Privacy policy

Who is responsible

Simone Gerardini, Bologna, Italy.

Contact: [email protected]

What the app processes on your phone

• Heart rate and beat-to-beat (RR) intervals from your chest strap, and movement data from the strap's accelerometer if it has one (for example a Polar H10).
• Values calculated from them: heart rate, HRV (rMSSD, SDNN, pNN50), estimated sleep stages and a readiness score.
• For NoctaliX Age: your date of birth and sex, which you enter yourself.
• Your training profile and preferences for the coach (availability, equipment, heart rate zones), and the tags or notes you add.
• Your Intervals.icu login credentials, encrypted on the phone with a key protected by the Android Keystore.
• The strap you paired, its battery level and a log of each night's connection events and interruptions (times, minutes lost and cause, with no heart data), plus technical logs used to diagnose problems.

This data is stored in the app's private storage on your phone. The developer has no access to it.

What leaves your phone, and where it goes

Intervals.icu, when you connect your account. NoctaliX writes your nightly summary to your Intervals.icu wellness data (heart rate, HRV, sleep time and stages, data quality) and the coach writes planned sessions, races, rest periods and training thresholds to your calendar and settings. To do its job the app also reads from your account: recent wellness data, activities and their heart rate, power and speed data, calendar events, sport settings, VO2max and weight. Intervals.icu is an independent service with its own privacy policy, and the data written there belongs to your account.

Open-Meteo, for the weather used by the coach. If you allow location access, the app sends your approximate location, rounded to about 1 km, and the dates of the forecast. Location is only read while the app is in use, never in the background. If you don't allow it, the coach works without weather.

The NoctaliX login service (auth.noctalix.com, hosted on Cloudflare), only while you connect Intervals.icu. It exchanges the authorization code for your access token and passes the token back to the app. It doesn't store anything; Cloudflare processes the connection data (such as IP address) needed to deliver the request.

Files and images you choose to share: exports, backups, strap reports and share cards (images with your sleep score, NoctaliX Age or a session) are created on the phone and sent only when you tap share, to the app or destination you pick. NoctaliX doesn't post anything for you and has no connection to social networks.

NoctaliX Web, only if you link a browser: an end-to-end encrypted copy of your data, described in the next section.

All network connections use encryption (HTTPS). NoctaliX has no advertising, analytics or crash reporting tools, and doesn't sell your data.

NoctaliX Web: your data in a browser

NoctaliX Web is optional. Nothing described here happens unless you link a browser by scanning a QR code from the app and confirming the matching 6-digit code on both screens.

What is copied. Your phone uploads an encrypted copy of what lives on the phone: nights (heart rate, HRV, sleep stages and timings, data quality, interruptions), readiness, coach summaries, NoctaliX Age (including your age), your training profile and availability, tags, and your Intervals.icu athlete name and ID. When you link, the phone also passes the browser, encrypted, the access to your Intervals.icu account, so the browser can read and update your calendar, activities and wellness directly on Intervals.icu.

How it's protected. The copy is encrypted on your phone (AES-256-GCM, with keys agreed between phone and browser through ECDH P-256) and can be decrypted only by your phone and the browsers you linked. The keys never reach our server. The server, run on Cloudflare at noctalix.com/ponte, stores only the encrypted copy, an identifier for each link, fingerprints (hashes) of the link secrets and the times of each update. Cloudflare processes connection data such as IP addresses to deliver requests. We can't read your data, and neither can Cloudflare.

In the browser. The browser keeps its key, the access to Intervals.icu and the decrypted copy in its own storage on that computer until you log out. Don't link a shared or public computer. Changes you make in the browser that belong on the phone (tags, availability) travel back encrypted and are applied by the app. NoctaliX Web uses no cookies for tracking, no analytics and no ads.

Deletion. Unlinking, from the phone (Settings, Linked devices) or from the browser (Log out), deletes the encrypted copy from our server and the data stored in that browser. Encrypted copies that haven't been updated for 90 days are deleted automatically, for example if you uninstall the app without unlinking. Unlinking a browser doesn't revoke its access to Intervals.icu: to revoke it, disconnect NoctaliX in your Intervals.icu settings.

