Last updated: April 14, 2026
GDPR Notice: Nusli is based in Athens, Greece and operates under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019. As an EU-based controller, we are committed to protecting your rights under European data protection law.
Data Controller
The data controller for all Nusli applications is Nusli, based in Athens, Greece. You can contact us at for any data protection matters.
Information We Collect
Our apps are designed with privacy at their core. Data you enter — such as supplement logs, medication records, and health data — is stored locally on your device. Where you choose to enable optional cloud backup (via Sign in with Apple), your data is stored securely and encrypted, and is only accessible to you.
We may collect anonymous, aggregated usage statistics (such as crash reports) to improve app stability. This data is fully anonymised and cannot be used to identify you.
Legal Basis for Processing (GDPR Art. 6)
Where we process any personal data, we rely on the following legal bases: (a) your consent, where explicitly given; (b) our legitimate interests in improving app performance and preventing crashes; (c) compliance with legal obligations.
Advertising
Some free apps are supported by ads via Google AdMob. Google may use device identifiers to serve contextual ads. Under GDPR, personalised advertising requires your consent — our apps request this before showing personalised ads. You may withdraw consent at any time through your device settings.
In-App Purchases
Payment processing is handled entirely by Apple (App Store) or Google (Google Play) acting as independent data controllers. We receive only a transaction confirmation — never your payment details.
International Data Transfers
Some third-party services (Google, Apple) may transfer data outside the European Economic Area. Such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
Your Rights Under GDPR
As an EU resident you have the following rights, which you may exercise by contacting us at :
- Right of access — request a copy of your personal data
- Right of rectification — correct inaccurate data
- Right of erasure — request deletion of your data
- Right of restriction — limit how we process your data
- Right of portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — at any time, without affecting prior processing
Supervisory Authority
You may lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr.
Data Retention
Local data is controlled entirely by you. Anonymous crash data is retained for a maximum of 12 months.
Children's Privacy
Our apps are not directed at children under the age of 16. We do not knowingly collect data from minors.
Changes to This Policy
We will notify you of material changes through the app or this website.