1Introduction
This Privacy Policy describes how Noctra ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the Noctra mobile application (the "App"). We are committed to protecting your privacy and ensuring transparency about our data practices.
By using Noctra, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the App.
2Medical Disclaimer and App Purpose
2.1 Not a Medical Device or Health App
You acknowledge and agree that Noctra is a personal journaling and mindfulness application designed for self-reflection, creative expression, and personal growth. Noctra is NOT:
- A medical device or medical application
- A diagnostic tool for any medical or mental health condition
- A treatment, cure, or therapy for any disease or mental health disorder
- A substitute for professional medical advice, diagnosis, or treatment
- A tool for tracking, monitoring, or managing health conditions
- A platform for conducting medical or health-related research
2.2 No Medical or Therapeutic Claims
We do not make any claims that Noctra can diagnose, treat, cure, or prevent any disease or medical condition; improve or monitor mental health disorders; replace professional medical or mental health care; or provide medical advice or health recommendations.
2.3 Seek Professional Help
If you are experiencing a medical or mental health emergency, or if you need medical advice, diagnosis, or treatment, please contact a qualified healthcare professional immediately, call emergency services, or visit your nearest hospital or medical facility.
2.4 User Responsibility
You acknowledge and agree that you are solely responsible for your health and wellbeing; Noctra cannot and does not provide medical advice; any decisions regarding your health should be made with qualified healthcare professionals; and we are not liable for any health-related outcomes resulting from your use of the App.
3Information We Collect
3.1 Personal Information You Provide
When you create an account on Noctra, we collect your name (to personalise your experience and identify your account) and email address (for account creation, authentication, and communication).
3.2 Automatically Collected Information
We use your device's secure storage (AsyncStorage or SecureStore) to save your session token and basic account information to keep you logged in.
3.3 User-Generated Content
Noctra allows you to create and store personal journal entries, generate AI-assisted images and audio content, and share content with other users. This content is stored in association with your account. The privacy settings you choose (private, friends only, or public) determine who can access your shared content.
3.4 Optional Data Processing — AI-Generated Content
- Prompt & Affirmation Generation: Processed by Google Gemini AI API
- Dream Art Image Generation: Processed by Freepik API (flux-dev model)
- Audio Generation: Generated locally on our servers using synthesis algorithms
4How We Use Your Information
We use the collected information for the following purposes:
- Account Management: Your name and email are used to create and manage your account, authenticate your identity, and enable access to the App's features.
- Service Provision: We use your information to provide core functionality — journaling, AI content generation, and social sharing.
- Communication: We may use your email to send important notifications, respond to inquiries, or provide customer support.
- Security and Fraud Prevention: We use your information to maintain App security, prevent unauthorized access, and protect against fraudulent activities.
- Personal Growth and Reflection: Your journal entries and usage data are used solely to provide the journaling and mindfulness tool. We do not analyse your data for medical purposes, health diagnostics, clinical research, or therapeutic treatment recommendations.
5Data Storage and Security
5.1 Storage Infrastructure
Your personal information and user-generated content are stored using the following third-party services:
- Supabase: Primary database service for account information, journal entries, and user-generated content.
- Vercel: The App's backend API is hosted on Vercel's platform, which may process your data as part of hosting services.
- Google Gemini AI: When you use AI generation features, your prompts are temporarily processed by the API in accordance with Google's API Data Usage Policy. We do not store this data on our own servers.
- Freepik: Used for Dream Art image generation. Your prompts are processed in accordance with Freepik's Terms of Service and Privacy Policy.
5.2 Security Measures
We implement industry-standard security measures to protect your personal information:
- Data Encryption: Your data is encrypted both in transit (HTTPS/TLS) and at rest.
- Access Controls: Only authorised personnel and systems can access your personal information.
- Password Security: All passwords are hashed using bcrypt before storage.
- Regular Security Audits: We periodically review and update our security practices.
6Data Sharing and Third Parties
6.1 Third-Party Services
We share your information with the following providers solely to operate and improve the App: Supabase (database), Vercel (hosting), Google Gemini AI (content generation), and Freepik (image generation). Each processes data in accordance with their own privacy policies.
6.2 User-Generated Content Sharing
When you share content with other users, it becomes visible according to the privacy settings you select (friends only or public). We are not responsible for how other users may use or share content you have made accessible to them.
6.3 Legal Requirements
We may disclose your personal information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
6.4 No Sale of Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your data for medical or health-related research, clinical trials, health data analytics, mental health diagnosis, or any medical purposes. Your journal entries are private personal content and are never analysed or aggregated for health research.
7Your Rights and Choices
- Access and Modification: You may access and modify your personal information at any time through the App's account settings.
- Account Deletion: You may delete your account at any time through the App's settings. Personal information is permanently removed from active databases within 30 days.
- Content Control: You have full control over the content you create and share. You can edit, delete, or change privacy settings at any time.
- Data Portability: You may request a copy of your personal information by emailing noctraofficial25@gmail.com. We will provide it in a structured, machine-readable format within 30 days.
- Opt-Out of AI Features: AI-powered features are entirely optional. You can choose not to use image or audio generation at any time.
8Data Retention
We retain your personal information for as long as your account remains active or as necessary to provide the App's services. If you delete your account, we will delete your personal information from our active databases within 30 days, except where retention is required for legal, regulatory, or security purposes.
9Children's Privacy
Noctra is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information as quickly as possible. Contact us immediately at noctraofficial25@gmail.com if you believe we have collected information from a child under 13.
10Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by:
- Updating the "Last Updated" date at the top of this policy
- Sending you an email notification (where appropriate)
- Displaying a prominent notice within the App
Your continued use of the App after any changes constitutes your acceptance of such changes.
11Third-Party Links and Services
The App may contain links to third-party websites, services, or resources that are not operated by us. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices or content of these services. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.
12International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. By using Noctra, you consent to the transfer of your information to India and other countries where we operate.
13Your Consent
By using Noctra, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, and disclosure of your personal information as described herein.
14Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
We will make reasonable efforts to respond to your inquiry within 5 business days of receipt.
15Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Hyderabad, Telangana, India.