Privacy Policy
Noctis FZE, registered in the United Arab Emirates, is the controller for NOCTIS account and report data unless a separate agreement says otherwise.
We may collect account identifiers, email address, authentication metadata, report score, report metrics, context selections, objectives, preferences, consent records, support records, audit events, and billing references when payments are enabled.
Raw camera frames, face images, and image history are not stored by default. Image history requires a separate explicit opt-in and must be capable of withdrawal.
We use data to authenticate users, save reports, show progress, manage preferences and entitlements, provide support, secure the service, comply with legal duties, and improve the product with aggregated or minimized information.
Depending on location, processing may rely on contract necessity, consent, legitimate interests, legal obligations, or explicit consent where required for sensitive or biometric-related processing.
Identity, hosting, database, email, analytics, support, and payment providers may process limited data for NOCTIS. Production vendor names and subprocessors should be listed before full commercial launch.
Data may be processed outside the UAE depending on infrastructure and provider locations. Appropriate safeguards should be maintained where required by applicable privacy law.
Reports and account records are retained while the account is active or while needed for billing, security, audit, dispute, or legal reasons. Users should be able to delete account-linked reports unless limited retention is required.
Depending on your location, you may request access, correction, deletion, export, restriction, objection, withdrawal of consent, and portability. Consent withdrawal does not affect prior lawful processing.
Authentication is handled by a dedicated identity provider, access is role-gated, admin actions should be audited, and secrets remain server-side. No internet service can guarantee absolute security.
NOCTIS is intended for adults. Users must confirm they are at least 18 before saving a report.