← Home

Privacy Policy

This policy explains how NEWNEI® collects, uses, shares, and protects your personal data, and the rights you have over it. We are built in the European Union and designed around the EU General Data Protection Regulation (GDPR).

Last updated: 8 July 2026

1. Who is responsible for your data

NEWNEI® is the service described in this policy. The formal data-controller company is being incorporated; until then the NEWNEI® brand is held by its founders and the NEWNEI team acts as the controller for your data. Whatever the final legal entity, the people below are responsible for it and you can reach a human today.

Data-protection contact: hi@newnei.com. NEWNEI® is a registered trademark (EUTM No. 019272571).

2. What we collect, why, and for how long

We only collect what we need to run the service you asked for. Each activity below lists what it involves, our legal basis under the GDPR, and how long we keep the data.

Account & sign-in

Create and secure your NEWNEI account so you can sign in once and reach everything behind it.

Data
Name, Email, Password (hashed), Sign-in activity
Legal basis
Contract
Retention
For the life of the account; removed on erasure request.

Membership & billing

Sell and activate membership and programs, issue invoices, and record payments.

Data
Name, Email, Invoices, Payment records, Plan
Legal basis
Contract, Legal obligation
Retention
Financial records kept ~7 years to meet accounting/tax law, then removed.

Customer care & support

Answer your questions and keep a history of your conversations with us across email and chat.

Data
Name, Email, Message content, Contact preferences
Legal basis
Contract, Legitimate interest
Retention
Kept while relevant to support you, reviewed periodically.

Courses & learning

Give you access to your courses, track your progress, and issue certificates.

Data
Enrolments, Lesson progress, Completion
Legal basis
Contract
Retention
For the life of the account; removed on erasure request.

Bookings & sessions

Health-related · extra care

Schedule sessions with facilitators and coaches and send reminders.

Data
Name, Email, Appointments, Intake answers
Legal basis
Contract
Retention
Kept while you use the service, reviewed periodically.

Protocols & self-treatment

Health-related · extra care

Support self-healing protocols and acupuncture self-treatment guidance chosen by you or run with a facilitator.

Data
Protocol sessions, Self-reported wellbeing scores
Legal basis
Consent, Contract
Retention
Kept while relevant; removed on erasure request.

Community

Run cohorts, groups, and Q&A so the family can support each other.

Data
Name, Posts & replies, Group membership
Legal basis
Contract, Consent
Retention
Kept while you are a member of a group.

Email & newsletters

Send newsletters and campaign emails you have opted into, and let you unsubscribe at any time.

Data
Name, Email, Consent status, Open/click events
Legal basis
Consent
Retention
Until you withdraw consent or unsubscribe.

Referrals & affiliates

Run the referral program: personal links, attribution, and commissions.

Data
Referral code, Clicks, Referrals, Payout details
Legal basis
Contract, Legitimate interest
Retention
Kept while you take part; financial parts follow billing rules.

Outcomes & research

Understand whether programs help, using an anonymized dataset. No personal identifiers are included, and only with consent.

Data
Anonymized outcome scores (no personal identifiers)
Legal basis
Consent
Retention
Anonymized; not linked back to you.

AI-assisted drafting

When AI features are on, message and content text may be sent to our AI provider to draft replies and content. A human always reviews before anything is sent.

Data
Message/content text passed to the model at draft time
Legal basis
Legitimate interest
Retention
Not retained for model training by the provider; drafts kept with the record they belong to.

3. Health-related data

NEWNEI® is a self-healing and emotional-wellbeing service, so some activities (such as sessions with a facilitator and self-treatment protocols) can involve health-related information. This is a special category of data under the GDPR: we process it only with your explicit consent or where you have chosen to use that feature, we keep it to the people who need it, and you can withdraw and ask us to remove it at any time. NEWNEI® is education and self-healing support, not medical advice or treatment.

4. Cookies and similar technologies

We keep cookies to a minimum. We use strictly necessary cookies to sign you in and keep your session secure, and a referral cookie that records which affiliate link brought you to us so a referral can be attributed when you sign up. We do not use advertising or cross-site tracking cookies. For email newsletters you have opted into, we may record whether a message was opened or a link clicked so we can improve what we send; you can unsubscribe at any time.

5. Who else touches your data

We use a small set of trusted providers (processors) to run the service. They act on our instructions, and we never sell your data.

ProviderRoleRegion
SupabaseDatabase, authentication, and file storageEU (Frankfurt)
VercelApplication hosting and content deliveryEU region, global edge
ResendTransactional and inbound email deliveryEU (Ireland)
CloudflareDNS, network security, and real-time call relayGlobal edge
Digistore24Payment processing and EU merchant-of-record (VAT)EU (Germany)
Anthropic (Claude)(only if enabled)AI drafting for replies and contentUnited States
Meta (WhatsApp Cloud API)(only if enabled)WhatsApp messaging channelUnited States / EU

Some providers marked “only if enabled” (our AI drafting and the optional WhatsApp channel) are dormant until we switch that feature on. Where a provider processes data outside the EU (for example in the United States), we rely on appropriate safeguards such as the EU Standard Contractual Clauses for that transfer.

6. Where your data lives and how we protect it

Your personal data is stored in European Union (Frankfurt, Germany). Connections use TLS, data is encrypted at rest, database row-level security means one member can only ever read their own record, and every staff account must clear two-factor authentication to reach any back-office screen. Our full security posture is on the Trust Center.

7. Your rights

Under the GDPR you have the right to:

  • Access. Get a copy of the personal data we hold about you.
  • Rectification. Correct data that is wrong or out of date.
  • Erasure. Ask us to delete your data (where no law requires us to keep it).
  • Portability. Receive your data in a portable, machine-readable file.
  • Restriction. Ask us to pause certain processing while a question is resolved.
  • Objection. Object to processing based on legitimate interest, and to marketing at any time.
  • Withdraw consent. Withdraw consent (e.g. unsubscribe) whenever you like.
  • Complain. Lodge a complaint with your local data-protection supervisory authority.

Signed in? You can act on most of these yourself from Your data & privacy: download a copy of everything we hold about you, or request deletion. Otherwise, email hi@newnei.com and we will respond within one month. You can also lodge a complaint with your local data-protection supervisory authority.

8. Children

NEWNEI® is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with data, contact us and we will remove it.

9. Changes to this policy

We may update this policy as the service grows or the law changes. When we make a material change we will update the date above and, where appropriate, let you know.

10. Contact us

Questions about your privacy or this policy? Email hi@newnei.com. See also our Trust Center and Terms of Service.