1. Introduction
Nursey respects your privacy and is committed to protecting your personal data. This privacy policy informs you about how we collect, use and protect your personal information in accordance with the General Data Protection Regulation (GDPR).
2. Data controller
The data controller is:
- Nursey
- Email: privacy@nursey.fr
- Data Protection Officer: dpo@nursey.fr
3. Data collected
We collect the following data:
3.1 Identification data
- First and last name
- Email address
- Password (encrypted)
- Profile picture (optional)
3.2 Health data
- Breastfeeding information (times, duration, quantities)
- Children data (age, weight, allergies)
- Medical consultation history
- Messages exchanged with healthcare professionals
3.3 Technical data
- IP address
- Geolocation data (with your consent)
- Device and browser information
- Cookies and similar technologies
4. Processing purposes
Your data is processed to:
- Provide breastfeeding tracking services
- Facilitate medical consultations
- Improve our services
- Ensure platform security
- Comply with our legal obligations
- Send you important communications
5. Legal basis for processing
The processing of your data is based on:
- Your consent for geolocation and marketing data
- Contract execution for service provision
- Legitimate interest for service improvement and security
- Legal obligation for compliance with health regulations
6. Data sharing
Your data may be shared with:
- Healthcare professionals: for authorized consultations
- Technical providers: hosting, analysis, support
- Competent authorities: if required by law
We never sell your personal data to third parties.
7. International transfers
Your data is primarily stored in Europe. Any transfer to third countries is governed by appropriate safeguards (standard contractual clauses, adequacy decision).
8. Retention period
- Account data: until account deletion + 1 year
- Health data: 10 years after last consultation
- Technical data: 13 months maximum
- Cookies: according to their type (see our Cookie Policy)
9. Your rights
In accordance with GDPR, you have the following rights:
- Access: obtain a copy of your data
- Rectification: correct inaccurate data
- Erasure: delete your data in certain cases
- Restriction: restrict processing
- Portability: retrieve your data in structured format
- Objection: object to processing for legitimate reasons
- Withdrawal of consent: at any time
To exercise your rights, contact us at: privacy@nursey.fr
10. Security
We implement appropriate technical and organizational measures:
- Encryption of sensitive data
- Restricted access to data
- Staff training
- Access monitoring
- Secure backups
11. Minors
Nursey does not intentionally collect personal data from minors under 16 without parental consent.
12. Modifications
This policy may be modified. We will inform you of important changes by email or notification in the application.
13. Contact and complaints
For any questions or complaints:
- Email: privacy@nursey.fr
- You can also contact the CNIL: www.cnil.fr