N1 Trial
Privacy Policy
This policy exists in English and in Danish. The two versions say the same, and both apply.
Contents
- Who is responsible
- What this policy covers
- The data we process
- Why we process it, and on what legal basis
- The AI collaborator
- Anonymised research (opt-in)
- Where your data lives
- Who else receives data
- How long we keep data
- How we protect data
- Your rights
- Children
- Changes to this policy
- Contact
1. Who is responsible
N1trials ApS, CVR no. 46464753, Hørhavevej 46, 8270 Højbjerg, Denmark, is the data controller for the processing described in this policy. Contact: privacy@n1trial.com.
2. What this policy covers
This policy covers the N1 Trial mobile app and the website n1trial.com, including the early-access sign-up on the website. It also covers the optional account email and the optional "About you" details you can add in the app. It does not cover the wearable vendor's own platform (for example your Oura, Whoop, Fitbit or Polar account): the vendor is an independent controller of the data it holds about you, under its own privacy policy. This policy describes what happens from the moment you authorise us to receive measurements.
3. The data we process
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | During the testing phase: a personal access code and the name label attached to it, or the account the app makes on your phone. | You, or the person who invited you; the app. |
| Account email (optional) | The email address you add to sign in on another phone, the language we write to it in, and when you confirmed it. Nothing in the app requires one. | You, in the app, on the Account screen's Profile tab or on the sign-in screen. |
| Sign-in codes | When you add an email, sign in with it on another phone, or set one up when you sign in, we send a 6-digit code to that address. We keep a record of each code we send: the address it was sent to (even if you did not confirm it), when, what it was for, and a scrambled form of the code (never the code itself). | Generated when you ask for a code. |
| Phones signed in to your account | For each phone signed in to your account: whether it is an iPhone, an Android phone or the web, when it was added and roughly when it was last used (to the hour). No phone model and no device identifiers beyond what is needed to keep it signed in. | The app, when a phone signs in. |
| About you (optional) | Your name, your age in years and your weight in kilograms, if you choose to enter them. We also keep the date you entered your age, so the age shown can advance on its own. Weight is health data. | You, in the app, on the Profile tab. |
| Health and wearable measurements | Daily values for: sleep duration, sleep stages (deep, REM, light, awake), sleep efficiency, resting heart rate, heart-rate variability (rMSSD and SDNN), steps, body weight, blood oxygen, respiratory rate and skin-temperature deviation. | Your connected wearable, through the vendor's cloud service or your phone's health store, only after your consent. |
| Self-reported data | Your daily check-in answers and ratings, and the outcomes, interventions and schedules of your trials. | You, in the app. |
| Conversations | Your messages with the AI assistant while designing a trial, and the assistant's replies. | You, in the app. |
| Early-access sign-up | Your email address, the country you live in, the language you used on the website, whether the country was suggested by the form or chosen by you, and which version of the consent text you agreed to and when, and, if the link you followed to the form carried campaign details (such as the links we share on LinkedIn), the name of the campaign and where the link was shared (for example "linkedin"). We do not record which pages you visited or where you came from otherwise. | You, on n1trial.com/early-access. The form suggests a country from your browser's time zone; you confirm or change it. Any campaign details come from the address of the link you followed. |
| Technical and diagnostic data | Request logs and error reports carrying identifiers for your account and your requests, timestamps, app version and the type of request. By design, our logs never contain your messages, your measurements or other health values. | Generated when the app talks to our servers. |
Settings kept in your browser. The website remembers two choices you make on it, light or dark appearance and English or Danish, in your browser's local storage (under the names "n1trial-theme" and "n1trial-lang"). They stay on your device and are not sent to us or linked to you. (If you sign up for early access, the language you used is recorded with your sign-up, as the table above says.) They remain until you make a different choice or clear the website's data in your browser. Because they only remember something you asked the website to do, we do not ask for consent to store them. The website stores nothing else in your browser and sets no cookies of its own.
What stays on your phone. If you start signing in with email and close the app before you finish, the app keeps the address you typed and the state of the attempt in your phone's secure storage so that it can carry on. It is removed when the sign-in finishes or is cancelled. We cannot read it.
