Privacy Policy

This Privacy Policy outlines how Noby ("we", "us", "our", heynoby.com, app.heynoby.com) collects, uses, stores, and safeguards your personal data when you interact with our web application, mobile applications, and Noby One wearable hardware devices.

Data Controller Contact Information: - Product Name: Noby AI Companion - Marketing & Product Website: https://heynoby.com - Web Application: https://app.heynoby.com - Privacy Officer Contact: privacy@heynoby.com - Customer Support: support@heynoby.com

We are committed to respecting your privacy and complying with all applicable data protection laws, including the European General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), the California Consumer Privacy Act (CCPA/CPRA), and industry security standards.

When you use Noby services, we may process the following categories of information:

• Account & Identity Information:
• - Email address, username, display name, and avatar image (provided during registration via Google Sign-In or email authentication).
• - Authentication tokens and user preference configurations.

2. Audio Recordings (Voice Data): - Audio files recorded through your smartphone microphone or paired Noby One wearable device (capsule/medallion) strictly upon explicit user initiation. - Raw recordings remain stored locally on your device by default and are processed according to your privacy configuration.

3. Transcripts, Summaries, and Memories: - Text transcriptions generated from your recordings, extracted key topics, highlights, action items (tasks), and AI memory summaries. - These records are synchronized across your authenticated devices using end-to-end encryption (E2EE).

4. Technical & Device Information: - Bluetooth Low Energy (BLE) connectivity status, firmware version, battery telemetry, and hardware identifiers for Noby One device maintenance and diagnostics. - Browser type, operating system, network diagnostics, and minimal application crash logs to maintain service reliability.

5. Location Data (Optional): - Only when you explicitly enable conversation geotagging within the application settings, we store approximate geographic coordinates to associate a location tag with your conversation memory.

Noby allows users to authenticate using Google Sign-In and optionally integrate their Google Calendar.

How We Use Google User Data: - Google Authentication: When signing in with Google, we receive your Google user ID, email address, name, and profile photo strictly to create and authenticate your Noby user account. - Calendar Integration (Optional): If you grant access, Noby accesses your calendar event metadata solely to associate recordings and task items with relevant meeting titles and scheduled events.

Adherence to Google API Services User Data Policy: Noby's use and transfer to any other app of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements: - We only use Google user data to provide or improve user-facing features that are prominent in Noby's user interface. - We do not transfer or sell Google user data to third parties, advertising platforms, data brokers, or information resellers. - We do not use Google user data for serving advertisements, retargeting, or promotional profiling. - We do not use Google user data to train generalized AI or machine learning models without your explicit opt-in consent. - Human access to Google user data is strictly prohibited, except where necessary for resolving a specific technical support issue requested by you, or where required by law.

Noby is built around a Privacy-First, Local-First engineering ethos:

• Zero-Knowledge E2EE Sync: Synchronization between your web browser, mobile device, and wearable is protected with client-side end-to-end encryption. Our servers do not have access to the cryptographic keys required to decrypt your transcripts, summaries, or memories.
• Local Audio Retention: Raw voice files are stored on your local devices by default. Audio is only transmitted for cloud transcription if you have explicitly selected a cloud-enhanced processing mode.
• Security Standards: All network transmissions are enforced over TLS 1.3 with modern cipher suites. Stored databases utilize AES-256 GCM encryption at rest.

You can customize your AI transcription and processing preferences at any time in the Privacy Settings:

• Local Only: Speech transcription runs entirely on-device (e.g. offline on mobile). No audio or transcript leaves your device for external AI computation.
• Privacy First: Transcription uses privacy-preserving, zero-retention European/secure infrastructure where audio packets are streamed, transcribed, and immediately discarded without persistence.
• Cloud Enhanced: Leverages high-accuracy cloud speech engines and language models.

No Training on Private Conversations: We do not sell your conversation content, nor do we allow our AI partners to retain or train generalized foundation models on your private transcripts.

Under applicable global privacy regulations, you have comprehensive rights regarding your personal data:

• Right of Access: You can request a complete copy of all personal information we hold about you.
• Right to Rectification: You can update and correct your profile and data directly within the app.
• Right to Erasure ("Right to be Forgotten"): You can permanently delete individual conversations, memories, or your entire Noby account with a single click in the settings.
• Data Portability: You can export all your recordings, transcripts, and memories at any time in standardized open formats (JSON, TXT).
• Withdrawal of Consent: You can revoke permissions for cloud processing, calendar sync, or location access at any time.
• Right to Lodge a Complaint: You have the right to contact your local Data Protection Authority if you believe our data processing violates applicable laws.

Noby hardware and software tools are designed for personal productivity, memory recall, and assistive note-taking.

It is your sole legal responsibility as the user to comply with all applicable local, state, and national laws regarding audio recording and wiretapping (including two-party and all-party consent laws). You must notify and obtain all necessary consents from participants before initiating audio recording in any setting.

We may periodically update this Privacy Policy to reflect enhancements in our product or changes in statutory requirements. Material updates will be highlighted via notice on our website and within the app.

If you have questions, feedback, or requests regarding this Privacy Policy, please contact our team: - Email: privacy@heynoby.com - Support: support@heynoby.com