Privacy Policy

1. Who We Are

Noctra ("we," "our," "us") is a focus and digital-wellbeing app built and operated by an independent developer out of Ontario, Canada — not a registered company. This policy explains what information we collect, why, and what rights you have over it.

Privacy contact: Noctra, reachable at noctraproductivity@gmail.com. If you have any question or concern about how your information is handled, please contact us directly. We aim to respond to privacy inquiries within 48 hours.

2. Information We Collect

Account and identity

Email address and password (if you sign up that way), or your Apple ID identity token if you use Sign in with Apple, your chosen username/handle, and a Firebase-generated user ID that links your data together internally.

Onboarding and preferences

Your selected persona (student, professional, creator), your daily goal preferences, app display settings, notification preferences, and Guardian protection settings. Most of these stay on your device or in your device's secure app-group storage; only account-level completion status syncs to our servers.

Focus session activity

What kind of session you run (Work, Sleep, or Detox), planned and actual duration, start/end times, completion status, and how many times a protected app was attempted during an active session. This is standard productivity/usage history tied to how you use the app.

Focus Blocks

Your scheduled recurring focus windows — kind, label, start/end time, and recurrence pattern. Custom labels you write for a block stay visible to you in-app; they are intentionally not shown on your Lock Screen or in widgets, where only a generic label (e.g., "Work Block") appears, to protect your privacy in shared or public viewing situations.

Guardian / Screen Time protection

Which protection mode you choose (Standard or Locked), any custom message you write for your own block screen, and how many times a protected app was opened during an active block. Important: the specific apps and websites you choose to block are selected and enforced entirely on your device through Apple's Screen Time framework (FamilyControls, ManagedSettings, DeviceActivity). Noctra does not see, collect, or transmit which specific apps or categories you've selected to block.

Goals and tasks

Titles, priorities, due dates, and completion status for goals and tasks you create. If you choose to share a goal with a Crew connection, that goal's relevant details become visible to that connection.

Check-ins (mood, anxiety, and reflections)

This is sensitive, optional data, and we treat it accordingly:

• We only collect this with your explicit, separate consent, given through a dedicated opt-in step before any check-in data is ever recorded — not as part of general app use.
• What's collected: a mood score, an anxiety score, and optional free-text reflection notes (capped at 500 characters).
• Why: to help you see your own patterns over time. This information is never used for advertising, and never shared with Crew connections or any other user.
• You can withdraw this consent at any time in Settings. If you do, we stop collecting new check-in data; your existing entries remain available to you (and are included in data export and deletion) until you choose to delete them.

Meditation and recovery activity

Session durations, streaks, and locally-generated recommendations based on your own history.

Progression (Ascent)

Your star/point totals, level, streak, and unlocked progression state. If you choose to enable galaxy sharing, a limited public snapshot of your progression may become visible to others; this is optional and controlled in Settings.

Crew and social connections

Your username and any crew profile fields you set, your friend/crew relationships, pending friend requests, and live "currently focusing" presence status when enabled. Crew is private and connection-based — there is no public feed or open social network. Focus Together session history is available to Pro subscribers.

Notifications

A push notification token (used only to deliver notifications to your device) and your notification preferences.

Diagnostics and app operation

Crash reports (Firebase Crashlytics, release builds only) and device attestation signals used to confirm requests come from a genuine copy of the app (Firebase App Check) — this helps us keep the service secure and reliable. The Firebase Analytics framework is included in the app but analytics collection is disabled.

Subscription status

Your entitlement status (free or Pro) as verified through Apple's StoreKit. We do not process or store your payment card information — all payment is handled directly by Apple.

3. How We Use Your Information

• To operate the app's core features (focus sessions, Guardian protection, progression, Crew).
• To sync your account and data across your own devices.
• To generate your own personal insights and recommendations from your own history.
• To send notifications you've opted into.
• To maintain the security, integrity, and reliability of the service.
• To provide customer support and respond to your requests.
• To meet our legal and regulatory obligations.

4. What We Don't Do

• We do not sell your personal information.
• We do not use your check-in (mood/anxiety/reflection) data for advertising, for any purpose beyond generating your own insights, or share it with any other user.
• We do not see or collect which specific apps or websites you've chosen to block through Screen Time — that selection and its enforcement happen entirely on your device.
• We do not run third-party advertising or tracking within the app.

5. Who We Share Information With

We use the following service providers to operate Noctra. They process data on our behalf and are bound by their own security and privacy commitments:

• Google Firebase (Authentication, Firestore database, Cloud Messaging for push notifications, Crashlytics for crash reporting, App Check for app integrity, and Remote Config) — our primary infrastructure provider. The Firebase Analytics framework is present as part of this toolkit, but analytics collection is turned off in Noctra — we do not collect Firebase Analytics events.
• Apple (Sign in with Apple, StoreKit for subscription billing, push notification delivery, Screen Time frameworks, and iCloud/CloudKit — see "Where Your Data Is Stored" above).

We do not sell information to third parties, and we do not share it with advertisers.

Visibility to other users

Some information is inherently visible to other Noctra users you connect with through Crew: your username, crew profile details, live "currently focusing" status (if enabled), and any goal you explicitly choose to share. You control these connections and sharing settings.

6. Where Your Data Is Stored

Noctra stores your data in two places:

On your device and in your private iCloud. Most of your personal activity — focus session history, Focus Blocks, goals and tasks, check-in entries, meditation history, and progression state — is stored locally on your device and synchronized through Apple's CloudKit to your own private iCloud database. This data lives in your personal iCloud account, not on our servers. We cannot browse it, and it syncs between your own devices under Apple's own privacy protections.

On Google Cloud (Firestore). Your account record, username, legal acceptance record, social/Crew connections, live "currently focusing" presence, and Focus Together invites are stored in our Firestore database, located in the United States (nam5 multi-region).

If you use Noctra from Canada or elsewhere, information in the Firestore database is processed in the United States. While we are based in Ontario, Canada, we remain accountable for this data under Canadian privacy law regardless of where it is technically processed, and we take reasonable steps to ensure appropriate safeguards are in place for this cross-border processing.

7. Your Rights and Choices

Access and export

You can export a complete copy of your personal data at any time directly from Settings — this generates a file covering your account data, activity history, and consent records, which you can save or share however you like.

Correction

You can edit or correct most of your information directly in the app (profile, goals, preferences, etc.).

Deletion

You can delete your account and associated data at any time from Settings. This removes your account, social connections, and presence data from our Firestore database, and deletes the synchronized data in your private iCloud database. Some information may be retained for a limited period where required by law or for legitimate security/fraud-prevention purposes.

Withdrawing check-in consent

You can disable check-in data collection at any time in Settings without affecting any other part of the app or your subscription.

Notifications

You can manage notification preferences in Settings or through your device's system settings at any time.

8. Children

Noctra is intended for a general audience and is not directed at children. We do not knowingly collect personal information from children under the applicable minimum age in your jurisdiction. If you believe a child has provided us with personal information, please contact us using the details above and we will take appropriate action.

9. Security

We use industry-standard security practices, including encrypted network connections and access controls, to protect your information. No system is perfectly secure, but we take reasonable, ongoing steps to protect your data.

10. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll notify you within the app. Continued use of Noctra after changes take effect means you accept the updated policy.

11. Contact Us

Questions about this policy or your data? Reach us at noctraproductivity@gmail.com.