4. Why we process it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing the Service: running your trials, computing your results, showing you your data | All categories above, except where a row below gives another basis | Art. 6(1)(b), performance of a contract; for health data, your explicit consent, Art. 9(2)(a) |
| Importing measurements from your wearable | Health and wearable measurements | Your explicit consent, given in the app when you connect a device (Art. 6(1)(a) and 9(2)(a)) |
| Sending what you write in the trial designer to Mistral AI so it can write the replies, and, when you start a trial while others are running, asking it whether the new trial might affect them | Your messages in the trial designer; the new trial and the trials you are running: their questions, changes, measures and planned end dates | Your explicit consent, given in the app before you first use the trial designer (Art. 6(1)(a) and 9(2)(a)) |
| Letting the AI assistant see your measurement history while designing a trial | A daily-level summary of your measurements | A separate explicit consent, given in the app (Art. 6(1)(a) and 9(2)(a)) |
| Anonymised research (section 6) | Anonymised trial outcomes | A separate opt-in consent (Art. 6(1)(a) and 9(2)(a)), until anonymisation is complete; anonymised data is no longer personal data |
| Telling you when N1 Trial is available in your country, and inviting you to try it | Early-access sign-up | Your consent, given on the sign-up form (Art. 6(1)(a)). Withdraw it at any time by writing to privacy@n1trial.com. |
| Seeing which of our campaigns lead to sign-ups | Early-access sign-up: the campaign name and source, if any | Legitimate interest, Art. 6(1)(f): knowing which outreach works, using only what was in the link |
| Keeping the Service reliable and secure: diagnostics, error reporting, abuse prevention | Technical and diagnostic data only; for the sign-up form, also your IP address, held briefly in memory to limit repeated sign-ups and never stored | Legitimate interest, Art. 6(1)(f); these logs exclude health data by design |
| Letting you sign in to your account on another phone with your email, and keeping your trials | Account email, sign-in codes, phones signed in to your account | Your consent, Art. 6(1)(a), which you give by adding your email and can withdraw by removing it |
| Telling you when your address is replaced or removed or when a new phone signs in | Account email | Legitimate interest, Art. 6(1)(f): keeping your account secure |
| Limiting how many codes can be sent, to prevent abuse | Sign-in codes | Legitimate interest, Art. 6(1)(f): preventing abuse of the service |
| Showing you your signed-in phones and letting you remove one | Phones signed in to your account | Art. 6(1)(b), performance of a contract; Art. 6(1)(f) for keeping a record that a removed phone is no longer allowed |
| Addressing you by name in the app | Name | Your consent, Art. 6(1)(a), which you give by entering it |
| Showing you your age and weight | Age, weight | Your consent, Art. 6(1)(a), which you give by entering them; for weight, which is health data, your explicit consent, Art. 9(2)(a), which you give by entering it |
| Meeting legal obligations | What the obligation requires | Art. 6(1)(c) |
Each consent you give with a switch or a button in the app is recorded with the exact wording you saw and the time you gave it, and each can be withdrawn in the app, separately, at any time. Withdrawing a consent stops the processing it covered; it does not undo processing that already happened.
The email, the name, the age and the weight work differently: they are all optional, and entering one is how you consent to us keeping and using it for the purpose in the table above. There is no separate switch to record. To withdraw that consent, remove or clear the detail in the app at any time. If you do not enter them, the app works as before. We use your email for sign-in and for the notices above, and for nothing else: we do not send marketing and we do not show your address to anyone.
5. The AI collaborator
The trial designer is powered by a language model from Mistral AI, a French company, called from servers in the EU. Before you first use it, the app asks for your consent to this. What is sent to Mistral is the conversation itself and, only if you have given the separate consent, a daily-level summary of your recent measurements (for example, your average sleep over the last 30 days). Raw measurement streams are not sent. When you start a trial while others are running, we also ask the model whether the new trial might affect them; for that it sees the new trial and the ones you are running: their questions, changes, measures and planned end dates. No name, email address or account identifier accompanies these prompts, and neither do the About you details you enter. We use a fixed, dated model version, and our Mistral account is configured so that our data is not used to train models.
You can withdraw your consent at any time under Account › Data › Consents. Without it, the trial designer can't be used and the check against your running trials is skipped, but the rest of the app works as before, including starting ready-made trials.
6. Anonymised research (opt-in)
If you opt in, completed trials can contribute to anonymised, aggregated research about which changes tend to help which kinds of questions. Contributions are stripped of identifiers and combined with others so that they no longer relate to an identifiable person. This is optional, off by default, and switching it off stops future contributions. Anonymised aggregates that already exist cannot be traced back to you and therefore cannot be recalled.
7. Where your data lives
All personal data, including all health data, is stored and processed within the European Union, on infrastructure in France operated by Scaleway. This includes our own servers, our database, and the self-hosted service we run for receiving wearable data. AI processing (section 5) also stays in the EU. Keeping your data under European law is a deliberate part of how the Service is built, not an incidental hosting choice.
8. Who else receives data
| Recipient | Role | What they process | Where |
|---|---|---|---|
| Scaleway SAS | Hosting (processor) | Everything we store | France |
| Mistral AI SAS | AI processing (processor) | Conversations; measurement summaries with consent | France / EU |
| Bugsink (Dutch provider) | Error reporting (processor) | Technical error reports; no health data | EU, per its data-processing agreement |
| Scaleway SAS (Transactional Email) | Email delivery (processor) | Your email address, the subject and text of the code and notice emails we send you (the code email contains the 6-digit code), and delivery status. No trial or health data. | France |
| Expo (EAS) | App update delivery | Your device downloads app updates from Expo's content network, which sees your device's IP address the way any download does. We send Expo no personal or health data for this. | United States (content delivery only) |
| Expo, then Apple (iPhone) or Google (Android) | Push notification delivery, only if you allow notifications | A token that identifies the app on your phone, and a short general message such as "Your results are in!" with an internal reference. No measurements or other health values. | United States |
| Your wearable vendor | Independent controller | Your data on their platform, under their policy; we receive from them at your instruction | Per vendor |
We do not sell personal data, we do not share it with advertisers, and we do not transfer health data outside the EU/EEA. Processors act under data-processing agreements and only on our instructions. If disclosure is ever required by law, we disclose the minimum required.
