Privacy Policy
Last updated August 25, 2026
Who we are
Nerrvz is a product of RYZ Factor ("we," "us," or "our"). RYZ Factor is the publisher of the Nerrvz mobile and web applications. This Privacy Policy explains how we collect, use, retain, and protect information when you use Nerrvz or join our waitlist.
Data we collect
We collect the following categories of information. We do not rely on vague "usage data" labels: • Account data: email address, first name, optional phone number, membership or subscription status, authentication identifiers, and which sign-in method you used (email and password, Google, or Apple). • Date of birth: your birth year when you take the Longevity Quiz. On the web, your full date of birth if you add it in your Profile. The iOS app does not collect full date of birth. See Date of birth and age below. • Gender identity: optional on the web Profile, including the free-text description you provide if you choose to self-describe. The iOS app does not collect gender identity. • Quiz responses: your individual answers to the Burnout Quiz and Longevity Quiz, how long you spent on each question, and when you completed each attempt. We keep each attempt as its own record, so repeat attempts build a history over time. • Health-related scores we derive: burnout score and stage, symptom load, brain performance index, burnout cost score, longevity score, estimated biological age, chronological age, and your State of You radar scores. See Health-related scores we derive below. • Behavioral data: swipe decisions (Yep or Nope), which card you swiped and when, session frequency and duration, bolts earned, and the mindset and focus area active at the time. • Self-reported check-ins: SUDS (anxiety) scores and cognitive load scores from progress check-ins, plus mindset, focus, and onboarding responses such as the struggle you select. • Device and connection data: operating system and version, browser and version (web), app version, device type, language, timezone, screen size, reported device memory and processor core count, and a truncated IP address from which we derive approximate country, region, and city. We record these when you sign in to help secure accounts and detect suspicious access. See Location below. • Push notifications: if you opt in on iOS, a device/push token and your account identifier. See Push notifications below. We may also collect your email when you join the waitlist or a marketing list. Marketing emails are on by default when you create an account. You can turn them off in Profile. We do not sell this data. See Advertising measurement on iOS for how limited identifiers may be used to measure our own app advertising campaigns.
Location
We do not collect GPS or other precise device location, and the iOS app does not request location permission. We may infer an approximate location (country, region, and city) from your IP address when you connect to our servers or when analytics run. We use this for security, fraud prevention, and product analytics. Approximate location from IP is not used to serve third-party ads inside Nerrvz.
Date of birth and age
We ask for your birth year at the start of the Longevity Quiz because age is a required input to your longevity score and estimated biological age. Those results cannot be calculated without it. On the web, you can also add your full date of birth in your Profile, which we use for the same calculations and to confirm you meet the minimum age of 18 for the Service. The iOS app does not collect full date of birth. We store your birth year and, if you provide it, your date of birth on your account record, along with the chronological age we calculate from it. Your birth year is also saved on each Longevity Quiz attempt so past results stay reproducible. We do not use your age or date of birth for advertising or to build an advertising profile. To have your date of birth removed, contact us at useyour@nerrvz.com or delete your account in the app.
Health-related scores we derive
Nerrvz calculates scores from your quiz answers, check-ins, and swipe activity: • Burnout Quiz: a burnout score, a burnout stage, domain scores, symptom load, a brain performance index, and a burnout cost score. • Longevity Quiz: a longevity score, an estimated biological age, your chronological age, and domain scores. • Ongoing use: State of You radar scores for each category, which we update as you swipe and which decline over time if you stop using the Service. These are wellness estimates produced by our own scoring logic. They are not diagnoses, clinical assessments, or medical measurements, and an estimated biological age is not a measurement of your actual biology. No score creates a patient-provider relationship. We store your most recent scores on your account record, and we keep a history of each quiz attempt and radar update so you can see how things change. We treat these scores as sensitive personal information, and as consumer health data where laws such as Washington's My Health My Data Act apply. See Service providers for who else receives them.
