Privacy policy

In short

• We use your information to run Noephic Workspace for you. We don’t sell it or use it for advertising.
• Assistants you connect see only the Spaces you allow, and nothing is remembered unless you approve it.
• Services you connect, such as Azure DevOps or Outlook, exchange information with Noephic only because you asked them to.
• You can export your workspace, disconnect any service or assistant, and delete your account.

Information we collect

We collect information you give us, information from services and assistants you connect, and some information automatically.

• Account. Your name, email address and the details we receive from the sign-in provider you use, plus settings such as your time zone and working hours.
• Your workspace. Tasks, notes, captures, goals, plans, comments and anything else you create, along with the history of changes to them. When you capture by voice, we send the recording to Azure Speech to create a transcript, keep the transcript and delete the recording.
• Services you connect. When you connect Microsoft Planner, Outlook Calendar or Azure DevOps, we receive the items you choose to link or import, such as tasks, calendar events, work items and their discussion, and we keep the access tokens needed to stay in sync.
• Assistants you connect. When you connect Claude, ChatGPT, Claude Code or Codex, we receive what they create or change through the access you grant, the work you assign them, their results and any memories they suggest, and we keep a record of their activity.
• Imports. If you upload an export from ChatGPT or Claude, we store the original file encrypted and use it to suggest memories for you to review.
• Sharing and groups. The people you share with, the Circles, Teams and Organizations you belong to, and the requests you send and receive.
• Technical information. IP address, browser and device type, operating system, app version, time zone, timestamps, error logs and security events, which our servers record to run and secure Noephic. We don’t use analytics or crash reporting services.
• TestFlight. If you test the iPhone or iPad app through TestFlight, Apple shares with us your name and email address (unless you joined through a public link), how you were invited, which builds you installed, session and crash counts, your device model, identifier, operating system and language, crash logs, and any feedback and screenshots you send, with details captured at that moment such as your carrier, connection type, time zone, battery level, free storage and screen resolution. Apple describes its own handling in TestFlight & Privacy.
• Messages to us. If you email us, your name, email address and what you write.

How we use information

• To run Noephic Workspace: keep you signed in, store and sync your workspace across your devices, and keep it secure.
• To do what you ask: transcribe voice captures, sync with services you connect, send reminders and alerts, share with the people you choose, and let assistants act within the access you grant.
• To run the beta: find and fix problems and improve Noephic from your feedback.
• To contact you about your account, the beta, security and changes to this policy.
• To protect Noephic and its users: prevent abuse and meet legal obligations.

We don’t sell your personal information or use it for advertising, and we don’t use your workspace content to train AI models.

Assistants and AI

• You choose what they see. When you connect an assistant, you choose which Spaces it can see and approve what it can do. An assistant’s first connection starts with all your Spaces selected, including ones you create later, and you can narrow that before you approve. You can change an assistant’s Spaces, pause it or disconnect it in Settings at any time. Giving it more permissions means connecting it again.
• What assistants read goes to their provider. When an assistant reads or changes your work, that information goes to the company that provides it: Anthropic for Claude and Claude Code, OpenAI for ChatGPT and Codex. Their terms, their privacy policies and your settings with them govern what they do with it, including whether it’s used to train their models.
• Chats. If you chat with an AI model inside Noephic Workspace, you use your own OpenAI or Anthropic API key, which we store encrypted. Your messages, any files you attach and the workspace context Noephic adds go to that provider under your account with them, and your agreement with them governs what they keep. Under their standard API terms, neither uses it to train models. We keep each chat in your workspace, encrypted, unless you turn on Private.
• Memory. Assistants can suggest things worth remembering. Each suggestion waits for your review, with where it came from, and nothing becomes part of your memory unless you approve it.
• Activity. We record what assistants do in your Activity log, so you can see who changed what.

How we share information

We share information only in these cases:

• Service providers. Companies that run parts of Noephic for us: Microsoft Azure for hosting, databases, file storage, speech transcription and key storage; Auth0 by Okta for sign-in; and Apple for the App Store, TestFlight and notifications on your iPhone or iPad, which carry a reminder’s title and text. They may use your information only to provide their services to us, and we require them to protect it as this policy does. Our website and web app also load fonts from Google Fonts, which receives your IP address under Google’s privacy policy.
• Services and assistants you connect, as described above, at your direction.
• People you share with. When you share a task or note, the people you share it with can see it. If you belong to an Organization, its admins can set rules for how its members use Noephic, including what assistants may do.
• Legal reasons. When we believe the law requires it, or it’s needed to protect the rights, safety or property of our users, the public or Noephic.
• Business changes. If Noephic is involved in a merger, acquisition or sale of assets, your information may move with it, still protected by this policy.

