iPhone or Health Connect on Android, and save them in your log like any other entry. We only read; we never write anything to those apps, never use what we read from them for advertising, and never sell it. You can stop the reading in your device settings at any time.

Medical reports: if you add a report, the file itself (PDF or photo) stays on your device only and is never uploaded to our servers. Your account keeps the details you review yourself: its type, name, date, and the results you confirm.

AI features: if you use the meal scanner, we send the meal photo, resized and with its location data removed, to estimate what is in it, and we do not keep the photo. If you ask us to read a report, your device reads its text and removes your personal details first, and we send only that text. If you ask the AI assistant, we send your question, the last messages of your conversation with it, and a summary of your log so it can answer about your situation. None of these carry your name, email, number, or account ID.

Account details: your email address, your mobile number, and your first name. If you choose: your clinic's name and phone number, and your national ID number (see clause 5). These are stored on your device and synced encrypted to our cloud servers so you can reach them across your devices. If you sign in with Apple or Google, we receive only your email address from them, plus your name and profile picture if your Google account shares them. We never receive your password or anything else from that account.

Subscription details: your plan, when it started and ends, whether it renews, the store you paid through, and the discount or invite code if you entered one. If you join with a friend's invite code, or friends join with yours, we keep that link between the accounts to give the rewards; the person who invited you sees only how many people joined with their code, never their names or data. We receive these from the Apple and Google stores through our payments provider, and never your card details.

Your community posts: if you join the Nemati Community, we store the name you choose to show there, the messages you write, the reports you send, and whose messages you hid. Other community members see your messages and that name, so don't write anything that identifies you or anyone else. Your questions to the AI assistant are private: only you can see them.

Technical data: device model, operating system, app version, crash reports, and usage data (clause 5). We use these to run the app, fix problems, and improve it, and they are not tied to your health record. If you allow notifications, we store your device's notification address, time zone and language to send you community notifications, and delete them when you sign out or delete your account.

4. What we do not collect

We do not collect your medical record from any provider, your location, your contacts, or your card details. We reach none of your photos except the one you choose or take yourself for a meal or a report.

We do not link your account to any account you hold on another platform, except the Apple or Google account you choose to sign in with, and we use no advertising trackers.

5. Why we use it

To run the app for you: storing your record, building your reports, and syncing them to our cloud servers so you can reach your data across your devices.

To run the AI features you ask for yourself: estimating what is in your meal, reading the results in your report, and answering your questions from your log and from approved medicine leaflets. Its answers are general information, not a diagnosis or a prescription; talk to your doctor before any treatment decision.

To improve the app and fix faults, using aggregated data that cannot be traced back to any individual. Aggregated means totals across all users, not your record.

To run and develop the app, it sends usage data, such as the screens you open, the features you use, and the errors you meet, to an analytics provider with servers in the European Union. This data carries no health data and no name, email, phone number, or account ID, only a random ID that changes when you sign out. It is part of running the service, so it stops only when you delete your account.

Your national ID number, if you enter it, is kept to prepare clinic bookings and pharmacy orders once we offer them. We share it with no one except for a booking or order you confirm, and you can delete it from your account at any time.

To contact you about your account or a service outage. We will not send you marketing unless you opt in, and you can stop it at any time.

6. Research participation

We may collect anonymised data from your record to support metabolic and GLP-1 research studies. By accepting the Terms of Use when you create your account, you consent to this collection. You can withdraw consent at any time by deleting your account.

"Anonymised" means: we remove your name, account ID, email, and mobile number. What remains are patterns such as weight trajectory across treatment weeks, symptom frequency across different doses, and logging times — patterns that do not point to you as a person.

What is shared: aggregated dose, weight, and symptom trends, with no individual logs and no account details. Recipients: research partners bound by data-processing agreements governed by the Personal Data Protection Law. No partner may sell this data or use it commercially. Withdrawal stops future sharing but does not affect studies that already received the data before withdrawal.

7. We do not sell your data

We do not sell your data, rent it, or share it with advertisers, pharmaceutical companies, insurers, or employers. We receive no payment from anyone for access to it.

We do not share it with your doctor either. That happens only when you export the report and send it yourself.

8. Who else can reach it

We use service providers who process data on our behalf and only on our instructions, bound by contracts to protect it and not to use it for any other purpose, each limited to its task:

Cloud hosting provider: stores your account data and synced health record, on servers in Frankfurt, Germany (EU).

Email delivery provider: sends sign-in codes to your email and receives only your email address.

Analytics provider: receives the usage data described in clause 5, with no health data and nothing that identifies you, on servers in the European Union.

Payments provider: receives your purchase records from the Apple and Google stores, with your account ID, to confirm your plan. It never reaches your health data, and its servers are in the United States.

AI providers: receive only what you ask to have analysed (clause 3: the meal photo, the report text with your personal details removed, or your question with a summary of your log), never your name or anything that identifies you, and may not keep it or use it to train their models. We use a main provider and two backups that we turn to only if the main one fails, with servers in the United States.

