Consumer Health Data Privacy Policy

Last updated and effective November 3, 2026

This policy applies to residents of Washington and Nevada, and to anyone whose consumer health data we collect in Washington. It explains the consumer health data BlackGem LLC collects through the Noora app, as Washington’s My Health My Data Act and Nevada law require.

1Consumer health data we collect, and why

Biometric data from selfie verification. When you take your verification selfie, our service provider analyzes a few seconds of video of your face to check that a real person is at the camera (a liveness check). It then compares the face in your selfie with the faces in your profile photos, and later compares any photo you add or change with your selfie, by measuring facial features in each image to work out how similar they are. We keep your selfie and the results, but not the video or the face measurements. Our verification provider keeps a face print from your selfie to check you have only one account, as our Privacy Policy describes.

We use this data only to confirm that you are a real person and the person in your photos, which keeps fake profiles and impersonators off Noora. We collect it only with your consent, which we ask for in the app before the first check.

Photos, videos and voice recordings. Washington law may treat images of your face, including the short video our team watches when it checks a selfie, and recordings of your voice, as biometric data even when no measurements are taken from them. We collect your profile photos, stories and voice messages only to provide the profile, stories and messaging you ask for, and to screen photos and stories for content that breaks our rules. We never use them to identify you by your face or voice, except for the selfie verification above.

2Where it comes from

  • From you, when you take your selfie and add photos, stories and voice messages in the app.
  • From our service provider, which returns your selfie and the result of each liveness check and face comparison to us.

3Sharing

We don’t share or sell consumer health data with any third party or affiliate.

We disclose it only to service providers that process it on our behalf, under contract, to provide the features above:

  • Our verification provider, which runs the liveness check and face comparison, and screens photos and stories.
  • Our hosting provider, which stores your selfie, photos, stories and voice messages.

Other members can see your photos and stories and hear your voice messages as described in our Privacy Policy. They never see your selfie or any verification result.

4Your rights

You have the right to:

  • confirm whether we collect, share or sell your consumer health data;
  • access it, including a list of all third parties and affiliates we have shared it with;
  • have it deleted, including from our backups and by our service providers;
  • withdraw your consent. If you withdraw consent to selfie verification, our team checks your selfie against your photos by eye instead;
  • review your consumer health data and ask us to correct it.

To use these rights, email support@joinnoora.com with “Health data request” in the subject. You can also delete your account in the app under Settings. We will confirm your identity, usually by asking you to write from the confirmed email address on your account, and answer within 30 days. If we need more time, we will tell you why, and take no more than 45 more days.

If we deny your request, you can appeal by replying with “Appeal” in the subject. We will answer your appeal in writing within 45 days and explain our decision. If you are not satisfied, you can file a complaint with the Washington State Attorney General’s Office, or with the Nevada Attorney General’s Office.

5Changes to this policy

If we make a material change to this policy, we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires it. The date at the top shows when it last changed.

6Contact us

BlackGem LLC
Email: support@joinnoora.com