NoryaAI
Legal Last updated: March 2025

Privacy Policy

Norya privacy policy: what we collect, how we use data, PayTR, your KVKK/GDPR rights and how to contact us.

Read document Contact

Overview

Privacy at a Glance

At Norya (“we”, “us”), we respect your personal data. This Privacy Policy explains what data we collect when you use the Norya website and blood test analysis service, how we use it, who we may share it with, and your rights. We comply with Turkey's Law on Protection of Personal Data (KVKK), the EU General Data Protection Regulation (GDPR), and related legislation.

Highlights

Privacy at a Glance

This summary is provided for convenience. The full privacy policy below is the governing document.

What we collect

Contact information, account data, uploaded lab results, payment records, and technical data necessary to provide the service.

Why we use it

To deliver the analysis service, process payments, provide technical support, and meet legal obligations. We do not sell your data for advertising.

How long we retain data

Data is retained while your account is active. On deletion request, data is removed except where legal retention requirements apply.

Payment information

Credit card details are never stored on our servers. Payment processing is handled by PCI-compliant providers.

Uploaded files

Lab results you upload are processed to generate your analysis report. Files are handled with access controls and encryption in transit.

How to contact us

For privacy inquiries, contact [email protected] or use our Contact page.

Data deletion

You can request deletion of your account and data at any time. We process requests in accordance with applicable data protection regulations.

Full text

Privacy Policy

1

1. Data Controller

The data controller for the service and your personal data is Norya. Contact: [email protected]. You can also send requests via our Contact page.
2

2. Data We Collect

Identity and contact: Name, email, (optional) phone and country.
Account: Your password is stored hashed; we do not store plain-text passwords.
Test and report data: Lab result text you paste or upload, and the generated analysis report. This is processed to provide the service; reports may be stored in association with your account.
Payment: Payments are processed via PayTR. Card numbers are not stored on Norya servers; only order ID, amount and payment status are recorded.
Technical: IP address, session duration, error logs (for security and quality), browser type. Cookies are described below.
3

3. Purposes of Use

Collected data is used to provide the service (account creation, login, report generation, payment confirmation, granting credits), security (preventing unauthorized access and abuse), legal obligations, password reset and email verification. Your data is not sold or shared for advertising targeting.
4

4. Cookies and Similar Technologies

The site uses necessary cookies for session management and security. If we use optional tools such as Google Analytics (anonymous/measurement), this is disclosed on the site. You can restrict cookies in your browser settings; this may affect some features.
5

5. Sharing of Data

Your data is shared only (i) with subcontractors necessary to provide the service (hosting, payment provider PayTR, email delivery), (ii) where required by law (court order, authority request), or (iii) with your explicit consent. Payments are processed by PayTR; PayTR's own privacy policy applies.
6

6. Retention

Your data is retained while your account is active. On account deletion request, we delete or anonymise your data except where legal retention (e.g. tax, business records) applies. Only necessary information may be kept until legal periods expire.
7

7. Security

Your data is transmitted over TLS/SSL. Passwords are hashed using secure methods; sensitive health-related data is processed only as necessary to provide the service, for the minimum period and scope required.
8

8. Your Rights (KVKK / GDPR)

Under KVKK and GDPR you have rights of access, rectification, erasure, restriction of processing, data portability and objection. If you are in the EU you may lodge a complaint with a supervisory authority. Send requests via our Contact page or [email protected]; we will respond within legal timeframes.
9

9. Children

Our service is not directed at persons under 18. We do not knowingly collect personal data from under-18s. If we identify such data we will delete it.
10

10. Policy Changes

When this policy is updated it will be published on the site; material changes may be announced by email or site notice. Continued use constitutes acceptance of the current policy.

Note

Norya — Service that explains blood test results in plain language. Not a substitute for medical diagnosis.

Ask a question
WhatsApp