Scaleway's mail service may keep a record of what was sent (the recipient address, subject, time and delivery status) after a message is delivered, so an address can remain in those records after you remove it from your account. We can ask Scaleway to delete the records for your address; write to privacy@n1trial.com.
9. How long we keep data
- Measurements, trials and conversations: for as long as you have an account, because your history is the substance of the Service. Deleted when your account is deleted, except where law requires longer retention.
- Early-access sign-ups: 6 months from your most recent sign-up, then deleted, together with any campaign details. Signing up again starts the 6 months over. We delete it sooner if you withdraw your consent.
- IP addresses used to limit repeated sign-ups: at most 24 hours, in memory only; we do not write them to our database or our logs.
- Account email: for as long as you have an account, unless you remove it first. Removing it deletes it from your account record straight away; a copy can remain in the sign-in code records below for about a day. With it we keep how many wrong sign-in codes were entered for your account this month, so we can stop someone guessing; the count starts again each month.
- Sign-in code records: about a day after the code expires (a code lasts 30 minutes), then deleted. They are kept that long so we can limit how often codes are sent. The record includes the address a code was sent to, even if the address was never confirmed.
- Phones signed in to your account: while the account exists. A phone you remove stops working at once; we keep a record that it was removed so that it cannot sign in again.
- Name, age, weight: while you have an account, unless you clear them first.
- Records at Scaleway's mail service: for the period Scaleway keeps them (section 8). We cannot delete them ourselves; we can ask Scaleway to.
- What stays on your phone: the half-finished sign-in is removed when you finish or cancel it.
- Consent records: for as long as needed to demonstrate that processing was lawful.
- Server logs and traces: 7 days.
- Error reports: the window set by our error-reporting provider's agreement; being confirmed, and this policy will state it once fixed.
- Backups: database backups expire within 14 days. If we ever restore from a backup, we re-apply account deletions and deletion requests made after it was taken, so that data does not come back. Details you remove or clear yourself in the app are different: an email, name, age or weight you removed or cleared can still exist in a backup for up to 14 days, and could come back if we restored from a backup taken before you removed it.
- Deletion requests: when you ask us to delete your data, we keep a record of the request and of what was done (reference, dates, counts; never your measurements, messages or other health data) for 12 months after completion, so we can demonstrate that we carried it out.
- Testing phase: data collected under a tester access code may be deleted when the testing phase ends.
10. How we protect data
Connections are encrypted in transit. Access to production systems is limited to the people who operate them and protected by SSH keys and secret management. Diagnostic logging is designed so that message content and health values cannot enter logs. Consent wording is versioned so that we can always show which text you agreed to. No system is perfectly secure; if a breach ever affects your data in a way that puts your rights at risk, we will notify you and Datatilsynet as the GDPR requires.
11. Your rights
Under the GDPR you can ask us for: access to your data, correction, deletion, restriction of processing, a portable copy, and to object to processing based on legitimate interest. You can withdraw any consent in the app at any time. Write to privacy@n1trial.com; we answer within one month. For unusually complex requests the GDPR lets us extend by up to two further months, and we tell you within the first month if that happens. Deleting your account removes the data listed in section 3, including your data in our wearable service; the narrow records that survive, and for how long, are exactly those listed in section 9. The copy your wearable vendor holds on its own platform is governed by their policy and must be deleted with them.
In the app you can remove your email (Account, Profile), remove any phone signed in to your account (Account, Profile, "Phones signed in to your account"), and clear your name, age and weight (Account, Profile, "About you"). To delete your account and everything in it, tap "Delete" under Account, Data, "Your data", or write to privacy@n1trial.com. The app sends your request to our privacy team and locks your account on every phone signed in to it. The deletion itself is carried out by hand, within one month; if your account has an email, we write to you when it is done. We keep a record of the request as section 9 describes.
You can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk, or to the supervisory authority where you live.
12. Children
The Service is for people aged 13 and over. It is not for children under 13, and we do not knowingly process data about them. If we learn that a child under 13 has used the Service, we delete their data.
13. Changes to this policy
When we change this policy materially, we tell you in the app or by email before the change takes effect, and we keep earlier versions available on request. The effective date at the top always tells you which version you are reading.
14. Contact
N1trials ApS · CVR 46464753 · Hørhavevej 46, 8270 Højbjerg · privacy@n1trial.com