Noba Health AS,
Grensen 17, 0159 Oslo, Norway
Organization number: NO 921671202
Last updated: 10 January 2023
Noba is a data processor under the EU's personal data protection regulation (also called GDPR - General Data Protection Regulation). The users of Noba own their Personal Data, and consequently decide for themselves how the data is used. By using Noba, the user chooses which information is left in the service.
Personal Data includes both Personal User Data and Personal Health Data, both described below. Personal User Data means the following:
Personal health data means the following:
When you use the website https://noba.app and/or the Noba app and create an account, you typically provide some information. When you log into the service through Apple or Facebook, we will obtain contact information from them to create an account. This contact information includes name, email address and public profile picture, and is collected with your consent.
To give you access to premium content, we collect information from Apple, Google and Stripe about which subscription you have. We do not collect payment information, such as card number, invoicing information and payment method. This information is only with Apple, Google or Stripe.
Noba collects Personal User Data to be able to create a user profile in the app and to be able to deliver the service as agreed and expected. By using our services, we need to collect some information to provide you with a good user experience. We store the following data:
Here are the most important purposes for which we use the information:
We may also process personal data for other purposes that are not incompatible with those mentioned above, such as bookkeeping purposes or to handle any claims, complaints and disputes that may arise. The legal basis will be the fulfillment of legal obligations or our legitimate interest in establishing, defending or establishing legal claims.
We will at all times conduct our marketing in accordance with the applicable law. Here is an overview of how we typically conduct marketing:
By e-mail: We can send you newsletters, offers, invitations to events and other marketing if we have an existing customer relationship with you and so far the marketing applies to goods and services corresponding to our customer relationship.
On websites/social media: We may show you advertisements, invitations to events and other marketing on our websites, other people's websites and on social media, as long as we have given you good information about it and given you the opportunity to say no.
Information about popular products, most scanned products, etc. can be offered in Noba from information obtained about all users. This anonymised information can also be shared with third parties such as manufacturers or the grocery industry. The information we may share with third parties will not contain data that can be traced back to you.
It may become possible for you to share your logged health data with a professional, but this will only happen at your initiative.
Authentication: Firebase by Google
Statistics and user behaviour: Mixpanel
You have the right to deletion ("right to be forgotten") according to the Personal Data Act. If you choose to delete your account in the app, your account will be deleted immediately. It will not be possible to restore a deleted user. As a security measure, we have separated user information (account information) from user data generated in the app. Data you have generated in the app will therefore be anonymised when the account is deleted, so that it will not be possible to trace this back to an identifiable person.
Read more about the Personal Data Act here: https://lovdata.no/dokument/NL/lov/2018-06-15-38/KAPITTEL_gdpr-3-3#gdpr/a17
You have the right to control your own personal data. The right applies to information you yourself have provided to us, such as logging data, and states that you can have this data handed over in a machine-readable and commonly used file format for further use. You have the right to have the data handed over as quickly as possible and within one month at the latest. To exercise this right, contact us by email at email@example.com.
Read more about your right to data portability at the Norwegian Data Protection Authority: https://www.datatilsynet.no/rettigheter-og-plikter/den-registrertes-rettigheter/rett-til-dataportabilitet/
On the website, we use third-party cookies in relation to payment and use of the site:
Cookies are text files that the service stores on your computer. The files can only be read by Noba Health AS and by yourself.
You can prevent cookies from being stored on your computer by changing the settings in your browser. However, this may affect the functionality and quality of the services.
If you wish to avoid cookies from other parties without affecting the functionality of our website, it is possible in most browsers to only allow cookies from certain domains.
© Noba Health AS 2023
Org. nr.: 921 671 202