NOR AO

Your bioresonance assistant

Legal Documents

Transparency & Trust

Tap a card to read our Terms of Service or Privacy Policy in full.

16 Sections · Effective 1 Jan 2025

1. Acceptance of Terms

By purchasing, activating, or using any NORAO product, mobile application, website, or related service (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, you must not access or use the Service. These Terms constitute a legally binding agreement between you ("User") and NORAO SAS ("NORAO", "we", "us").

We may update these Terms at any time. Continued use of the Service after notification of changes constitutes acceptance of the updated Terms.

2. Description of the Service

NORAO provides a wearable ECG belt device and companion mobile application designed to acquire, transmit, display, and store cardiac electrical signals for personal wellness monitoring purposes, together with any associated cloud features, analytical outputs, and customer support.

3. Important Medical Disclaimer

NORAO is a consumer wellness product and is NOT a certified medical device. It is not approved by any health authority (including the EMA or FDA) for clinical diagnostic or treatment purposes. Data from the Service must not replace advice from a licensed healthcare professional. If you experience chest pain, shortness of breath, or any symptom of a cardiac event, call emergency services immediately.

4. Eligibility

You must be at least 18 to create an account independently. Users aged 13–17 may use the Service only under direct parental or guardian supervision. The Service is not directed to children under 13. It is not intended for individuals with implanted cardiac devices without prior written clearance from their cardiologist.

5. Account Registration

You agree to provide accurate information during registration and to keep credentials secure. You are solely responsible for all activity under your account. Report unauthorised use immediately to security@norao.fr.

6. Permitted Use

Use the Service solely for personal, non-commercial wellness monitoring. You must not reverse engineer the firmware, sublicense access, deploy automated scrapers, or misrepresent NORAO data as certified clinical output.

7. Intellectual Property

All intellectual property in the Service belongs to or is licensed by NORAO. The NORAO name, logo, and "Your Bioresonance Assistant" are trademarks of NORAO SAS. No rights beyond personal use are granted.

8. Health & Safety

Do not use the NORAO belt while driving, operating machinery, or swimming. Discontinue use and consult a physician if you experience skin irritation or any adverse reaction to wearing the device.

9. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE.

10. Limitation of Liability

TO THE FULLEST EXTENT PERMITTED BY LAW, NORAO SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, OR CONSEQUENTIAL DAMAGES. OUR TOTAL AGGREGATE LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID IN THE PRECEDING 12 MONTHS. Nothing herein limits liability for death or personal injury caused by our negligence or for fraud.

11. Indemnification

You agree to indemnify and hold harmless NORAO and its officers, directors, and employees from claims arising out of your use of the Service in violation of these Terms or applicable law.

12. Third-Party Services

The Service may integrate with third-party platforms (e.g. OS health frameworks). We are not responsible for their content or availability.

13. Suspension and Termination

We may suspend or terminate your access at any time with reasonable notice. Sections 3, 7, 9, 10, 11, and 15 survive termination.

14. Governing Law

These Terms are governed by French law. Disputes shall be submitted to the competent courts of Paris, France, unless mandatory consumer law in your country provides otherwise.

15. General Provisions

If any provision is found invalid, the remaining provisions continue in force. These Terms and our Privacy Policy constitute the entire agreement between you and NORAO.

16. Contact

Email: legal@norao.fr


Previous versions are available upon written request.

14 Sections · GDPR Compliant · Effective 1 Jan 2025

1. Who We Are

NORAO SAS is the data controller for personal data collected through the NORAO device, app, and website. For all privacy matters, contact our Data Protection Officer at privacy@norao.fr.

2. Scope

This policy covers all personal data collected through the NORAO app, website (norao.fr), device, and support channels. It does not apply to third-party services you connect to independently.

3. Data We Collect

Account data: name, email address, date of birth, sex (used for physiological calibration), hashed password.

Health & biometric data: ECG waveforms, heart rate, HRV, rhythm classifications. This constitutes special-category data under GDPR Article 9 and is processed only with your explicit consent.

Device & usage data: hardware ID, firmware version, session metadata, crash diagnostics — used to maintain and improve the Service, never linked to your health records.

Technical data: anonymised IP address, browser type, and OS collected via standard server logs.

4. How We Use Your Data

  • Service delivery — legal basis: contract performance
  • Health analysis — legal basis: explicit consent (GDPR Art. 9(2)(a))
  • Account management — legal basis: contract performance
  • Safety & fraud prevention — legal basis: legitimate interests
  • Product improvement — aggregated, anonymised data only
  • Legal compliance — legal basis: legal obligation

5. What We Never Do

We never sell, rent, or trade your personal or health data. We never use your health data for targeted advertising. We never share your identifiable health records with insurers, employers, or governments except where required by law.

6. Data Security

ECG recordings are stored locally on your device by default. If cloud sync is enabled, we apply TLS 1.3 in transit and AES-256 at rest, role-based access controls, MFA for all staff, and regular independent penetration testing. In the event of a breach we will notify the CNIL within 72 hours and affected users without undue delay.

7. Retention

  • Account data: 3 years after account closure
  • Health data (if cloud sync enabled): up to 5 years or until you delete it
  • Support correspondence: 3 years from resolution
  • Anonymised analytics: indefinite (no re-identification possible)

8. Data Sharing

We share data only with vetted sub-processors under GDPR-compliant Data Processing Agreements, or where required by law. Any business transfer will include equivalent privacy protections and prior notice to you.

9. International Transfers

Primary storage is within the EEA. Any transfers outside the EEA are protected by EU Standard Contractual Clauses (SCCs) or European Commission adequacy decisions.

10. Your GDPR Rights

  • Access — obtain a copy of the data we hold
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data
  • Restriction — limit processing in certain circumstances
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Withdraw consent — at any time, without affecting prior processing

We respond within 30 days. You may also lodge a complaint with the CNIL at cnil.fr.

11. Cookies

We use only strictly necessary cookies (session management, security tokens). No advertising cookies, no third-party trackers, no social-media pixels anywhere in the NORAO app or website.

12. Children's Privacy

The Service is not directed to children under 13. If you believe a child under 13 has provided us with personal data, contact privacy@norao.fr and we will delete it promptly.

13. Policy Changes

Material changes will be notified via the app or by email at least 30 days before taking effect. Continued use after the effective date constitutes acceptance.

14. Contact Our DPO

Email: privacy@norao.fr


This policy complies with EU GDPR 2016/679 and the French Loi Informatique et Libertés.

© 2025 NORAO SAS  ·  legal@norao.fr

NORAO is a personal wellness monitoring device and is not a certified medical device. It is not intended to diagnose, treat, cure, or prevent any disease. Always consult a qualified healthcare professional for any medical concerns.