What members control
Accounts, downloads and deletion choices.
Members create their own accounts independently. Employer seat activation is done by the employee — employers never know who activated.
Private account records aren't displayed to other members. Community posts are shared with the community. Service providers process information to run features; the Privacy Notice explains operator access.
Members can download the records included in their account export. Other access requests can go to our Privacy Officer.
Members can choose to keep tracking on this device only, from Account settings. Device-only check-ins don't sync to their account, and the Track pages link to that choice.
Members can request account deletion in account settings. Legal retention, backups and copies already shared are explained in the Privacy Notice.
What employers receive
Aggregate only. Never individual.
Employer and plan-administrator reporting is limited to aggregate usage summaries, such as redemption rate, active use percentage and feature engagement. Aggregate reporting isn't a guarantee of anonymity.
No names. No symptoms. No clinical information. No individual-level data of any kind.
30-minute review call to walk through the summary.
Formal reporting cadence and a named account contact.
What we don't do
Hard limits.
We don't sell member data or give private health records to advertisers, sponsors or brokers. Service providers process data to run Hello Nila.
We don't provide individual-level data to employers or plan administrators.
Online AI features send messages and relevant context to model providers to generate replies, even when chat memory is off.
We don't allow advertisers to target members based on their health data.
Compliance and legal
Where your data lives — and how it is protected.
Hello Nila is operated by Ask Nila Solutions Limited in BC, Canada. Account-saved records are held on servers; our application database is hosted on AWS Oregon (us-west-2). Some tools keep answers in the browser. Canadian privacy law governs how we handle data, and US law also applies to the servers. See the Privacy Notice for service providers and transfers.
Enterprise tier includes Data Processing Agreement (DPA) and Master Services Agreement (MSA) available on request.
Our Privacy Notice describes Canadian privacy obligations and rights for UK and EU members. Institutions should assess their own legal and procurement requirements with us before deployment; this isn't a certification of compliance with every public-sector privacy law.
Hello Nila provides education and wellbeing tools, not medical care. We don't claim HIPAA certification. Private account records aren't provided to employers; necessary service-provider processing and operator access are described in the Privacy Notice.
AI conversations: messages members send to Nila are processed by our model providers (Google and OpenAI) to generate a reply. They aren't shared with employers or plan administrators.
SSO integration available for Enterprise tier.
For research partners
Ethics-first collaboration.
No member data is shared without explicit individual opt-in.
Ethics-approved studies only.
Aggregate platform context available for study design purposes — never individual records.
Co-authorship framework available on request.
Questions about our data architecture, DPA, or compliance requirements? Contact us directly.
Privacy questions can also go to our Privacy Officer.