If you enter a partner code, the partner receives only totals: how many people used their code, how many subscribed, and the revenue. They never receive your name, contact details, or health data.

You can ask for the names of these providers by writing to care@nemati.app.

Nemati Community members see only what you write in the community and the name you chose, never your health record, email or number. Our community moderators review reported messages to remove those that break the rules.

Other third parties: the Apple and Google stores, which distribute the app; Sign in with Apple and Sign in with Google, if you choose one, which only confirm who you are and never reach your health record (when you delete your account, we also remove its link to your Apple account); and, if crash reporting is enabled, a crash reporting service that receives technical diagnostics only (device model, operating system, app version) and never your health record; and a notification delivery service, which passes community notifications to your device through Apple or Google and never receives message text or your health record; and Apple Health and Health Connect, if you allow Nemati to read from them. The data held in them stays subject to Apple's and Google's policies, and we send nothing to them.

We may also disclose your data if a competent judicial or regulatory authority requires it under Saudi law. We will tell you when that happens unless the law prevents us.

9. Where it is stored — cross-border transfer

Your data is stored in two places: on your device, and on our cloud servers in Frankfurt, Germany.

This means your data is transferred outside the Kingdom of Saudi Arabia to a member state of the European Union. Under the Saudi Personal Data Protection Law, you give explicit consent to this transfer when you create your account. The servers in Germany are subject to EU General Data Protection Regulation (GDPR) rules, as well as the contractual safeguards we hold with our hosting provider.

Our email delivery provider may operate outside the EU. It receives only your email address, to send your sign-in code, and is contractually bound to protect it. By creating your account you also give explicit consent to this transfer. Your health record itself stays in Frankfurt.

Our payments provider operates from the United States. It receives only your account ID and purchase records, and is contractually bound to protect them. By creating your account or subscribing to a plan, you give explicit consent to this transfer.

Our AI providers operate from the United States. They receive only what you ask to have analysed, without anything that identifies you, and do not keep it. By using an AI feature you give explicit consent to this transfer. Your health record itself stays in Frankfurt.

Germany is not a country the PDPL designates as lacking adequate protection. GDPR in particular provides a robust and internationally recognised level of protection.

10. How long we keep it

Your data stays on your device for as long as you keep the app and your account, and on our cloud servers for as long as your account is active.

When you delete your account inside the app, your record is removed from your device, and we purge it from the servers within 30 days. Encrypted backups may persist for up to a further 90 days before expiring automatically.

We do not keep the meal photo or the report text after analysing them. Your conversation with the AI assistant stays in your account until you delete your account, and your report files stay on your device until you delete them or the app.

Your community messages are deleted with your account. If a moderator removes a message for breaking the rules, it disappears for everyone at once, and we keep it to review reports until your account is deleted.

An account unused for 24 consecutive months may be closed after we notify you, and the same deletion timeline applies.

11. How we protect it

In transit: your data travels to our servers over an encrypted connection and is never sent in plain text at any stage.

At rest: data is stored on our servers using strong, industry-standard encryption, with access restricted to staff with a genuine operational need.

On your device: protect it by locking your device with a passcode or biometric and keeping the sign-in lock inside the app switched on. No protection is complete — tell us immediately if you suspect someone else has reached your account.

12. Your rights

Under the Personal Data Protection Law you have the right to know what we process and why, to access your data and obtain a copy of it, to correct anything wrong or incomplete, to request its deletion, and to withdraw your consent to processing at any time.

Withdrawing consent does not undo processing that was lawful before it, but it stops processing from that date onward.

13. How to exercise them

The fastest route is inside the app: export your data or delete your account from account settings. The request runs immediately on your device and sends the deletion request to our servers.

For anything else, write to care@nemati.app and we will respond within 30 days. There is no charge, unless a request is repeated unreasonably.

We may ask you to confirm that the account is yours before we act, to protect you.

14. If there is a breach

If an incident affecting personal data held by us or by one of our service providers occurs, we notify the Saudi Data and Artificial Intelligence Authority (SDAIA) within the statutory period, and we notify you directly if it is likely to harm you.

The notice will say what happened, which data was affected, what we did, and what we advise you to do.

15. Reports you send yourself

When you export your report and send it to your doctor or anyone else, the data leaves the app and you become the sender.

What happens to it after that follows the policies of whoever received it, not ours. Check who you are sending to, and check the contents of the report before you send it.

16. Children

The app is for people aged 16 and over. For users aged 16 or 17, we process their data with their parent's or guardian's consent, and the parent or guardian can ask to see or delete it by writing to us. We do not knowingly collect data from anyone under 16; if we learn of such an account, we close it and delete the data.

If you are a parent and believe your child created an account, write to us and we will remove it.

17. Changes to this policy

We may amend this policy. If a change is material, such as adding a new processing purpose or moving where data is hosted or changing infrastructure provider, we will notify you inside the app before it takes effect, and ask for fresh consent wherever the law requires it.

The last-updated date sits at the top of this page.

18. Contact and complaints

For any question or request about your data: care@nemati.app.