How we use your data
We use your information to: • Personalize your State of You AI summary and coaching nudges. • Improve card recommendations over time based on your patterns and choices. • Operate, secure, and improve the app (reliability, fraud prevention, support). • Send waitlist updates and marketing emails. Marketing emails are on by default when you create an account. You can turn them off in Profile. We do not sell this data. • Send optional push notifications on iOS if you opt in (see Push notifications). • Measure the performance of our own Nerrvz advertising campaigns (see Advertising measurement on iOS). • Conduct anonymized, aggregated research to evaluate our interventions (see Research use below). • Comply with legal obligations.
AI-powered features
The State of You summary and ReVerb coaching insights use automated processing to generate personalized wellness guidance based on your swipe data and behavioral patterns. This output is for general wellness purposes only. It is not medical advice, a clinical assessment, or a substitute for professional mental health care. No AI-generated content creates a patient-provider relationship.
Sensitive mental health and consumer health data
Nerrvz collects self-reported emotional and behavioral data, and derives health-related scores such as burnout stage and estimated biological age. We treat all of it as sensitive personal information, and as consumer health data where laws such as Washington's My Health My Data Act apply. This data is never sold to third parties. We do not share self-reported emotional or behavioral responses, quiz answers, or derived health scores with advertising partners for ad targeting. For the providers that process data on our behalf, see Service providers and Advertising measurement on iOS.
Research use
Nerrvz may conduct research studies using anonymized, aggregated data to evaluate the effectiveness of our interventions. If you are invited to participate in a specific research study, you will be asked for separate explicit consent at that time. You can opt out of research use at any time in Settings.
Analytics and similar technologies
We use product analytics on the Nerrvz website, web app, and iOS app to understand how the Service is used and to improve reliability and features. On iOS we use PostHog (PostHog, Inc.) for product analytics. The iOS app does not use Google Analytics or Meta Pixel. We do not currently request App Tracking Transparency permission or collect the Identifier for Advertisers (IDFA) for that purpose. Separately, the iOS app may use advertising measurement tools described in Advertising measurement on iOS. On the website and web app we use Google Analytics 4 (Google LLC) and PostHog. Our product analytics providers may collect: • Pages or screens you view and basic navigation paths within the app. • Device and browser or app information (for example, browser type, operating system, and app version). • Approximate location derived from IP address. • On the web, pseudonymous identifiers stored in cookies or local storage to distinguish visits and sessions. These providers process data on our behalf under agreements that limit their use to providing analytics services to us. We configure product analytics to measure product usage, not to sell data or run third-party advertising based on your in-app self-reported emotional or behavioral responses. We do not intentionally send the content of your progress check-ins, SUDS scores, card swipe answers, or other self-reported mental health responses to analytics or advertising partners for advertising. If we add new analytics events in the future, we will limit them to what is needed to operate and improve the Service. You can learn more in each provider's privacy policy: https://policies.google.com/privacy and https://www.posthog.com/privacy Where required by law, we will obtain consent or rely on another lawful basis before using non-essential analytics cookies or similar technologies. See European users and GDPR below for more detail. You may also limit tracking through your browser settings or commonly available analytics blockers; blocking may affect our ability to measure usage but does not stop you from using Nerrvz.
Advertising measurement on iOS
When you use the Nerrvz iOS app, we may measure whether our own paid advertising campaigns (for example on TikTok) led to an install, signup, trial, or subscription. We do this so we can understand campaign performance and spend advertising budget effectively. We do not sell your personal information, and we do not use your quiz answers, swipe content, ReVerb text, or other self-reported emotional or health-related responses for ad targeting. To support that measurement, the iOS app includes the TikTok App Events SDK (TikTok Inc. / ByteDance affiliates). That SDK may receive: • A limited set of conversion events such as app launch, registration, start trial, subscribe, and purchase, including store product identifiers and price/currency when a purchase occurs. • Your Firebase account identifier and, when available, your email address. Email is hashed on device before it is sent to TikTok for advanced matching. • Device and app technical signals the SDK needs for attribution, which may include SKAdNetwork conversion signals Apple provides for ad measurement. We do not currently collect IDFA through an App Tracking Transparency prompt for this integration. TikTok processes this information under its business/privacy terms for advertisers and measurement partners: https://www.tiktok.com/legal/page/us/privacy-policy/en Apple's App Privacy labels for Nerrvz disclose the data types involved in this measurement. If we add other advertising partners later, we will update this policy and those labels.
