Privacy Policy

Last updated: February 22, 2026

Novalis ("we", "our", or "us") operates the cognitive health assessment platform at verafy.pages.dev. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

Account information via Google Sign-In: When you sign in with Google, we receive your name, email address, and profile picture. We use Google OAuth 2.0 through Supabase Authentication and only request basic profile scopes (email and profile).

Cognitive test data: When you take assessments, we collect your responses, reaction times, and accuracy scores. This data is used to calculate your cognitive age and track your progress over time.

Optional demographics: You may choose to provide additional demographic information (such as age and education level) to improve the accuracy of your results. This is entirely optional.

2. How We Use Your Information

To authenticate your identity and maintain your account
To provide cognitive assessments and calculate your results
To track your cognitive health progress over time
To improve our assessments through anonymized, aggregated research data

3. Google User Data

We access your Google account data solely for authentication purposes. Specifically:

What we access: Your name, email address, and profile picture via Google Sign-In
How we use it: To create and identify your account so you can save and retrieve your test results
Storage: Your Google profile information is stored securely in our database (hosted on Supabase) and is associated with your test results
Sharing: We do not share your Google user data with any third parties
No additional access: We do not read, modify, or access any other Google services (Gmail, Drive, Calendar, etc.) on your behalf

4. Future: Google Calendar Integration (Optional)

We plan to offer an optional Google Calendar integration for users who want reminders to retake assessments. If enabled, this feature will:

Only be activated with your explicit consent
Request calendar access only when you opt in to reminders
Only create calendar events — it will not read or modify your existing events

This section will be updated with specific details when the feature becomes available.

5. Data Storage and Security

Your data is stored on Supabase (hosted on AWS infrastructure) with row-level security policies. We use HTTPS encryption for all data in transit. We do not sell, rent, or trade your personal information.

6. Data Retention and Deletion

Your account and test data are retained as long as you maintain an account with us. You may request deletion of your account and all associated data at any time by contacting us at the email below. We will process deletion requests within 30 days.

7. Third-Party Services

We use the following third-party services:

Google OAuth 2.0 — for authentication (Google Privacy Policy)
Supabase — for database and authentication infrastructure (Supabase Privacy Policy)

8. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

ohadwkn@gmail.com