Privacy Policy

Effective Date: May 17, 2026

Noesis ("we," "us," or "our") is committed to protecting your privacy. We do not sell your personal information, we do not use your data for advertising, and we do not track you across other apps or websites. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Noesis mobile application ("App").

Data Controller: Room to Grow LLC, a California limited liability company. Privacy inquiries: admin@roomtogrowllc.com.

Our Privacy Commitment

Your visions, journal entries, affirmations, and reflections are deeply personal. We treat them that way.

All data is encrypted in transit using industry-standard TLS and stored on secure, access-controlled infrastructure with encryption at rest. Access to your account requires authentication, and only your account can read your data. We never sell your personal information, never use it for advertising, and never train AI models on your content.

Speech-to-text transcription runs entirely on your device and never reaches our servers. When you use AI features (such as generating a meditation), the relevant context is processed in real time by our AI providers (Anthropic, Google, and ElevenLabs) under contractual no-training and no-retention terms.

1. Information We Collect

1.1 Account Information

DataPurpose
Email addressAuthentication, communication
Display namePersonalization
Profile photo (optional)Account personalization
Authentication tokensSecure session management

1.2 Personal Growth Content

You create and control the following content within the App:

Stored securely: Visions, journal entries, affirmations, action profiles, reflections, and meditation scripts are synced to our servers so they stay available across your devices. They are protected by encryption in transit, server-side encryption at rest, and per-user access controls.

1.3 AI-Generated Content

The App generates personalized content on your behalf:

1.4 Voice and Audio Data

DataPurposeStays On Device?
Speech-to-text audioVoice input for goals, journals, feedbackYes. Transcribed entirely on your device.
Voice clone recording (optional)Create a custom AI narration voiceNo. Uploaded for processing, then deleted from our servers.

1.5 Health and System Integrations

IntegrationDataDirection
Apple HealthMindful minutes (breathwork and meditation sessions)Write only (with permission)
Apple RemindersAction itemsWrite only (with permission)
Note: We only write to Apple Health and Apple Reminders. We do not read your existing health or reminder data.

1.6 Preferences and Settings

Notification cadence, preferred meditation time, selected guide voice, and feature preferences (e.g., binaural beats). These are used to customize your experience.

1.7 Podcast Listening

Episode progress and playback position, used to resume playback and track your listening history.

1.8 Diagnostic and Analytics Data

DataPurposeRetention
Crash reports and performance dataApp stability and bug fixes90 days
Device type and OS versionTechnical diagnostics90 days
Product usage eventsUnderstand feature adoption and improve the AppPer provider retention policy
Crash reports are automatically scrubbed of user content before they leave your device. Our crash reporting provider is configured to not collect IP addresses or device-derived identifiers; we send only an opaque user reference. Product analytics are off by default and only run if you opt in via Settings → Privacy. When enabled, events are linked to your authenticated account and capture only metadata (event type, duration, counts). They never include the content of your goals, journal entries, or affirmations.

1.9 Feedback

When you voluntarily submit feedback, we collect your feedback text along with device model, app version, and OS version to help us investigate and improve the App.

2. How We Use AI

Several features in Noesis use AI to generate personalized content. When you use these features, relevant context from your visions, journal entries, or action plans is sent to our AI provider via our secure backend. This data is:

AI-generated content (meditations, coach messages, action suggestions, journal insights) may not always be accurate or aligned with your intentions. These are personal development tools, not clinical assessments or professional advice.

2.1 Voice Narration

Meditation scripts and coach messages are converted to spoken audio by our text-to-speech provider. After narration is generated, the processing history is immediately deleted from the provider. Only the final audio file is retained.

2.2 Voice Cloning

If you opt in, you record a standard script (~2-3 minutes, containing no personal information). This recording is processed to create a custom narration voice. The original recording is deleted from our servers after processing. You can delete your voice clone at any time.

2.3 On-Device Speech Recognition

All speech-to-text transcription is performed entirely on your device using an embedded model. Your voice audio is never transmitted to our servers or any third party for transcription.

3. Service Providers

We use the following third-party service providers to operate the App:

ProviderServiceData Shared
Auth0AuthenticationEmail, authentication tokens
ConvexBackend infrastructureUser data, audio files, metadata (encrypted in transit and at rest)
Anthropic (Claude)AI content generationVision details and reflection context for meditation scripts and coach messages. Transient processing, not retained or used for training.
Google GeminiAI content generationVision titles, weekly action suggestions, and follow-up questions. Transient processing, not retained or used for training.
ElevenLabsText-to-speech, voice cloningScript text for narration and voice clone recordings. Processing history deleted after generation; not used to train models.
SentryCrash reportingCrash logs and OS version. No IP addresses; no personal content. Events are scrubbed automatically before transmission.
PostHogProduct analyticsOff by default. Activated only with your opt-in via Settings → Privacy. When on, events are linked to your account; they capture event metadata only, never goal, journal, or affirmation content.
RevenueCatSubscription managementPurchase receipts, subscription status

All providers are located in the United States. They are contractually obligated to protect your data and use it only for the services they provide to us.

3.1 What We Do Not Do

4. How We Use Your Information

Data TypePurposeLegal Basis (GDPR)
Account informationAuthentication, account managementContract performance
Visions, affirmations, journal entriesCore features, AI personalizationContract performance
Action profiles and plansAction generation and trackingContract performance
Voice clone recordingCreate custom narration voiceConsent
Health and Reminders dataApple integrationsConsent
Subscription dataManage your subscription and feature accessContract performance
Diagnostics, analytics, feedbackApp stability and improvementLegitimate interest

5. Data Security

No online service can guarantee perfect security, but we work continuously to protect your data and will notify you if a breach affecting your information occurs, as required by applicable law.

6. Data Retention

Data TypeRetention Period
Account data, profile, preferencesUntil account deletion
Visions, affirmations, journal entries, meditationsUntil deleted by you or account deletion
Voice clone dataUntil you delete your clone or your account
Action plans, check-ins, streaksUntil account deletion
Crash reports and diagnostics90 days
Feedback submissionsUntil resolved or account deletion

When you delete your account, your data is removed from our systems within 30 days, except where legally required to retain.

7. Account Deletion

Go to Settings → Delete Account to permanently remove all your data, including your account, visions, journal entries, meditations, voice clone, action plans, and feedback. Account deletion is processed immediately. Data removal from all systems completes within 30 days.

Note: Data previously written to Apple Health or Apple Reminders is managed by Apple and is not removed when you delete your Noesis account.

8. Your Rights

Contact: admin@roomtogrowllc.com

9. California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA/CPRA:

10. International Users (GDPR)

Legal Basis for Processing

International Data Transfers

Data is processed in the United States. Transfers are protected by Standard Contractual Clauses (SCCs) where applicable and are encrypted in transit using TLS.

Your GDPR Rights

11. Children's Privacy

Noesis is designed for adults (18+). We do not knowingly collect information from children under 13. If we learn we have, we will delete it promptly. Contact admin@roomtogrowllc.com if you believe this has occurred.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the App and updating the effective date above.

13. Contact Us

Room to Grow LLC
General Support: support@trynoesis.app
Privacy Inquiries: admin@roomtogrowllc.com

See also: Terms of Service.