Push notifications
On iOS, you can opt in to push notifications. We use OneSignal (OneSignal, Inc.) to send them. If you allow notifications, OneSignal receives a device/push token and your account identifier so we can deliver those messages. We request notification permission in the app after you have started using Nerrvz, not at launch. You can turn notifications off in iOS Settings at any time. OneSignal processes this data under its privacy policy: https://onesignal.com/privacy_policy
Sharing
We do not sell your personal information. We do not share self-reported emotional or behavioral data, quiz answers, or derived health scores with advertisers for ad targeting. We may share limited account and device signals with advertising measurement partners so we can measure our own app campaigns, as described in Advertising measurement on iOS. We may share data with service providers who help us host, email, analytics, payments, push notifications, or AI features, under contracts that require them to protect your data and use it only for our instructions (see Service providers). We may disclose information if required by law or to protect rights, safety, and security.
Service providers
We share data with the providers below so they can operate parts of the Service for us. Each is bound by contract to protect your data, to use it only on our instructions, and to provide protection equal to what this policy describes. • Google Firebase and Google Cloud (Google LLC): account authentication and database hosting. Holds the account, date of birth, quiz, score, swipe, and check-in data described above. • Anthropic, PBC: generates your ReVerb coaching text. We send only the content of the cards you swiped and your Yep or Nope answers. We do not send your name, email, account identifier, date of birth, or any quiz score or derived health score. • Flodesk, Inc.: email delivery and marketing lists. Receives your email address, signup source, primary focus area, and your burnout score, burnout stage, longevity score, and estimated biological age so we can send your results and relevant follow-up. • Apple Inc.: processes iOS membership as App Store In-App Purchase. We receive entitlement and subscription status through RevenueCat. We do not receive Apple ID payment-card numbers. See Payments and billing. • Stripe, Inc. and RevenueCat, Inc.: web payment processing (Stripe) and subscription/entitlement status on iOS and web (RevenueCat), as described in Payments and billing. • OneSignal, Inc.: optional iOS push notifications, as described in Push notifications. • Functional Software, Inc. (Sentry): error and crash reporting used to diagnose failures. Reports can include the screen you were on and technical error details. • Resend, Inc.: delivery of support messages you send us, which include your message, email address, account identifier, and membership tier. • Google Analytics 4 (Google LLC) on the website and web app, and PostHog, Inc. on the website, web app, and iOS app: product analytics, as described in Analytics and similar technologies. • TikTok Inc. / ByteDance affiliates: iOS advertising campaign measurement via the TikTok App Events SDK, as described in Advertising measurement on iOS. We may also disclose information if required by law or to protect rights, safety, and security.
Payments and billing
When you subscribe in the iOS app, payment is an Apple In-App Purchase through the App Store. Apple processes the payment. We use RevenueCat to receive entitlement and subscription status so membership unlocks in the app. We do not receive your Apple ID or payment-card number. Apple and RevenueCat process this data under their privacy policies: https://www.apple.com/legal/privacy/ and https://www.revenuecat.com/privacy When you subscribe on the web, payment processing is handled by Stripe. Subscription management and purchase records are handled by RevenueCat. We receive your email, subscription status, product purchased, transaction identifiers, and related billing metadata. We do not receive your full payment card number (Stripe stores card details). Stripe and RevenueCat process data under their privacy policies: https://stripe.com/privacy and https://www.revenuecat.com/privacy We use this information to activate membership features, prevent fraud, provide support, and comply with law.