Legal basis. Your explicit consent (GDPR art. 9(2)(a)), which you give when you link a browser and can withdraw by unlinking. Cloudflare acts as our processor and may process data in the United States under the EU-US Data Privacy Framework.

A note on web security. Like other browser-based end-to-end encrypted services, NoctaliX Web runs code delivered by noctalix.com each time you open it. Use only the address noctalix.com.

Why, and on what legal basis

Heart and sleep data are health data under the GDPR. NoctaliX processes them only to provide the features you use, on the basis of your explicit consent (GDPR art. 9(2)(a) and 6(1)(a)), which you give when you start recording and when you connect Intervals.icu. You can withdraw consent at any time by stopping recording, disconnecting Intervals.icu or uninstalling the app.

How long data is kept

• Nights, metrics and coach summaries stay on your phone until you delete them or uninstall the app.
• Connection event logs are kept for 30 days; technical logs are limited in size and overwritten automatically.
• Data written to Intervals.icu stays in your Intervals.icu account until you delete it there.
• NoctaliX Web: the encrypted copy on our server is deleted when you unlink, or after 90 days without updates.

Backup and changing phone

App data is not included in Google's cloud backup. When you set up a new phone with Android's device-to-device transfer, the app's data can be copied to the new phone, except your Intervals.icu credentials: you'll need to connect again. You can also make a password-protected backup file from the app and save it wherever you choose; that copy is under your control.

How to delete your data

• A single night: open it in the app and delete it. This removes it completely from the phone: heart and movement data, metrics, sleep stages, interruption records and the strap report. Data already sent to Intervals.icu stays there.
• Your Intervals.icu connection: tap Disconnect. The app revokes its access and deletes the credentials from the phone.
• A linked browser: unlink it from the app or log out in the browser. This also deletes the encrypted copy from our server.
• Everything on the phone: uninstall the app, or use Android Settings, Apps, NoctaliX, Storage, Clear data.
• Data already written to Intervals.icu (wellness values, sessions, races, thresholds and custom fields): delete it in your Intervals.icu account. Disconnecting NoctaliX doesn't remove it.

Permissions

Bluetooth, to find and connect to your strap (on Android 11 and earlier, Android also requires location permission for Bluetooth scanning; it isn't used to locate you). Approximate location, for weather only. Notifications, for the recording in progress, the morning summary and coach messages. Background operation and battery optimization exemption, so an eight-hour recording isn't interrupted. Companion device access, to start recording automatically when you put on your paired strap. Camera, only on the screen where you scan the QR code to link a browser; images are processed on the phone and never stored or sent.

The waitlist on noctalix.com

If you join the waitlist, we store your email address and the time you gave consent; if you answer them, your phone type, chest strap model and whether you want to join the Android beta; the page section you signed up from, the campaign link you came from (if any) and your country, derived from the connection. We don't store your IP address.

We use this only to email you about the beta and the launch and to invite beta testers, on the basis of your consent (GDPR art. 6(1)(a)). It's stored on Cloudflare, which hosts the site and its database as our processor; if we use an email service to send launch emails, it will also act as our processor. We keep it until you unsubscribe or ask us to delete it, and no longer than 12 months after the app launches.

Age

NoctaliX and its waitlist are not intended for people under 18.

Not a medical device

NoctaliX is designed for training and wellness. It doesn't diagnose, treat or prevent any condition.

Your rights

You can access, correct, delete or export your data and withdraw consent at any time. For app data, which stays on your phone, you can do most of this directly in the app or in Android settings. For waitlist data, write to us. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali).

Changes

If this policy changes, we'll update the date at the top and, for significant changes, tell you in the app.

This policy is available in English, Italian, Spanish and Chinese. All versions have the same content and the same value. If you notice a difference between them, please let us know at [email protected] and we'll correct it.