Privacy Policy

Last updated: September 26, 2025

NoxAI helps you record and interpret dreams. We take privacy seriously and only collect what’s needed to run the app and improve your experience. If you have questions, contact us at noxai.app@gmail.com.

1. Data We Collect

Account information: Email and display name (Firebase Authentication).
Dream content: Text you enter, mood value, AI outputs (symbols, interpretations), and your personal notes (Firebase Firestore).
App activity & diagnostics: Crash and stability data to fix issues (Firebase Crashlytics).
Push notifications: Device push token to deliver notifications (Firebase Cloud Messaging).
Device & app info: App version, language/locale, generic device data for reliability and support.
Microphone & Speech (optional): If you use dictation, we access the microphone and on-device speech recognition to transcribe your voice. Audio is not saved to our servers.
Advertising: We show non-personalized ads via Google AdMob. AdMob may receive device/usage signals to serve and measure ads. We do not track you across other apps or websites.

2. How We Use Your Data

Create and manage your account; sign you in.
Process dream submissions and display interpretations.
Sync your private dream history across your devices.
Send optional reminders/notifications you opt into.
Fix bugs, ensure security, and improve performance.
Fund the service by showing non-personalized ads in the free version.

3. Where Your Data Is Processed

Google Firebase (Authentication, Firestore, Crashlytics, Cloud Messaging)
Google AdMob (non-personalized ads)
Backend hosting (e.g., Render or equivalent) to process requests and write results to Firestore

These providers act as processors/technology vendors. Data is encrypted in transit and at rest where supported.

4. Ads, Consent & Tracking

We use Google Mobile Ads (AdMob) for non-personalized ads by default. In the EEA/UK, we use Google’s User Messaging Platform (UMP) to request and store consent where required under GDPR and to let you manage your choices via an in-app “Privacy Options” button. If we ever introduce personalized ads, we will first obtain your explicit consent (and, on iOS, request App Tracking Transparency permission).

5. Legal Bases

Where applicable (e.g., GDPR), we process:

to perform the contract (provide the app to you),
with your consent (e.g., notifications, ads choices), and
for our legitimate interests (security, app reliability, service improvement).

6. Data Retention

Account and dream data are kept while your account is active. When you delete your account, associated data is deleted within a reasonable period (backups may persist up to ~30 days). Crash logs and push tokens are retained only as long as needed for their purposes.

7. Your Choices & Rights

Access/Export/Deletion: You can request access to or deletion of your data by contacting noxai.app@gmail.com. You can also delete your account in the app (Profile → Delete Account).
Notifications: Control in iOS Settings → Notifications.
Microphone & Speech: Control in iOS Settings → Privacy & Security.
Ad consent (EEA/UK): Manage via the in-app “Privacy Options” button.
Depending on your region, you may have additional rights (e.g., to object, restrict processing, or data portability). We honor applicable laws.

8. Children’s Privacy

NoxAI is not intended for children under 13. If we learn a child’s data was collected, we will delete it.

9. Security

We use industry-standard technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.

10. International Transfers

Our providers may process data in multiple countries. We rely on appropriate safeguards (such as standard contractual clauses) where required.

11. Changes to This Policy

We may update this policy from time to time. We will update the “Last updated” date and, for material changes, notify you in-app.

12. Contact

Email: noxai.app@gmail.com

Third-party policies: Google Privacy Policy · AdMob & Privacy · Firebase & Privacy