Privacy Policy
Effective date: June 29, 2026
This Privacy Policy ("Privacy Policy") describes the data protection practices of Nolu LLC ("Nolu," "we," "our," or "us"). We refer to the Websites, apps, and other services provided by Nolu together in this Privacy Policy as the "Services." This Privacy Policy is incorporated into our Terms of Service. All capitalized terms used in this Privacy Policy but not defined herein have the meanings assigned to them in the Terms of Service.
1. The Information We Collect and the Sources of Such Information
We obtain information about you through the means discussed below when you use the Services. Please note that we need certain types of information so that we can provide the Services to you. If you do not provide us with such information, or ask us to delete it, you may no longer be able to access or use part or all of our Services.
Information You Provide to Us
We collect a variety of information that you provide directly to us, for example through account registration and administration, processing your orders and requests for treatment, questions or feedback you submit, your participation in research or surveys, requests for customer support, uploads or posts to the Services, and employment applications. The types of data we collect directly from you include:
- Name, address, telephone number, date of birth, and email address.
- Information about your medical conditions, treatment options, lifestyle and personal preferences, prescriptions, medical photos, and lab results or other related health information, such as your physical and emotional characteristics.
- Log-in credentials, if you create an account.
- Billing and financial information, such as shipping address and payment card information, collected by our payment processors on our behalf.
- Identity verification information (e.g., a government-issued ID card or number) and your signature, if required.
- Information about purchases or other transactions with us, and your customer service interactions.
- Demographic information such as your gender, race/ethnicity, and age.
- Information about others, such as if you share a family member's or friend's contact information or name them as an emergency contact.
- User-generated content you post in public online forums or share with other users.
- Your location, and any other information you choose to directly provide to us in connection with your use of the Services.
Information We Collect Through Automated Means
When you use our Services, we and our service providers collect and analyze information such as your IP address, browser type and language, operating system, software and hardware attributes (including device IDs), referring and exit pages and URLs, the number of clicks, files you download, pages viewed and the order of those pages, the amount of time spent on particular pages, the terms you use in searches, the date and time you used the Services, your time zone, error logs, and other similar information. We and our service providers may also automatically collect general location information (e.g., IP address, city/state, or postal code associated with an IP address). We will ask your permission before collecting your precise GPS location information.
To collect this information, and with your consent where required, we and our service providers use web server logs, cookies, tags, SDKs, tracking pixels, and other similar tracking technologies. When you first access the Nolu Services, you will be prompted to accept, deny, or modify your cookie choices through our Cookie Consent. You may update your preferences at any time. Please also refer to our Cookie Notice below for more information on cookies.
Information We Collect From Social Media
When you "like" or "follow" us on social media platforms, we may collect some information from you, including your name, email address, and any comments or content you post relevant to us. If you access the Services through a third-party connection or log-in, you may allow us to have access to and store certain information from such third parties depending on your settings on those services.
Information We Receive From Other Sources
We work closely with third parties — including third-party service providers such as licensed clinicians, medical professionals, and pharmacies, as well as advertising networks, analytics providers, marketing partners, and search information providers — who will sometimes provide us with additional information about you.
2. Purposes for How We Use Your Information
In connection with providing you with the Services, unless you opt out through our Cookie Consent, we may use your information for our business purposes to:
- Carry out, improve, and manage the Services and, as applicable, facilitate the provision of health care services to you by licensed clinicians or other health care providers.
- Engage in internal research to understand the effectiveness of our Services and better understand our user base. If we publish or provide the results of this research, it will be presented in de-identified and aggregate form.
- Communicate with you about the Services, your use of the Services, or your inquiries, and send you communications on behalf of licensed clinicians, pharmacies, or other health care providers utilizing the Services.
- Communicate with you (in accordance with applicable legal requirements) by email, postal mail, or phone about surveys, promotions, special events, or our products and Services.
- Provide you with technical support and customer service, and troubleshoot any technical issues or errors.
- Verify your identity and administer your account, including processing your payments and fulfilling your orders.
- Provide you with more relevant advertisements and personalized content, and measure or understand the effectiveness of advertising and content we serve.
- Comply in good faith with procedures, laws, and regulations that apply to us, and establish, exercise, or defend our legal rights, including protecting against malicious, fraudulent, or illegal activity.
- Fulfill any other purposes disclosed to you at the time we collect your information or pursuant to your consent.
Any health information we collect about you may also be subject to additional protections under your state's laws. We will only use, process, and disclose that information, and will instruct any third party who processes that information on our behalf to use health data, in accordance with applicable laws and regulations in your state of residence.
