Privacy Policy
How Noula collects, uses, and protects your information.
Last updated: April 2026 (v1 — this document will be reviewed by counsel before general availability).
1. Introduction
Noula Care Inc. ("Noula", "we", "our") operates the Noula on-demand home care platform. We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what we collect, how we use it, and the rights you have under the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and applicable U.S. state privacy laws.
2. Information We Collect
We collect information you provide directly (name, email, phone number, address, care recipient details, payment information), information generated by your use of the service (bookings, messages with companions, visit notes, GPS location during visits when permission is granted), and device/log data (IP address, browser type, pages visited, timestamps). Background check data for companions is collected through Certn and retained per statutory requirements.
3. How We Use Your Information
We use your information to deliver the care service, match families with companions, process payments and payouts, send booking and account notifications (email, SMS, push), prevent fraud and abuse, comply with legal obligations, and — only where permitted — to improve Noula's products. We do not sell your personal information to third parties.
4. Third-Party Processors
We rely on trusted processors who handle your data under contractual safeguards: Supabase (PostgreSQL hosting, authentication), Stripe (payment processing and instant payouts), Twilio and Resend (SMS and transactional email), Vercel (web hosting), Google Maps / Mapbox (mapping and ETAs), and Certn (companion background checks). Where our processors are located outside your country of residence, we rely on standard contractual clauses and other approved transfer mechanisms.
5. Health Plan & Employer Benefit Data
If your visits are covered by a health plan or employer benefit, we share only the minimum information required to administer that benefit (visit occurrence, service type, duration, high-level summary). We do not share in-visit chat content or sensitive care details unless required by law or specifically authorized by you.
6. Your Rights
You have the right to access a copy of your personal information, correct inaccuracies, request deletion (subject to legal retention obligations), and receive your data in a portable format. You can exercise these rights from your account settings or by emailing privacy@noula.app. We respond to verified requests within 30 days.
7. Retention
We retain booking and payment records for seven years to meet tax and audit requirements. Background check records are retained per provincial and state regulation. Chat messages and visit notes are retained for two years after the last visit unless you request earlier deletion, subject to incident-related holds.
8. Security
We encrypt personal data in transit (TLS 1.2+) and at rest for sensitive fields (payment tokens, SIN/SSN, health information). Access is restricted by role-based permissions and logged through an admin audit trail. We test our posture against SOC 2 and ISO 27001 control families. No system is perfectly secure, but we work hard to keep yours safe.
9. Children
Noula is intended for adults 18 and older. Care recipients may be minors in certain childcare scenarios, but accounts are held by a responsible adult. We do not knowingly collect personal information directly from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced in-app and by email at least 14 days before they take effect. Continued use of Noula after the effective date constitutes acceptance.
11. Contact
Privacy questions, requests, or complaints: privacy@noula.app. Our mailing address and designated Privacy Officer details are available on request. You may also contact the Office of the Privacy Commissioner of Canada or your applicable U.S. state attorney general's office.