Privacy Policy

1. Who we are

Noa (“we”, “us”, “our”) is a personal productivity application operated from the United Kingdom. Our website is asknoa.app. For any privacy-related questions please contact us at privacy@asknoa.app.

2. Information we collect

We collect the following categories of data:

• Account information — name, email address, and password when you create an account.
• Waitlist information — name and email address when you sign up for our waitlist.
• Calendar data — events and schedules from calendars you choose to connect (e.g. Apple Calendar, Google Calendar).
• Tasks, lists and reminders — content you create within the app.
• WhatsApp messages — messages you send to Noa via WhatsApp for the purpose of processing commands and queries.
• Usage data — device type, operating system, app version and general interaction patterns to help us improve the product.
• Payment information — processed securely by our payment provider. We do not store full card details on our servers.

3. How we use your information

• To provide, maintain and improve the Noa service.
• To process natural language commands via WhatsApp and the app.
• To sync calendars, tasks, lists and reminders across your household.
• To send you reminders, nudges and daily summaries you have configured.
• To process payments and manage subscriptions.
• To communicate service updates, security alerts and support messages.
• To comply with legal obligations.

4. Legal basis for processing (UK GDPR)

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interest — analytics and product improvement, provided these do not override your rights.
• Consent — marketing communications, which you can opt out of at any time.
• Legal obligation — where we are required by law to retain or disclose data.

5. Data sharing

We do not sell your personal data. We share data only with:

• Service providers — hosting, payment processing, analytics and messaging infrastructure providers who act on our behalf under strict data processing agreements.
• Calendar providers — Apple and Google, only to the extent required to sync your calendars.
• Law enforcement — when required by applicable law or valid legal process.

6. Data storage and security

Your data is stored on secure servers within the United Kingdom and/or the European Economic Area. We use encryption in transit (TLS) and at rest, along with access controls and regular security reviews, to protect your information.

7. Data retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request data portability.
• Withdraw consent at any time (where consent is the legal basis).

To exercise any of these rights, email privacy@asknoa.app. We will respond within 30 days.

9. Cookies

Our website uses only essential cookies required for the site to function. We do not use advertising or third-party tracking cookies.

10. Children

Noa is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to make a complaint, please contact us at privacy@asknoa.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.