Nonicate · In development

Website privacy

Last updated September 8, 2026.

This notice covers Nonicate’s introductory website and email waitlist, not a patient application. Nonicate controls the signup information described here. Contact Jeffrey Duodu at jeffrey@nonicate.com with privacy questions or requests.

What we collect and why

When you join, we store your email address, trimmed and lowercased, the exact consent wording you agreed to, and the times you consented and signed up. We use this to save your place, send a welcome email and tell you when there is something to try. Joining does not create a patient account or enroll you in care. The waitlist is for adults 18 and older.

Promotional emails are a separate, optional choice. If you check that box, we keep a separate record of its wording, time and confirmation status. You must confirm through the email link before we send promotions. Leaving that box unchecked does not affect your waitlist place. Existing members are not automatically enrolled in promotions.

We also keep limited delivery and preference records: delivery status, attempt identifiers and times, confirmation or unsubscribe status, and an opaque server-generated identifier to avoid duplicate signups and honor your choices. We do not add a phone number, user agent, device fingerprint or IP address to your signup record.

Website requests and hosting

The form submits to this website’s own domain. Firebase Hosting routes it to our Google Cloud Function, which validates it and writes to a private Firestore database. We use the requesting IP transiently for an in-memory abuse check; our application does not persist that IP. Google still processes network and request information to operate and protect its infrastructure. Our application logs contain fixed event codes and counts, not submitted addresses or request bodies.

We do not embed advertising tags, visitor analytics, session replay, hosted forms or third-party widgets. A theme preference may be saved in your browser. No analytics does not mean no processing: see Google’s Firebase privacy information.

Who processes the information

Google Firebase and Google Cloud host the site, functions and database; Google Workspace’s Gmail service sends our emails and handles messages you send us. The signup database is in Google’s US Central region. Google may process service and email information elsewhere under its service terms. Your email provider also processes mail delivered to you. We do not use Amazon SES, a hosted-form service or an advertising platform for this waitlist.

We do not sell signup information or share it for cross-site targeted advertising. We may disclose information if required by applicable law, to protect rights or security, or at your direction. Access within Nonicate is limited to people who need it to operate the service.

Your choices

Our welcome email contains preference links. Unsubscribing from promotions stops promotional messages without removing your waitlist place. The separate leave-and-delete link removes your signup and promotional consent records. Merely opening a link does not make a change; use the button on the page. Email applications that offer one-click promotional unsubscribe can also submit that request.

You can instead email jeffrey@nonicate.com from the address you used to sign up to request access, correction, withdrawal or deletion. We may verify that you control the address before disclosing or changing information. Do not send identity documents, passwords or medical information in your initial request. A message already handed to your email provider may still arrive after you unsubscribe.

How long information is kept

We retain a signup for up to 24 months (730 days), unless you leave sooner. Unconfirmed promotional invitations expire after 30 days; a limited expired or unsubscribed status prevents an old link from restarting mail. Delivery records are retained for up to 90 days. Daily cleanup can take up to one additional day, and a service outage may delay it. Promotional consent and suppression records are removed when the associated signup is deleted.

After deletion, an opaque deletion marker is kept for up to 30 days to help prevent restoration from an older copy. Database recovery copies expire within seven days; restored data is kept offline until applicable deletions and opt-outs have been reapplied. Sent email and correspondence are separate from the signup database: contact us to request deletion of copies we control. We cannot delete messages already delivered to your inbox. Google may retain separate service or security records, and lawful preservation obligations may limit deletion; we will explain an applicable exception when responding.

Health information and changes

Please do not submit symptoms, diagnoses, medication details, records or other health information. This website is not a care or emergency service. See our consumer health data privacy notice for this context. We do not change our practices based on Do Not Track signals; we do not conduct the sale or targeted-advertising activities those choices commonly address.

We will date changes to this notice. A materially different use of signup information will require an appropriate new notice and consent where required; joining now does not authorize a future patient product to use your information.