Noa

Privacy Policy

Last updated September 24, 2026

This policy explains what information the Noa app and service ("Noa", "we", "us"), operated by Beto’s AI, collect, how we use it, and the choices you have. It applies to the Noa iPhone app, the Noa service behind it and this website.

What we collect

Your account

You sign in with Apple. We receive a stable identifier for your Apple account and, if you choose to share them, your name and email address (which may be an Apple private relay address). We store a one-way hash of the Apple identifier, not the identifier itself.

What you share with Noa

• Messages you send and Noa's replies, so you can see your conversation history.
• Files, photos and voice notes you attach. Voice notes are transcribed on our own server.
• Memory: facts and preferences Noa keeps so it can help you better, which you can review in the app.
• Reminders and recurring tasks you ask Noa to set up, and documents Noa creates for you.
• Your focus areas and assistant settings, such as Noa's look and saved prompts.

Location (optional)

Only if you turn it on in Settings. You choose how precise it is, and you can save or remove places. Noa uses it to give answers that depend on where you are.

Connected accounts

When you connect a service (for example Google Workspace, Todoist, Calendly, Notion, Zoom, Fireflies, Fathom, Otter.ai or Circleback), you sign in with that service directly and it gives Noa an access token. We store that token securely on our server and use it only to act on your requests, such as reading your inbox when you ask for a summary or creating a calendar event when you ask for one. You can disconnect any service in Settings, which deletes its token from our server.

Noa's computer and browser

Noa has a private computer in the cloud with a web browser, separate for each user. When you sign in to a website on that computer (from the Screen view on your phone), the site's cookies are kept in your browser profile so Noa can keep using the site for you. What you type on that screen goes straight to the website; it is not sent to the AI model and does not appear in your chat. The computer is removed after a period of inactivity; your browser profile is kept until you delete your account.

Device and technical information

A push notification token so we can tell you when a task finishes, and basic service logs (such as request times and errors) used to keep Noa running and secure.

How we use it

• To provide Noa: understand your requests, carry them out with your connected accounts and Noa's computer, and show you the results.
• To send notifications you asked for, like reminders and finished tasks.
• To keep the service secure and working, and to fix problems.

We do not use your information for advertising, we do not sell or rent it, and we do not use it to train AI models.

Who processes it for us

To run Noa we rely on a small number of service providers, who may only use your information to provide their service to us:

• AI models: your requests, and the content needed to answer them (for example an email Noa is summarising), are sent to AI model providers through OpenRouter to generate Noa's replies.
• Hosting: Noa's servers and each user's cloud computer run on Vultr, in the United States.
• Spoken replies: when you ask Noa to speak, the reply text is converted to audio using Microsoft's text-to-speech service.
• Apple: for Sign in with Apple and push notifications.
• The services you connect, which receive the requests Noa makes on your behalf.

We may also disclose information if required by law, or to protect the safety, rights or property of our users or others.

Google user data

If you connect Google Workspace, Noa can access your Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets and Google Contacts, as you approve on Google's consent screen. Noa uses this data only to do what you ask, for example to summarise, search, send or organise email, or to read and create calendar events and documents, and shows you the results in the app.

Noa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not sell it, we do not use it to develop, improve or train generalized AI or machine learning models, and humans do not read it unless you ask us to (for support), it is needed for security, or the law requires it. Google user data is sent to AI model providers only to produce the answer to your own request.

How long we keep it

We keep your information for as long as you have a Noa account. Disconnecting a service deletes its access token right away. Deleting your account (Settings → Delete account) permanently deletes your profile, conversations, memory, files, reminders, connected-account tokens and browser profile from our servers.

Security

Traffic between the app and our servers is encrypted with HTTPS. Each user's data and cloud computer are kept separate from other users'. No system is perfectly secure, but we work to protect your information and limit who can access it.

Your choices and rights

• See, edit or delete what Noa remembers, in the app.
• Disconnect any service, or turn location off, at any time.
• Delete your account and data from inside the app.
• Ask us for a copy of your data, or ask any question about it, at betodiastech+noa@gmail.com.

Depending on where you live (for example under the GDPR, Brazil's LGPD or California law), you may have further rights, such as to access, correct, port or object to the processing of your data. Contact us and we will help.

Children

Noa is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app.

Contact

Beto’s AI · betodiastech+noa@gmail.com