Combined and de-identified information: We may combine the information we collect through the Services with information from other sources, both online and offline, and use and share such combined information in accordance with this Privacy Policy and your consent where required. We may also aggregate and/or de-identify any information collected through the Services so that it can no longer be linked to you or your device, and may use and share such Aggregate/De-Identified Information for any purpose.
3. Online Analytics and Advertising
Online Analytics
We may use third-party web analytics services (such as Google Analytics) on our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; and provide certain features to you. To prevent Google from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on. If you receive email from us, we may use analytics tools such as clear GIFs to capture data such as when you open our message or click on links, which helps us gauge the effectiveness of our communications.
Online Advertising
The Services may integrate third-party advertising technologies (e.g., ad networks and ad servers such as Meta, Google, and TikTok) that use cookies, pixels, and other technologies to deliver relevant content and advertising for Nolu products on the Services and on other websites you visit. These ads may be based on your current activity or your activity over time and across other websites and online services. If you do not wish to receive targeted advertising, please update your settings via the Cookie Consent. We sometimes provide customer information (such as email addresses) to service providers, who may "match" this information in de-identified form to cookies or mobile ad identifiers in order to provide you with more relevant ads. If you exercise the opt-out choices above or through the Cookie Consent, you will still see advertising when you use the Services, but it will not be tailored to you based on your online behavior over time.
SMS Communications
By providing your phone number and opting in to receive communications, you consent to receive recurring marketing and non-marketing text messages (SMS and MMS) from Nolu. Message frequency may vary, and message and data rates may apply. Reply STOP to unsubscribe from SMS messages. For help, contact us at support@app.trynolu.com. Consent is not a condition of any purchase, and you can opt out at any time.
5. Your Choices
You may request that we update or delete your personal information by sending us an email at legal@trynolu.com. We will use commercially reasonable efforts to correct or delete your information.
Opt out of communications: You may opt out of marketing-related emails by clicking the "Unsubscribe" link at the bottom of each such email. You may continue to receive service-related and other non-marketing communications. Disabling cookies: In addition to updating your preferences in our Cookie Consent, you may be able to refuse or disable cookies by adjusting your web browser settings; if you do so, some functionality of the Services may no longer be available to you. Do Not Track: Some internet browsers may be configured to send "Do Not Track" signals; we currently do not respond to Do Not Track signals.
6. Your Rights
Your local laws may permit you to request that we: prevent the processing of your information for direct-marketing purposes; update or rectify information that is out of date or incorrect; delete certain information we hold about you; oppose, cancel, or restrict the way we process and disclose certain information; transfer your information to a third-party provider of services; or revoke your consent for the processing of your information.
We will consider all requests and provide our response within the time period stated by applicable law. Certain information may be exempt from such requests in some circumstances. We may request that you provide us with information necessary to confirm your identity before responding. To exercise these rights, please email legal@trynolu.com and include your name, address (including the state where you reside), and email address so we can respond in the time frame required under your state's laws.
If you submit a request and we deny it, you may have the right to appeal by submitting your request with the subject line "Data Rights APPEAL" to legal@trynolu.com. You may also file a complaint with your state's attorney general. California residents may also have rights under the California "Shine the Light" law regarding the manner in which we share certain categories of personal information with third parties for their direct marketing purposes.
7. How We Protect Your Information
Nolu takes a variety of technical and organizational security measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, and unauthorized disclosure or access. However, no method of transmission over the internet, and no means of electronic or physical storage, is absolutely secure. As such, you acknowledge and accept that we cannot guarantee the security of your information transmitted to, through, or on our Services or via the internet, and that any such transmission is at your own risk. Where you have chosen a password that enables you to access the Services, you are responsible for keeping this password confidential.
8. Children
We do not knowingly allow individuals under the age of 18 to create accounts that allow access to our Services. If we learn that we have collected personal information directly from a child under the age of 13 through our Services, we will take reasonable steps to delete that information as soon as practicable. If you believe someone under the age of 13 has provided us with personal information, please email legal@trynolu.com.
9. Retention of Your Information
We keep your information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we use the information, whether we can achieve those purposes through other means, and applicable legal requirements.
10. Revisions to Our Privacy Policy
We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services. The date this Privacy Policy was last revised is identified at the top of the document. If we make a material change, we will provide you with appropriate notice in accordance with legal requirements. Your continued use of our Services after such amendments will be deemed your acknowledgment of these changes.
11. Contacting Us
If you have any questions or concerns about our Privacy Policy, or if you wish to submit a data subject access, deletion, or opt-out request according to the law of the state where you reside, please contact our privacy officer at legal@trynolu.com. Please be sure to include your name, address (including the state where you reside), and email address so we can respond to your request in the time frame required under your state's laws.