Privacy Policy

Profile data: the name you enter, your app preferences (theme, reminders, etc.), and — only if you enable Cloud Sync — the email address of the Google account you sign in with.

Journal content: your entries, mood check-ins, chat messages with Sofia, and the AI reflections generated from them.

Voice recordings (optional, off by default): if you turn on Save Voice Recordings in Settings, the audio of your voice journal entries is kept on your device so you can listen back to yourself. These recordings never leave your phone: they are not uploaded, not backed up, not part of Cloud Sync, and not included in exports. With the setting off — the default — no recording is kept after your entry is transcribed.

Personalisation memory: so Sofia can respond with continuity instead of starting from scratch each time, noor keeps a short, AI-generated summary of the recurring themes and patterns in your journal — a running "memory" of what matters to you over time. This memory is bounded to approximately 300 tokens (roughly 200–250 words), updated only when you save a journal entry, and derived only from your own journal text. It is stored with your profile (on your device, and in the cloud if you enable Cloud Sync), and removed immediately when you delete your data.

Payment data: if you buy Premium, Paystack (our payment processor) handles your payment details. We never receive or store your card number — we only receive a confirmation reference that your payment succeeded.

By default (guest mode), your profile and journal are stored locally on your device. If you enable Cloud Sync, they are also stored in our cloud database, hosted on Cloudflare's infrastructure, so you can restore them across devices. Those servers may be located outside your country — see the cross-border transfers section below.

To generate reflections, chat replies, insights, and audio, the text you write is sent to our AI providers — Google (Gemini) and Anthropic (Claude) — solely to produce the response you asked for. We send only the content needed for the feature you are using, not your email or payment details.

Voice journaling sends audio as well as text. While you speak, your words are turned into text by your device's own speech-recognition service. When you save, the recording of that session is also sent once — through our server, directly to Google (Gemini) — solely to produce a more accurate transcript of what you actually said. We never store your voice on our servers, and the recording is deleted from your device as soon as it has served that purpose, unless you have turned on Save Voice Recordings (see "What we collect").

Saving a journal entry also sends its text to an AI provider to update the personalisation memory described above. This means some AI processing happens as part of normal journaling, not only when you explicitly ask for a reflection or open a chat with Sofia.

AI providers process this content under their own terms, which may include retaining it for a limited period. We do not sell your journal content or use it for advertising, ever.

We know the phrase "noor learns about you" can sound invasive, so we want to be clear: noor's personalisation is narrowly scoped and entirely within your control. Here's what that means:

• No external data collection: We do not scrape, buy, or ingest data about you from the web, social media, financial systems, or any third-party source. Sofia learns only from the text you write in noor.

• No continuous profiling: The personalisation memory is not built in real-time as you type. It updates only when you explicitly save a journal entry, and only to summarise the patterns in that entry and your past entries.

• Bounded size: The memory is capped at ~300 tokens (roughly 200–250 words). It does not grow endlessly — it stays small enough to be meaningful but focused only on recurring themes, not an archive of everything you have ever said.

• No third-party profiling: We do not share your personalisation memory, journal, or learning data with advertisers, data brokers, or anyone else. It is used only to help Sofia respond to you with continuity.

• Immediate deletion: Delete your account in Settings, and your personalisation memory vanishes with it — no data extraction, no residual learning, no logs.

If you'd prefer not to have a personalisation memory at all, you can use noor in guest mode (no cloud sync, no memory updates) — Sofia will still work, but will start fresh each time you open the app.

Journal entries about your mental and emotional state are "special personal information" under South Africa's POPIA (and "special category" health data under laws like the GDPR). POPIA prohibits processing this kind of information unless a specific ground applies. We rely on your explicit consent: you give it by accepting this policy and choosing to use the journaling and AI features, and you can withdraw it at any time by deleting your data and stopping use of the app.

We process this content solely to deliver the features you use — reflections, chat with Sofia, insights, and your personalisation memory — never for advertising or profiling for third parties.

