Privacy + HIPAA

The short version: your clinic owns your record, your words never train a model, and your reflections never leave the clinic's chart for an insurer or a data broker.

Your clinic is the controller

Nyra stores your reflections for the clinic that invited you. The clinic, not Nyra, is the data controller for your record. We hold the data on the clinic's behalf and under its instructions. We do not sell, share, or repurpose it.

Where your record lives

Each clinic chooses its hosting region during onboarding. If where your data lives matters to you, you can ask your clinic which region holds your record.

Never trained on

Your words are never used as training data for any model, ours or anyone else's. There is no bulk export of patient content for training, and the Terms forbid retaining your content for that purpose. This is a guarantee, not a setting you have to find.

What does not leave the clinic

Your reflections do not leave the clinic's record. Insurers do not get your raw text. There is no public feed, no family dashboard, and no caregiver portal. The only reader is the clinician your clinic assigned you to.

HIPAA posture today

Nyra runs in a non-PHI mode during its current phase. The build blocks PHI claims at every layer until external evidence, vendor agreements, and clinical governance are signed. Your clinic can tell you where it is in that process for your care. For the deletion and export mechanics that back the right to your data, see Your data.

Your rights, in practice

• Access. Export everything as plain JSON, any time.
• Erasure. Delete a single reflection or your whole account; once deleted, it leaves both your view and the clinician's.
• Portability. The export schema is open, so you can carry your record to a new clinic.

Next: Health signals.