Privacy Policy
This policy explains what data we collect when you visit noomay.com, buy a Noomay Ring, or use the Noomay app — and what we do with it. We sell worldwide, so we wrote it to meet the privacy laws of every country we sell in, in plain English.
The data controller is Adonis Group LLC, trading as Noomay, 1507 Lampman Ct, Cheyenne, Wyoming 82007, United States of America. Contact: help@noomay.com.
Your health data comes first
The Noomay Ring measures signals from your body: heart rate, HRV, blood oxygen, skin temperature, movement, and sleep. The app turns them into insights about your sleep, stress, energy, recovery, and cycle. This is health data, and we treat it with the strictest protection the law offers:
- We ask for your explicit consent in the app before we collect it, separately from anything else. You can withdraw that consent at any time in the app settings.
- We never sell your health data. Not to advertisers, not to data brokers, not to anyone.
- We never use your health data for advertising, and we never share it with the advertising platforms listed below.
- We use it for one purpose: showing you your own insights and recommendations in the app, and improving how accurately the ring reads your body.
- You can see, export, and delete your health data at any time — in the app, or by emailing help@noomay.com.
Cycle tracking is optional. You choose whether to turn it on, and you can delete cycle data on its own at any time.
Other data we collect
- When you place an order: your name, shipping address, email, phone number, and payment details. Payments are processed by secure payment providers — we never see or store your full card number.
- When you create an account in the app: your email, and the profile details you choose to add (such as age range or height) so insights fit you better.
- When you visit our website: device and browsing information collected through cookies (see below).
- When you subscribe to our emails or texts: your email address or phone number. Every message includes an unsubscribe link, and texting STOP always works.
- When you leave a review or contact support: what you write to us and the details needed to answer you.
How we use your data
- Deliver your order, your refunds, exchanges, and warranty replacements.
- Run your account and show you your insights in the app.
- Answer your questions at help@noomay.com.
- Send marketing you signed up for — and stop the moment you unsubscribe.
- Measure and improve our website, products, and app.
- Prevent fraud and meet our legal obligations.
Legal bases (GDPR)
Where the GDPR or a similar law applies, we rely on: your explicit consent for health data (Article 9) and for marketing and cookies; the contract between us for orders, delivery, and running the app; legal obligations for tax and accounting; and legitimate interests for security, fraud prevention, and basic analytics.
Advertising and analytics on our website
Our website uses these third-party tools. They receive website browsing data only — never data from your ring:
- Meta (Facebook and Instagram) — measures our ads and shows you relevant ones.
- Google Analytics — tells us how visitors use our site.
- Google Ads — measures our Google advertising.
- TikTok Pixel — measures our TikTok advertising.
- Microsoft Clarity — helps us see where the site is confusing, so we can fix it.
- Shopify — runs our store and its analytics.
Where your country requires it, these tools only run after you accept them in the cookie banner, and you can change your mind at any time. You can also opt out on our Your Privacy Choices page.
Cookies
Cookies are small files that keep your cart working, remember your preferences, and (with your consent where required) measure our marketing. You can delete or block cookies in your browser at any time; the shop keeps working, though a few conveniences stop.
Who we share data with
We share data only with the companies that help us serve you: Shopify (our store platform), payment providers, shipping carriers, the cloud provider that hosts app data, email and support tools, and the analytics and advertising tools above (website data only). Each of them may only use your data to provide their service to us. We never sell your personal data. We disclose data to authorities only when the law requires it.
International transfers
We are a US company and our providers process data in several countries. When data leaves the European Economic Area, the United Kingdom, or Switzerland, we protect it with recognized safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep data
Order data: as long as tax and accounting law requires. Account and health data: as long as your account exists — delete your account and it is deleted with it, except the little the law makes us keep. Marketing data: until you unsubscribe. Support emails: as long as needed to help you.
Security
Health data is encrypted in transit and at rest. Access to it is restricted to the few people who need it to run the service. No system is 100% secure, but if a breach ever affects your data, we will tell you and the authorities as the law requires.
Your rights
Everyone, everywhere: email help@noomay.com and we will show you the data we hold about you, correct it, delete it, or export it. We answer within one month. You will never be treated worse for using your rights.
European Economic Area and United Kingdom (GDPR): you additionally have the rights to restrict or object to processing, to withdraw consent at any time without affecting past processing, and to complain to your data protection authority.
United States: depending on your state (including California under the CCPA/CPRA, and the states with consumer health data laws such as Washington's My Health My Data Act and Nevada's health data law), you have the rights to know, access, correct, and delete your data, and to opt out of the sale or sharing of personal information for targeted advertising. We do not sell personal data, and we do not sell or share consumer health data — full stop. Use our Your Privacy Choices page or email us to exercise any right, yourself or through an authorized agent, and you may appeal a decision by replying to our answer.
Canada (PIPEDA and Quebec Law 25): you have the rights of access and correction, and you can withdraw consent. Complaints go to the Office of the Privacy Commissioner of Canada or your provincial authority.
Everywhere else we sell — including Switzerland, Australia, Japan, South Korea, Singapore, Israel, the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, Kuwait, and Brazil — local privacy laws give you similar rights of access, correction, deletion, and consent withdrawal. Email us and we will honor them.
Data from your connected ring (EU Data Act)
If you are in the European Union, you can ask us for the data your ring generates, in a structured, machine-readable format, and ask us to share it with someone you choose. The export tool in the app covers most of this; for anything more, email help@noomay.com.
Children
Our store and app are not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child gave us data, email us and we will delete it.
Changes to this policy
When we change this policy, we update it here with a new date. For important changes — especially anything touching health data — we tell you in the app or by email first.
Contact us
Privacy questions or requests: help@noomay.com
Adonis Group LLC, trading as Noomay
1507 Lampman Ct, Cheyenne, Wyoming 82007, United States of America
Last updated: September 4, 2026