Privacy Policy

Nephra operates a cloud-based dialysis management platform used by clinics and healthcare providers. References to "we", "our", or "Nephra" in this policy refer to Nephra and its affiliates.

Account data: name, email address, and role provided during registration.

Clinical data: patient health records and treatment parameters entered by patients themselves, and session logs entered by authorised clinical staff.

Usage data: IP address, browser type, pages visited, and timestamps — collected via server logs and, on our public marketing pages only, Cloudflare Web Analytics, which is cookieless and does not run inside the clinical application.

We do not sell or share personal data with third parties for advertising purposes.

To provide and improve the Nephra platform.

To authenticate users and enforce role-based access control.

To send transactional emails (password resets, invitations).

To comply with applicable healthcare regulations.

The free-text machine configuration in a patient's profile is additionally encrypted by the application before it is stored. Structured treatment settings (such as blood and dialysate flow, heparin, dialyzer and machine brand) and all other data are stored in database columns protected by the storage layer's encryption at rest. Data in transit is encrypted.

We retain clinical data for as long as required by applicable healthcare law, and account data for 30 days after account deletion.

Under the EU General Data Protection Regulation (GDPR) and comparable laws, you have the right to access, rectify, port, and erase your personal data, and to withdraw consent. Patients can exercise the main rights directly from Settings → Privacy & my data: download a complete machine-readable copy of your data, record your consent, and erase your account (clinical and billing records that must be retained by law are anonymised so they can no longer identify you).

For any other request, contact us at [email protected]. EU/EEA residents may also lodge a complaint with their local data protection authority.

Our hosting and database providers process clinical and account data on our behalf.

Resend (transactional email — United States) receives the recipient's email address and the content of the emails we send: notifications such as appointment confirmations and, when a patient asks for a copy of their data, the export email, which contains their full record: clinical profile, active medications and upcoming appointments. Stripe (card payments) receives billing details for invoices paid by card; Nephra never sees card numbers. Cloudflare provides bot protection on public forms and cookieless analytics on marketing pages.

When you enable notifications in the mobile app, push notifications are relayed by Expo (United States) to Apple Push Notification service and Firebase Cloud Messaging (Google), which deliver them to your device. They receive your device's push token and the notification itself; notifications contain no health information, only generic text and identifiers. Application logs, which can include account identifiers such as email addresses, are hosted by Better Stack (Logtail).

Resend, Stripe, Cloudflare, Expo, Apple, Google and Better Stack may process personal data outside the EU/EEA, including in the United States. These transfers are made under each provider's standard contractual clauses. Apart from the processors listed here, we do not share personal data with third parties.

We may update this policy periodically. When we do, we will update the effective date above and notify users by email for material changes.