Privacy

Last updated 18 October 2026.

Nessa helps a family keep a day board true for someone living with memory problems such as dementia: one photo and one short line on a screen at home, kept up to date from a phone. This page explains what we keep, why, who helps us run Nessa, how long we keep things, and what you can ask of us.

Who we are

Nessa is run by Laive Health. We decide how this information is used, which makes us the “controller” under UK data protection law. For anything about your data, or Nessa generally, email laivehealth@gmail.com.

Whose information this is

• You, the family carer who signs up and keeps the board true.
• The person the board is for. Their routine, who visits them and how often they phone you say something about their health, so we treat all of it as health information and handle it with extra care.
• Visitors whose names and photos you add, such as a carer, a neighbour or a grandchild. Please only add someone with their agreement.

What we keep

• Your email address, to sign you in. We never show it to anyone else.
• The name your family uses for the person (like “Dad”), their time zone, and that you confirmed you have permission to set up Nessa for them.
• The people, places and activities you add: names, what the board calls them, a role (such as “daughter”) and a photo.
• Photos you upload. We shrink them and remove location and camera details, on your phone and again on our server. If you choose a picture from Nessa's own library instead, that is an everyday free-licence picture we provide; it holds nothing about you.
• The plan for each day and repeating visits: who or what comes next, roughly when, and the short lines the board shows. We keep past days so you can look back.
• The person's own words for things (“fridge” to “blue dot”), and board settings: the end-of-day line and photo, whether the time shows under the card, and whether a clock and date show in the corner.
• Taps on Live Day (moving the day on, “running late”), and when the board last checked in and which card it showed.
• If you log calls: when the person phoned, the reason you pick (what's next, needed help, worried or upset, just to chat, something else), and an optional note of up to 200 characters. A note may say how the person was, so it is health information too. With each call we keep what the board showed at that moment, to see whether the board is helping.
• For “Say the day”: only that it was used, how long the text was, whether it worked and whether you accepted the plan. Never the words you typed or the answer.
• Security records: a scrambled form of your sign-in cookie, and scrambled forms of email and internet addresses that asked for sign-in links (never the addresses themselves), kept for at most a day.

Each family's information is kept apart: nobody else using Nessa can see it. Photos you upload are seen only by your family's phones and board.

Why we may use it

• Your own details (email, sign-in): to provide Nessa, the service you asked for.
• The person's information (their routine, calls, words and photos, which is health information): with their explicit consent, or the consent of someone who can legally decide for them, such as their attorney under a health and welfare lasting power of attorney. You confirm this when you set up the board. If that permission is withdrawn, tell us and we delete the family's information.
• Visitors' names and photos: in the family's legitimate interest in a board that shows who is coming, added with the visitor's agreement.
• Security records and simple usage counts: in our legitimate interest in keeping Nessa safe and learning whether it helps. These hold no names, emails, photos or board lines.

We don't sell data, show adverts, or use your family's information to train AI. Nessa makes no decisions about anyone by itself: “Say the day” only suggests a plan, and nothing changes until you accept it.

Who helps us run Nessa

These companies process data for us under data processing agreements, and only to run Nessa:

• Vercel runs the website, on servers in London. It keeps short-lived request logs (which page was asked for, and when).
• Supabase holds the database, in London.
• Resend sends the sign-in emails, from Ireland. It sees your email address and the email.
• OpenAI reads what you type into “Say the day” to suggest a plan. Before your words leave us, we swap the names already saved in your family's list (people, places and the person's own name) for codes like P1. Names you haven't saved yet go as you typed them, so leave out anything you wouldn't want shared. OpenAI doesn't store the request for later use or train on it; under its terms it may keep it for up to 30 days to check for abuse. Nothing else goes to OpenAI: no photos, emails or call logs.
• PostHog counts how Nessa is used, on its EU servers in Frankfurt. See below.

Analytics

On the home page and the sign-in page only, PostHog counts page views. It sets no cookies and stores nothing on your device, so each visit counts as a new, anonymous visitor. It doesn't record your screen or what you type, it doesn't keep internet addresses or look up where you are, and page addresses go without anything after the “?”. The board, the carer's app and the call log send nothing to PostHog.

Our server also tells PostHog when a few things happen, such as a family signing up, planning a day, connecting a board, logging a call or using “Say the day”. Most counts carry a random number standing for the family; calls logged and taps on Live Day don't even carry that, so no family's calls can be traced there. No count carries a name, email, photo, board line, note or plan. PostHog keeps these counts for a year.

How long we keep it

• Your family's information: until you ask us to delete it or your family stops using Nessa.
• Photos you replace or remove: deleted once no day uses them. People and places you archive stay so past days still make sense, until you ask us to delete them.
• Sign-in links and codes: deleted after a day. Sign-ins last up to 180 days.
• Security records: a day. Analytics counts: a year. Vercel's logs: a short time.

What you can ask

You can ask us, at any time and free of charge:

• for a copy of your family's information;
• to correct something that's wrong;
• to delete everything, or part of it;
• to stop or limit how we use it, or to object to it;
• for your information in a form you can take elsewhere.

Email laivehealth@gmail.com. We may need to check it's you, and we'll answer within one month. When we delete your family's account, its people, places, photos, words, plans and calls go from our database. A board screen or phone that already showed a photo may keep its copy until that browser clears its stored data.

If you're unhappy

Please tell us at laivehealth@gmail.com and we'll try to put it right.

Information outside the UK

Nessa runs in London. Resend sends emails from Ireland and PostHog is in Germany, both covered by UK adequacy rules. Some of the companies above are based in the United States, and OpenAI handles “Say the day” there. Where information leaves the UK, it is protected by UK adequacy rules or by the UK transfer safeguards in each company's data processing agreement.

Children

Nessa is for adults. You must be 18 or over to sign up, and we don't knowingly collect information from children. If a child's photo is added as a visitor, the adult who added it is responsible for having permission.

Cookies and your device

One cookie keeps you signed in. It holds a random code, nothing about you, and is needed for Nessa to work. The board keeps its own copy of the coming days and their photos on its screen, so it keeps working without the internet; making a new board link clears the old screen's copy the next time it connects. The call log keeps calls on your phone until they're sent. No tracking or advertising cookies.

Keeping it safe

Sign-in is by an emailed link or 6-digit code, with no passwords to steal. Sign-in links, codes and cookies are stored only in scrambled form. Each family's information is walled off from every other family's in the database, and connections are encrypted.

Changes

If we change how we use your information, we'll update this page and its date, and tell you by email about anything important. Read our terms too.