Delivering noor's features requires sending your content to service providers whose servers are outside South Africa — Cloudflare (our hosting and cloud database), Google (sign-in and Gemini), and Anthropic (Claude). Under POPIA section 72 we transfer your personal information across borders only where you have consented and where the recipient is bound by data-protection commitments that provide a comparable level of protection.

These providers act as our "operators" (processors): they may process your content only on our instructions and for the limited period their own terms allow. We do not sell your journal content or transfer it for any purpose other than operating noor for you.

You can access, correct, export, and permanently delete your data. Export (JSON or plain text) and Delete Account & Data are both built into Settings, and deleting your account is immediate and irreversible. Deleting a single reflection is recoverable for a limited time and can also be made immediate — see Retention. Depending on where you live (for example under the GDPR), you also have legal rights to access, rectification, erasure, portability, restriction, and objection, and the right to complain to your data-protection authority. To exercise any right you cannot exercise in-app, email us.

noor is operated by Radaydeh (Pty) Ltd, a company registered in South Africa, which is the "responsible party" for your personal information under the Protection of Personal Information Act, 2013 (POPIA). Under POPIA you have the right to: be notified that we collect your information; request access to the information we hold about you; ask us to correct or delete it; object, on reasonable grounds, to its processing; and not receive unsolicited direct marketing without your consent.

Our Information Officer handles these requests and any privacy concern — contact noor@noorlife.ai. We ask that you reach out to us first so we can resolve the issue directly.

You also have the right to complain to South Africa's Information Regulator, the authority that supervises POPIA: https://inforegulator.org.za (complaints: POPIAComplaints@inforegulator.org.za).

We keep your data until you delete it. If you delete your account in Settings, your profile and journal are removed from your device and, if Cloud Sync was enabled, from our cloud database. Payment records may be retained by Paystack as required by financial regulations.

Deleting a single reflection works differently, on purpose. It leaves your journal straight away — it stops appearing in your history and your graphs, stops counting towards your streaks, and stops being included in what Sofia is told about you — and moves to the recycling bin, where it stays restorable for 30 days. After that noor destroys it automatically. Restoring it brings the whole reflection back, including any AI reflection or deep-dive analysis that was saved with it.

You do not have to wait out those 30 days. "Delete forever" in the recycling bin destroys a reflection on the spot: your writing, its AI reflection, its deep-dive analysis and anything extracted from it are erased at once on your device, and — if Cloud Sync is on — from our cloud copy on the next sync. This cannot be undone.

When you erase a reflection that way, noor keeps one small record of the deletion itself. It holds the entry's internal identifier and the times it was deleted and erased, and none of your writing. It exists so that the deletion sticks: a missing entry cannot be told apart from one a device has not synced yet, so without this record another device you use could re-upload the reflection you erased and undo it. The record is destroyed on the same 30-day schedule as everything else in the bin.

A voice recording kept by Save Voice Recordings follows its reflection: it stays on your device while the reflection waits in the recycling bin, comes back with a restore, and is destroyed with the reflection when the bin erases it. You can also delete every kept recording at once, at any time, with "Delete all saved recordings" in Settings — your written reflections are untouched.

If you enable reminders, they are delivered through your device's notification system, and — if you opt into email reminders — by email through Resend, our email delivery provider. You can turn either off in Settings at any time.

noor is an adults-only (18+) service. Under POPIA a person under 18 is a "child", and we do not knowingly collect or process a child's personal information. The app asks you to confirm you are 18 or older the first time you open it — in guest mode as well as when you create a profile — and you cannot get past that question without confirming. We record only the confirmation and the date it was given; we never ask for or store your date of birth. If you believe someone under 18 is using noor, contact our Information Officer and we will delete the data.

Data synced to the cloud is encrypted in transit and stored on Cloudflare infrastructure with access controls. On-device data can additionally be protected with the app's PIN lock. No system is perfectly secure, so please also protect the device you use.

If we change how we handle your data in any material way, we will notify you in the app before the change takes effect.

Radaydeh (Pty) Ltd (South Africa) is the responsible party for your data. Privacy questions or requests, and our POPIA Information Officer: noor@noorlife.ai