Garmin Connect integration

Noephic is researching health and wellness features for Noephic Workspace, its AI-assisted productivity platform (pre-launch): tracking health, wellness and athletic performance alongside a user’s goals, and creating custom workouts. The current prototype connects Garmin Connect to an AI training assistant and is for internal evaluation only. It is not available to users, and this section will be updated before that changes.

• How Garmin data is used. The assistant reads the user’s own Garmin data (activities, strength sets, heart rate and daily wellness summaries) to analyze training and plan upcoming workouts, and stores progress in Noephic Workspace. Through the Garmin Training API it creates and schedules structured workouts on the user’s Garmin Connect calendar so they sync to the user’s watch.
• Who receives or processes Garmin data.
  • Microsoft Azure (Microsoft Corporation): hosts the integration and Noephic Workspace data, and stores credentials and access tokens in Azure Key Vault.
  • AI assistants the user connects through Noephic’s MCP connectors, currently Anthropic (Claude) and OpenAI (ChatGPT): analyze the data and prepare workouts when the user asks.
  • Garmin: receives the workouts the assistant creates.
• Sale and sharing. Garmin data is never sold. It is shared only with the providers listed above, and only to operate these features.
• AI Transparency Statement. AI systems (the assistants listed above) process Garmin data to analyze training and prepare workouts. The user gives explicit consent when connecting their Garmin account and approving access on Garmin’s consent screen, and chooses which AI assistants to connect. The user can withdraw consent at any time by disconnecting the Noephic app in their Garmin Connect account settings or by emailing contact@noephic.com. Withdrawing consent stops the integration’s access, and Noephic deletes the stored tokens. Garmin data and anything derived from it are not used to train, evaluate or improve AI models.
• Access and control. To access, correct, delete or export Garmin data held by Noephic, or to withdraw consent, email contact@noephic.com.

Where information is stored

Noephic Workspace runs on Microsoft Azure in the United States. If you use it from another country, your information is transferred to and processed there.

To stay fast and work offline, the web app keeps a copy of your workspace in your browser’s storage, and the iPhone and iPad app keeps your sign-in in your device’s Keychain, where it stays on that device. Imported exports are stored encrypted and are erased permanently when you delete them.

Cookies and similar technologies

The web app uses two cookies, both needed for it to work: one keeps you signed in and expires after 7 days without use, and one protects your account from forged requests. Auth0 sets its own cookies on the sign-in page to keep that step secure. The web app also keeps a copy of your workspace in your browser’s storage so it works offline. We don’t use analytics or advertising cookies, and we don’t track you across other sites. The noephic.com website doesn’t set cookies.

How long we keep information

• We keep your account and workspace, including the history of changes to each item, while your account is open.
• When you delete your account, we disconnect your assistants right away, and you have 30 days to cancel. After that, we permanently delete your workspace and its history, your connections to other services and your imports, except anything the law requires us to keep. We keep only a record that the account existed, without your name or email. Copies in backups are removed within 35 days after that.
• When you delete an imported export, we erase it permanently.
• We delete voice recordings once they’re transcribed.
• We keep emails from you as long as needed to respond and keep business records.
• Apple keeps TestFlight feedback for one year. We keep beta feedback and crash reports only as long as we need them to fix problems and improve Noephic.

Your choices and rights

• See and export. Download a copy of your workspace as a JSON file from Settings › Data on the web. Memory and imported files aren’t included yet, so email us for a copy of those.
• Correct. Edit your content, profile and settings at any time.
• Delete. Archive or close items as you go; their history stays with your account while it’s open. To delete everything, choose Delete account in Settings › Data on the web. That removes your personal workspace. Items in an Organization’s or Team’s Spaces stay with that group, Circles you own pass to another member or are archived, and copies others accepted stay with them.
• Disconnect. Disconnect any service or assistant in Settings. That stops future access; it doesn’t remove what the other service already received.
• Notifications. Turn reminders and alerts on or off in Noephic and in your device settings.

Depending on where you live, for example in the European Economic Area, the United Kingdom or California, you may have the right to access, correct, delete or move your information, to object to or limit how we use it, and to complain to a data protection authority. Email contact@noephic.com to use these rights. We won’t treat you differently for using them.

Security

We protect your information with encryption in transit, encrypted storage for imported exports, limited permissions for assistants and connected services, access controls and activity logs. No system is perfectly secure, so keep your sign-in safe and tell us right away if you think your account has been misused.

Children

Noephic Workspace isn’t for anyone under 18, and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.

Changes

We may update this policy. We’ll post the new version here with a new date, and tell you in the app or by email before material changes take effect.

Contact

Questions about this policy or your information can be sent to contact@noephic.com.