Privacy Policy

Last updated: June 2026

1. Who We Are

Nuhara is a wellness marketplace operated by Connor Nühsmann. This policy explains how we collect and use your personal data when you use our platform at nuhara.co.

2. Data We Collect

We collect the following when you use Nuhara:

  • Account information — name, email address, and profile photo, provided via Clerk authentication (Google or email sign-in)
  • Listing information — service descriptions, photos, pricing, and location data provided by Practitioners
  • Booking information — dates, amounts, and status of bookings, including any notes you add for the Practitioner
  • Messages— the content of messages you send to other users through the platform's in-app chat
  • Payment information — processed by Stripe; we never store your card number or bank details
  • Usage data — pages visited and actions taken, used to improve the platform

3. How We Use Your Data

We use your data to:

  • Create and manage your account
  • Process bookings and payments
  • Send booking confirmations, reminders, and review prompts by email
  • Display your listings to other users
  • Improve and troubleshoot the platform
  • Comply with legal obligations

4. Legal Bases for Processing

We process your personal data on the following legal bases:

  • Contract performance: We process data that is necessary to provide our services, including account creation, booking management, and payment processing.
  • Legal obligations: We process data where required to comply with applicable laws, including tax, accounting, and regulatory requirements.
  • Legitimate interests: We process data where necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights.
  • Consent: Where we rely on your consent to process data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Third-Party Services

We use the following trusted third parties to operate Nuhara:

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. This occurs because some of our service providers — including Stripe (payments), Clerk (authentication), Cloudinary (image storage), and Resend (email delivery) — operate infrastructure outside the EEA. Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms. By using Nuhara, you acknowledge that your data may be processed outside the EEA under these safeguards.

7. Data Sharing

We do not sell your personal data. We share data only with the third-party services listed above, as needed to operate the platform, and with legal authorities if required by law.

When a Seeker books a session, their name and contact information is shared with the Practitioner to facilitate the booking.

8. Data Retention

We keep your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Payment records may be retained for up to 7 years for legal and tax purposes.

9. Your Rights

Depending on your location, you may have rights including: access to your data, correction of inaccurate data, deletion of your data, and the right to object to certain processing. To exercise any of these rights, reach us through our contact form.

10. Additional Rights Under GDPR

In addition to the rights already described in this Privacy Policy, you have the following rights under GDPR:

  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
  • Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a complaint is being investigated.
  • Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
  • Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. In Germany, the competent authority is the relevant state data protection authority (Landesdatenschutzbehörde) or the Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit — BfDI).

11. Cookies

Nuhara uses essential cookies for authentication (via Clerk) and session management. We do not use advertising or tracking cookies.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by a notice on the site.

13. Contact

Questions or concerns about your privacy? Reach us through our contact form.