Retention
We keep your account data, date of birth, quiz attempts and answers, derived scores, swipe history, and check-ins for as long as your account is active, because the Service uses that history to show you how things change over time. If you stop using Nerrvz without deleting your account, we retain this data for up to two (2) years after cancellation or last meaningful use, unless a longer period is required by law or needed to resolve disputes. Billing and transaction records may be kept longer where required for tax, accounting, or chargeback resolution. After applicable periods, we delete or anonymize personal data in line with our retention practices. You do not have to wait for those periods to pass. Deleting your account in the app removes this data right away, as described in Your rights and account deletion.
Security
We use reasonable administrative, technical, and organizational measures to protect data. No method of transmission over the Internet or electronic storage is 100% secure.
Your rights and account deletion
You can delete your account at any time from inside the app: open your Profile and choose Delete account. This permanently removes your account record, your quiz attempts and individual answers, your derived scores, your swipe history, your check-ins, and your login records, and it also unsubscribes you from our marketing emails. If you signed in with Apple, deleting your account also revokes the Sign in with Apple token for Nerrvz. Deletion cannot be undone. Billing and transaction records that we must keep for tax and accounting purposes are retained as described in Retention. You may also request access to your personal data, an export of the data you have provided, correction, or deletion by contacting us at useyour@nerrvz.com. We will respond within timeframes required by applicable law. To withdraw consent without closing your account, you can turn off progress check-ins in the app, turn off marketing emails in Profile or using the link in those messages, or skip the quizzes. Deleting your account withdraws consent entirely. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of sale (we do not sell personal information). We do not knowingly sell or share personal data about consumers under 16. If you are a Washington resident, behavioral swipe data, self-reported emotional responses, quiz answers, and the health-related scores we derive from them (including burnout stage and estimated biological age) may qualify as consumer health data under Washington's My Health My Data Act (MHMD). Washington residents have the right to confirm whether we hold this data, access it, delete it, and withdraw consent. We do not sell consumer health data and do not share it for advertising.
State privacy rights (Virginia, Colorado, Connecticut)
If you are a resident of Virginia, Colorado, or Connecticut, you may have the right to access, correct, delete, and obtain a copy of your personal data. You may also have the right to opt out of targeted advertising. We do not use your Nerrvz quiz answers, swipe content, or derived health scores to target ads to you. Limited device and account signals may be used to measure our own app advertising campaigns, as described in Advertising measurement on iOS. If we deny a rights request, you may have the right to appeal that decision by contacting us at useyour@nerrvz.com.
European users and GDPR
RYZ Factor is the data controller for personal data processed through Nerrvz. Privacy requests and questions: useyour@nerrvz.com. We process personal data on the following legal bases: • Account and service delivery: performance of a contract with you. • Behavioral and self-reported emotional data: your explicit consent. • Quiz answers, date of birth, and the health-related scores we derive: your explicit consent, which you give when you choose to take a quiz or add your date of birth. • Analytics and product improvement using de-identified data: our legitimate interest in understanding and improving the Service. • Advertising campaign measurement for our own Nerrvz ads: our legitimate interest in measuring and improving paid acquisition, as described in Advertising measurement on iOS. • Security and fraud prevention: our legitimate interest in protecting the Service and our users. • Marketing emails: your consent. You have the right to withdraw consent at any time, object to processing based on legitimate interests, access your data, correct inaccurate data, erase your data, and lodge a complaint with a supervisory authority in your country of residence.
International data transfers
Nerrvz is operated in the United States. If you access the Service from outside the United States, your personal data will be transferred to and processed in the United States. For users in the European Union or United Kingdom, those transfers are conducted under Standard Contractual Clauses or other lawful transfer mechanisms recognized under applicable law.
Minimum age
Nerrvz is 18+. You must be at least 18 years old to create an account or use the Service, including ReVerb and other AI-generated coaching. The Service is not directed to children or teenagers. We do not knowingly collect personal information from anyone under 18. If we learn that we hold personal information from someone under 18, we will delete it and close the account. If you are a parent or guardian and believe a minor has created an account, contact us at useyour@nerrvz.com and we will remove it. We do not knowingly sell or share personal data about consumers under 16.
Changes & contact
We may update this policy and will post the new date above. Contact RYZ Factor regarding privacy: useyour@nerrvz.com.