Privacy Policy

Effective Date: January 24, 2026
Last Updated: January 24, 2026

Introduction

This Privacy Policy explains how Noor ("we," "our," "the App") handles your information. Noor is operated by ByteWorthy LLC, based in Texas, United States.

We are committed to protecting your privacy and being transparent about our data practices.

What Noor Is (and Isn't)

Noor is a self-reflection journaling tool rooted in Islamic principles. It is NOT:

• A substitute for professional counseling or medical care
• A diagnostic tool for mental health conditions
• Emergency support for crisis situations
• Licensed therapy or healthcare

For professional support, please consult a licensed counselor, therapist, or healthcare provider.

In case of emergency, contact 988 Suicide & Crisis Lifeline or call 911.

Key Principles

• ✅ Reflections are encrypted and stored securely
• ✅ You control your data and can delete it anytime
• ✅ Data is automatically deleted after 30 days
• ✅ Minimal data collection
• ✅ No behavioral tracking or profiling
• ✅ No account required for basic use

Information We Collect

1. Reflection Content

What we collect: Your thought entries, reflections, reframes, practices, and intentions

How we store it: Encrypted in transit (HTTPS/TLS) and at rest on our servers

How long we keep it: Automatically deleted after 30 days (you can manually delete anytime)

2. AI Processing Data

What we send: Your current thought text when you use AI features

Purpose: To generate personalized CBT-based reflection responses

AI Provider: OpenAI (your data is not used to train their models)

3. Session Metadata

What we collect: Session timestamps, number of reflections, subscription tier, device type

Retention: 30 days maximum

4. Subscription Information

Managed by: Apple (iOS) or Google (Android)

What we see: Only subscription status (Free, Plus, Premium)

What we DON'T see: Payment details, credit card info

Information We Do NOT Collect

• ❌ Name or email address (no account required)
• ❌ Precise location or GPS data
• ❌ Contacts or address book
• ❌ Advertising ID or tracking identifiers
• ❌ Social media data
• ❌ Browsing history
• ❌ Biometric data
• ❌ Health data from other apps

How We Use Information

App Functionality: Provide reflection features, save history, manage subscriptions, generate AI guidance

No Marketing or Tracking:

• ❌ We do not use your data for advertising
• ❌ We do not track you across apps or websites
• ❌ We do not sell your data
• ❌ We do not profile you for behavioral targeting

Data Sharing

OpenAI: Thought text sent only when you use AI features (not used for training)

Apple/Google: Subscription status for billing management

No Other Sharing: We do not share with advertisers, data brokers, or for marketing

Data Security

• All data transmitted via HTTPS/TLS encryption
• Reflections encrypted at rest on our servers
• Minimal employee access
• No human review of your reflections
• Automated deletion after 30 days

Data Retention

Your Rights

Access and Control:

• View: See all reflections in the History screen
• Delete: Delete individual reflections or clear all data
• Export: Export your data (Plus/Premium subscribers)

Children's Privacy

Age Requirement: 13+

The App is not intended for children under 13. We do not knowingly collect information from children under 13.

Ages 13-17: We recommend parental guidance.

California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: Request what information we collect and share
• Right to Delete: Request deletion of your information
• Right to Opt-Out: We do not sell personal information

How to Exercise Rights: Email scale@getbyteworthy.com with "California Privacy Request"

International Users

This app is operated in the United States and intended for US users. By using the app from outside the US, you consent to data transfer and processing in the United States.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notification. Continued use after changes constitutes acceptance.

This Privacy Policy is effective as of January 24, 2026.
Terms of Service | Contact