top of page

Privacy Policy — Noyau

Last updated: 3 August 2026

 

1. Who We Are

Noyau is operated by NOYAU, a French société par actions simplifiée unipersonnelle — SASU — registered under SIREN 992 930 024, with its registered office at:

9 rue Laure Fiot
92600 Asnières-sur-Seine
France

NOYAU is the data controller responsible for the processing of personal data described in this Privacy Policy.

Privacy enquiries may be sent to:

admin@mynoyau.com

 

2. Scope of This Policy

This Privacy Policy explains how Noyau collects, uses, stores, transmits and protects personal data when you:

  • create or use a Noyau account;

  • write or organize Notes;

  • create Highlights, Tags or associations;

  • invoke AI features such as Reflect, Explore or Deep Dive;

  • use AI-generated association suggestions or pattern-analysis features;

  • contact Noyau for support; or

  • purchase or manage a subscription.

This Policy applies to the Noyau mobile application and any related webpages or services operated by NOYAU.

 

3. Data We May Process

3.1 Account and authentication data

We may process:

  • your email address;

  • your internal user identifier;

  • account-creation and verification status;

  • authentication information;

  • subscription and account status;

  • account preferences and settings.

Passwords, where used, should be stored only in securely hashed form and not as readable text.

3.2 User-generated content

Noyau is designed to store and organize personal writing. The content you choose to enter may include:

  • Notes, previously referred to as Scribs;

  • Highlighted or bookmarked excerpts;

  • Tags;

  • My… associations;

  • dates, including creation dates and optional event dates;

  • optional locations;

  • personal reflections, experiences, dreams, ideas, decisions and observations;

  • information about other people whom you mention;

  • AI-generated responses that you choose to save;

  • links and relationships between your Notes and other Noyau objects.

This content may contain personal or sensitive information depending on what you choose to write.

 

 

3.3 AI interaction data

When you deliberately invoke an AI feature, Noyau may process:

  • the Note or Highlight on which the AI feature was invoked;

  • the particular text selected by you;

  • your selected interaction mode, such as Reflect, Explore or Deep Dive;

  • relevant Notes, Highlights, Tags, My… or other content retrieved to provide useful context;

  • instructions generated by Noyau for the AI service;

  • AI-generated responses;

  • association or classification suggestions;

  • your decision to accept, reject, rerun, save or report an AI response.

The amount of contextual information used may vary according to the selected AI mode and your settings.

3.4 Technical and diagnostic data

Noyau may process technical information necessary to operate and secure the service, such as:

  • device and operating-system type;

  • application version;

  • language and regional settings;

  • IP address and connection information;

  • login and security logs;

  • crash reports;

  • error and diagnostic logs;

  • limited usage events needed to understand whether features function correctly;

  • device or installation identifiers generated by the application or its technical providers.

3.5 Location data

Where enabled by the user, Noyau may process location information associated with a Note.

Noyau will not access device location without the permissions required by the applicable operating system.

3.6 Voice and audio data

Where voice dictation or another voice feature is available, audio or transcribed text may be processed to provide that feature.

3.7 Subscription and transaction data

Where subscriptions are purchased through an app store or payment provider, Noyau may receive:

  • subscription status;

  • selected plan;

  • transaction or purchase identifier;

  • renewal and expiry status;

  • country or currency information;

  • entitlement information.

Noyau does not receive complete payment-card details when payment is handled entirely by an app store or payment provider.

3.8 Communications

When you contact us, we may process:

  • your email address;

  • the content of your request;

  • related correspondence;

  • information reasonably required to investigate and answer your request.

 

4. Why We Process Personal Data

We process personal data for the following purposes.

Providing the Noyau service

This includes:

  • creating and maintaining accounts;

  • saving and synchronizing content;

  • displaying Notes, Highlights, Tags and My…;

  • maintaining links between content;

  • providing filtering, retrieval and navigation features;

  • enabling account management and deletion.

The legal basis is generally the performance of our contract with the user.

Providing user-requested AI features

This includes:

  • generating Reflect, Explore and Deep Dive responses;

  • suggesting associations;

  • retrieving relevant contextual material;

  • generating user-requested analyses or patterns;

  • allowing users to save or reject AI outputs.

The legal basis is generally the performance of the requested service. Where the processing involves special categories of personal data and applicable law requires it, Noyau will obtain the user’s explicit consent.

Securing and maintaining the service

This includes:

  • detecting technical failures;

  • preventing fraud, abuse and unauthorized access;

  • maintaining logs;

  • investigating security incidents;

  • protecting users and the integrity of the service.

The legal basis is our legitimate interest in maintaining a secure and reliable service and, where applicable, compliance with legal obligations.

Improving application reliability

This may include analyzing aggregated or limited diagnostic information to identify crashes, bugs and performance problems.

The legal basis is our legitimate interest in improving the reliability of the service.

Noyau does not use the private content of Notes for unrelated advertising purposes.

Managing subscriptions and customer support

This includes:

  • confirming subscription status;

  • processing support requests;

  • resolving billing or access issues;

  • maintaining records required for accounting or legal compliance.

The legal basis is contract performance, compliance with legal obligations, and our legitimate interest in supporting users.

