1Introduction
This Privacy Policy describes how Noctra ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the Noctra mobile application (the "App") and website. We are committed to protecting your privacy and ensuring transparency about our data practices.
By using Noctra, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the App.
2Medical Disclaimer and App Purpose
2.1 Not a Medical Device or Health App
You acknowledge and agree that Noctra is a personal journaling and mindfulness application designed for self-reflection, creative expression, and personal growth. Noctra is NOT:
- A medical device or medical application
- A diagnostic tool for any medical or mental health condition
- A treatment, cure, or therapy for any disease or mental health disorder
- A substitute for professional medical advice, diagnosis, or treatment
- A tool for tracking, monitoring, or managing health conditions
- A platform for conducting medical or health-related research
2.2 No Medical or Therapeutic Claims
We do not make any claims that Noctra can diagnose, treat, cure, or prevent any disease or medical condition; improve or monitor mental health disorders; replace professional medical or mental health care; or provide medical advice or health recommendations.
2.3 Seek Professional Help
If you are experiencing a medical or mental health emergency, or if you need medical advice, diagnosis, or treatment, please contact a qualified healthcare professional immediately, call emergency services, or visit your nearest hospital or medical facility.
2.4 User Responsibility
You acknowledge and agree that you are solely responsible for your health and wellbeing; Noctra cannot and does not provide medical advice; any decisions regarding your health should be made with qualified healthcare professionals; and we are not liable for any health-related outcomes resulting from your use of the App.
3Information We Collect
3.1 Personal Information You Provide
When you create an account on Noctra, we collect your name (to personalize your experience and identify your account) and email address (for account creation, authentication, and communication).
3.2 Automatically Collected Information
We use your device's secure storage (AsyncStorage or SecureStore) to save your session token and basic account information to keep you logged in.
3.3 User-Generated Content
Noctra allows you to create and store personal journal entries, generate AI-assisted images and audio content, and preserve dream reflections. This content is encrypted and stored locally and in association with your private account.
3.4 Optional Data Processing — AI-Generated Content
- Prompt & Affirmation Generation: Processed by Google Gemini AI API with zero-retention policies
- Dream Art Image Generation: Processed by Freepik API (flux-dev model)
- Audio Generation: Generated locally using ambient synthesis algorithms
4How We Use Your Information
We use the collected information for the following purposes:
- Account Management: Your name and email are used to create and manage your account, authenticate your identity, and enable access to the App's features.
- Service Provision: We use your information to provide core functionality — journaling, AI content generation, and sleep audio.
- Communication: We may use your email to send important notifications, respond to inquiries, or provide customer support.
- Security and Fraud Prevention: We use your information to maintain App security, prevent unauthorized access, and protect against fraudulent activities.
- Personal Growth and Reflection: Your journal entries and usage data are used solely to provide the journaling and mindfulness tool. We do not analyze your data for medical purposes, health diagnostics, clinical research, or therapeutic treatment recommendations.
5Data Storage and Security
5.1 Storage Infrastructure
Your personal information and user-generated content are stored using secure infrastructure:
- Supabase: Primary database service for account information, journal entries, and user-generated content.
- Vercel: The App's backend API is hosted on Vercel's platform.
- Google Gemini AI: When you use AI generation features, your prompts are temporarily processed by the API in accordance with Google's API Data Usage Policy. We do not store this data on our own servers.
- Freepik: Used for Dream Art image generation. Your prompts are processed in accordance with Freepik's Terms of Service and Privacy Policy.
5.2 Security Measures
We implement industry-standard security measures to protect your personal information:
- Data Encryption: Your data is encrypted both in transit (HTTPS/TLS) and at rest.
- Access Controls: Only authorized personnel and systems can access your personal information.
- Password Security: All passwords are hashed using bcrypt before storage.
- Regular Security Audits: We periodically review and update our security practices.
6Data Sharing and Third Parties
6.1 Third-Party Services
We share information with service providers solely to operate and improve the App: Supabase (database), Vercel (hosting), Google Gemini AI (content generation), and Freepik (image generation). Each processes data in accordance with their own privacy policies.
6.2 Legal Requirements
We may disclose your personal information if required by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
6.3 No Sale of Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not use your data for medical or health-related research, clinical trials, health data analytics, mental health diagnosis, or any medical purposes. Your journal entries are private personal content and are never analyzed or aggregated for health research or public AI model training.
7Your Rights and Data Deletion
You have full ownership and control over your personal data. You may exercise any of the following rights at any time:
- Instant In-App Account Deletion: You can permanently delete your account and all associated dream journals directly inside the Noctra App via Settings > Account > Delete Account.
- Manual Data Deletion Request: You can request complete deletion of your account and data by emailing us at noctraofficial25@gmail.com with your registered email address. We will permanently delete all records within 30 days.
- Data Portability & Export: You may request a complete export of your dream archive by contacting us. We will provide your data in a structured machine-readable format.
- Access & Correction: You may review or update your personal account details directly in the App at any time.
- Opt-Out of Optional AI Features: You can use Noctra solely as an offline encrypted text journal without activating any generative AI features.
8Data Retention
We retain your personal information for as long as your account remains active or as necessary to provide the App's services. If you delete your account, we will delete your personal information from our active databases within 30 days, except where retention is required for legal, regulatory, or security purposes.
9Children's Privacy
Noctra is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information as quickly as possible. Contact us immediately at noctraofficial25@gmail.com if you believe we have collected information from a child under 13.
10Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by updating the date at the top of this policy and displaying a notice within the App or website.
11Contact Us
If you have any questions, concerns, or data deletion requests regarding this Privacy Policy, please contact us at:
We respond to all user privacy inquiries and data requests within 24 to 48 hours.