Privacy Policy

1. Who operates Noesis and how to contact us

Noesis provides and operates the Noesis service (“Noesis”, “we”, “us”).

For privacy questions or data requests, contact support@noesis.dsysonshi.com.

2. Scope and product status

This policy covers the Noesis iOS app, noesis.dsysonshi.com pages, and the Noesis API. The product provides cognitive exercise, strategy reflection, and training feedback. It is not a medical device, clinical assessment, diagnosis, treatment, therapy, IQ test, or substitute for professional advice.

3. Information processed on your device

Core starter exercises can be used without Sign in with Apple. Local records remain on the device until you delete them, delete the app in accordance with iOS behavior, or use the in-app deletion controls.

• Assessment and training records: item and version identifiers, selected answers, correctness, hint use, task/session identifiers, timestamps, time to first interaction, and time from interaction to submission.
• Strategy reflections, transfer reflections, checkpoints, progress, local profile estimates, confidence indicators, training history, and selected goals or preferences.
• App settings such as language, appearance, reminder preferences, and sync state.
• A random installation identifier and random profile identifier. Installation credentials are kept in the iOS Keychain; activity and profile records are kept in the app’s local data store.

4. Optional sync and anonymous identity

Sync is off until you enable it or link Sign in with Apple. When sync starts, the service creates an anonymous profile and installation record using random UUIDs, your app language, hashed installation credentials, and expiring API-session credentials. No Noesis password is created.

Sync uploads the response and training fields described above so the service can acknowledge events, restore progress, replay profile calculations, and make records available across supported devices. Turning sync off stops future uploads but does not delete information already synchronized.

5. Sign in with Apple

If you choose Sign in with Apple, Apple supplies an identity token, authorization code, and a stable Apple subject identifier. Noesis asks Apple for email scope, but stores the verified Apple subject—not your email—and links or merges it with your Noesis profile. Apple processes sign-in data under Apple’s own terms and privacy policy.

6. Strategy feedback

Strategy explanations are generated by rules within the product. Noesis does not send training activity to an external AI provider.

If this changes, we will update this policy and request consent where required before the feature is enabled.

7. Subscriptions and Apple

Purchases are made through Apple StoreKit. Apple handles payment credentials and billing. Noesis receives and verifies signed transaction and App Store Server Notification data, including product, transaction-chain and transaction identifiers, purchase/expiry/signing dates, environment, renewal or grace-period status, and revocation information. We use it to bind a subscription to a profile, prevent conflicting claims, provide Pro access, restore purchases, and handle renewals, expiry, refunds, and revocation.

8. Operational data, telemetry, and website

The Noesis API produces server logs for requests and errors and aggregate reliability metrics by route, method, and status. Request identifiers, network metadata normally received by an internet service (such as IP address), and error context may appear in infrastructure logs. The app privacy manifest declares linked user ID, purchase history, product interaction, and other user content, plus unlinked diagnostic data, for app functionality and declares no tracking.

Noesis contains no advertising tracker and does not sell personal information. Public website pages do not set advertising cookies or embed behavioral analytics. We do not use cognitive profiles for targeted advertising.

9. Why we process information

Depending on the feature and your location, we process information to provide the service you request, with your consent, or for legitimate operational and security interests.

• Provide local exercises, save progress, calculate limited profile observations, and personalize training.
• Provide optional sync, account recovery, multi-device continuity, exports, and deletion.
• Provide deterministic strategy explanations and verify Pro eligibility.
• Process and reconcile App Store subscriptions and protect against fraud or conflicting claims.
• Operate, secure, debug, measure reliability, respond to support requests, and comply with applicable obligations.

10. Sharing and international processing

Information is disclosed only as needed to service providers acting for Noesis, including hosting, database, and backup providers, and to Apple for identity and subscriptions; to professional advisers under confidentiality; during a business transaction; or when required to protect users, the service, or comply with law.

Noesis uses Microsoft Azure in the Japan East region. Information may therefore be processed in Japan. International transfers remain subject to the protections and rights required by applicable law.

11. Retention

Synchronized responses, profile snapshots, identity links, and subscription records are retained until you delete your account. API session credentials expire after 30 days. Local data remains while you keep it on the device.

Application logs and rolling backups are retained for up to 30 days. Some records may be retained longer when required by law or needed to establish, exercise, or defend legal claims.

12. Export and deletion

In Profile → Data & Privacy, you can export synchronized server data as JSON. The server export includes profile identity mode and locale, response events and payloads, profile snapshots, App Store transactions, entitlement state, and linked notification history. If no server identity is available, the local-only export provides a JSON summary of record counts rather than a complete record-level export.

Delete account and data first removes server profile data, response events, snapshots, installations, sessions, and profile-linked subscription records, then clears local Noesis records, Keychain credentials, preferences, and pending reminders. If server deletion fails, the app keeps local data and reports the error. Residual infrastructure logs and rolling backups expire within 30 days.

Deleting Noesis data does not cancel an App Store subscription. Manage or cancel it separately in Apple ID subscription settings. Apple may retain transaction records under its own obligations.

13. Security

Noesis uses random identifiers, hashed installation secrets on the server, iOS Keychain storage for device credentials, expiring sessions, authorization checks, and Apple-signed transaction verification. Access is limited to personnel and providers who need it. No system is completely secure, but we use technical and organizational safeguards designed to protect your information.

14. Children and age scope

Noesis is intended for adults aged 18 or older. We do not knowingly collect personal information from children. Contact us to request deletion if you believe a child has provided information.

15. Your choices and rights

You can keep core activity local, turn sync off, manage Apple permissions and subscriptions, export available data, and delete Noesis data. Depending on where you live, you may also have rights to access, correct, delete, restrict, object, port, or complain to a regulator. Contact us to exercise a right; we may need to verify the request and may lawfully limit it.

16. Changes

We will publish material changes to this policy and provide additional notice or obtain consent where required.