 

5. AI Processing

AI features in Noyau are assistance and reflection tools. They may generate questions, perspectives, suggestions, interpretations or pattern analyses based on the context made available to them.

AI-generated content:

  • may be incomplete or incorrect;

  • does not represent a diagnosis or professional medical, psychological, legal or financial advice;

  • should be assessed by the user before being accepted or saved;

  • does not automatically replace or modify the user’s own content unless the user confirms the relevant action.

When an AI feature is invoked, relevant content may be transmitted to OpenAI for the limited purpose of generating the requested output.

Noyau does not authorize its AI providers to use user content for advertising.

Where OpenAI’s API is used, OpenAI currently states that API inputs and outputs are not used to train its models by default unless the customer explicitly opts in.

 

6. Service Providers and Data Recipients

Noyau may use contracted service providers to operate the application, including providers of:

  • cloud hosting and databases;

  • authentication;

  • transactional email;

  • AI model processing;

  • application analytics;

  • crash reporting and diagnostics;

  • subscription and entitlement management;

  • infrastructure monitoring;

  • customer support.

These providers process data only for defined service purposes and are subject to contractual and legal obligations.

The current provider categories and names should include:

  • Hosting/database: [provider]

  • Authentication: [provider]

  • AI processing: [provider]

  • Transactional email: [provider]

  • Crash reporting: [provider or “none”]

  • Analytics: [provider or “none”]

  • Subscription management: [provider]

  • Infrastructure monitoring: [provider or “none”]

Personal data may also be disclosed:

  • where required by applicable law or a lawful authority;

  • to protect the rights, security or integrity of Noyau or its users;

  • in connection with a corporate restructuring, subject to appropriate safeguards.

Noyau does not sell personal data.

 

7. International Data Transfers

Some service providers may process data outside France or the European Economic Area.

Where personal data is transferred outside the European Economic Area, Noyau will rely on an approved legal mechanism, such as:

  • an adequacy decision;

  • European Commission Standard Contractual Clauses; or

  • another safeguard permitted by applicable data-protection law.

Further information about applicable safeguards may be requested using the privacy contact address above.

 

8. Retention

We retain personal data only for as long as necessary for the purposes described in this Policy.

The intended retention rules are:

  • Account information: while the account remains active and for 3 months after closure where needed for legal or security purposes.

  • Notes and associated user content: while the account remains active, unless deleted earlier by the user.

  • Deleted user content: removed from active systems within 3 months.

  • Deleted accounts and associated content: deleted or irreversibly anonymized within 3 months, subject to backup and legal-retention constraints.

  • Backup copies: removed through the normal backup cycle within 3 months.

  • Security and technical logs: retained for 3 months.

  • Support correspondence: retained for 3 months after the request is closed.

  • Accounting and transaction records: retained for the period required by applicable law.

These periods must be confirmed with the developers before publication.

 

9. Account and Data Deletion

Users may delete individual content within the application.

Users may request deletion of their Noyau account and associated personal data:

When an account-deletion request is completed, Noyau will delete or irreversibly anonymize associated personal data, except information that must temporarily be retained for legal, accounting, security or fraud-prevention reasons.

Google requires account-based apps to make account deletion available both from within the app and through an external web route accessible after the app has been uninstalled.

 

10. Security

Noyau applies technical and organizational measures appropriate to the nature and sensitivity of the data processed.

These measures may include:

  • encryption in transit;

  • access controls;

  • authentication safeguards;

  • restricted administrative access;

  • logging and monitoring;

  • secure backups;

  • vulnerability and dependency management;

  • contractual safeguards with service providers.

[Developers must confirm the measures actually implemented, particularly encryption, backup access and administrative controls.]

No internet-connected system can guarantee absolute security. Users should protect their credentials and notify Noyau promptly if they suspect unauthorized access.

 

11. Your Rights

Subject to applicable law, users may have the right to:

  • obtain information about how their personal data is processed;

  • access their personal data;

  • correct inaccurate or incomplete information;

  • request deletion;

  • restrict certain processing;

  • object to processing based on legitimate interests;

  • receive certain data in a portable format;

  • withdraw consent where processing relies on consent;

  • lodge a complaint with a competent data-protection authority.

Requests may be sent to admin@mynoyau.com.

Users in France may lodge a complaint with the Commission nationale de l’informatique et des libertés — CNIL.

We may need to verify the identity of a requester before fulfilling a request.

12. Children

Noyau is intended for users aged 18 and over.

We do not knowingly offer the service to children or knowingly collect children’s personal data through an account intended for an adult user.

13. Automated Decision-Making

Noyau’s AI features provide informational and reflective outputs.

Noyau does not use AI outputs to make decisions producing legal or similarly significant effects concerning users.

 

14. Changes to This Policy

We may update this Privacy Policy when the application, its providers or applicable legal requirements change.

The current version will remain available at the same public URL. Material changes may also be communicated through the application or by email where appropriate.

 

15. Contact

For questions, requests or complaints concerning privacy:

NOYAU SASU
9 rue Laure Fiot
92600 Asnières-sur-Seine
France

Email: contact@mynoyau.com

bottom of page