Nociflux privacy notice

For the Nociflux app on iPhone and Apple Watch. Last updated {{EFFECTIVE_DATE}}.

In short

Your diary stays on your iPhone and Apple Watch, encrypted. This version has no Nociflux account and no sync. We can't see your records.
Only three features use the internet, and only when you use them:
- Talk sends what you say to OpenAI in the United States. It starts only after you choose Allow and add your own OpenAI key. Last night's sleep goes only if you turn on a second, separate switch.
- Weather sends Open-Meteo a city you type, or a place rounded to about 11 km.
- Research sends ClinicalTrials.gov one pain condition from a fixed list.
No analytics, no tracking, no ads. We don't sell your information.
Apple Health: Nociflux reads the kinds of data you allow and shows them beside your pain records. It saves blood pressure readings you enter to Apple Health.
Delete everything removes what Nociflux keeps on your iPhone and Watch. Blood pressure readings saved to Apple Health stay there.
Questions: {{PRIVACY_EMAIL}}.

1. Who we are

N01 Lawyer review Who is responsible. Nociflux is a pain diary for iPhone and Apple Watch. It is made by {{OPERATOR_LEGAL_NAME}} ("we"), {{OPERATOR_POSTAL_ADDRESS}}. Our privacy contact is {{PRIVACY_OFFICER_NAME_OR_TITLE}}, at {{PRIVACY_EMAIL}}. This notice covers the Nociflux app from version {{APP_VERSION}}. Our waitlist and websites have their own notices.

N02 Lawyer review Who Nociflux is for. Nociflux is meant for adults aged 18 and over.

2. What stays on your device

N03 Lawyer review Your records. What you record in Nociflux stays on your iPhone and, if you use one, your Apple Watch. That includes check-ins, your journal, blood pressure, readings from Apple Health or a headband, and your settings. On iPhone, records are kept in encrypted databases, and their keys stay in this iPhone's Keychain. On the Watch, records are encrypted with a key that stays on the Watch, and they are left out of backups. Your iPhone and Watch pass records to each other directly. We don't run a server for your records, and we can't see them.

N04 Lawyer review No account, no sync. This version has no Nociflux account and no sync between devices. We don't ask for your name, email address or phone number, and we don't give you an ID. Nothing in the app can be switched on from afar: what the app does is fixed when it is built. {{CONDITION public-build-ready: no sign-in screen appears in the App Store version.}}

N05 Lawyer review Face ID and a headband. If you turn on Face ID, your iPhone checks it, and your passcode always works too. If you connect a Muse headband, Nociflux reads its signal over Bluetooth and keeps minute summaries on your iPhone.

3. Apple Health

N06 Lawyer review What Nociflux reads, and why. With your permission, Nociflux reads these kinds of Apple Health data, to show them beside your pain records:

sleep
heart rate, resting heart rate and heart rate variability
ECG recordings, and the symptoms you logged with them
blood pressure
body temperature and sleeping wrist temperature
breathing rate and blood oxygen
steps, workouts and mindful minutes

{{CONDITION HealthKit trim: only if these are kept, and only if you choose them in Settings: weight, body fat, lean body mass, BMI, VO2 max and walking heart rate.}} You choose which kinds on Apple's permission screen, and you can change that at any time in the Health app. Nociflux keeps an encrypted copy of what it reads on your device, so it can draw your charts. It may update steps and heart rate in the background.

N07 Lawyer review What Nociflux saves to Apple Health. When you add a blood pressure reading and choose "Save to Apple Health", Nociflux saves the two blood pressure numbers, and your pulse if you enter it, to Apple Health. They go into your own Health data, not to us. Nociflux never deletes anything from Apple Health.

N08 Lawyer review Health data and other companies. Your Apple Health data stays on your device, with one exception that you control. With a separate yes, Watch Talk can send last night's sleep summary to OpenAI (see Talk). We never use Health data for advertising, and we never sell it or give it to data brokers.

4. Talk

N09 Lawyer review What Talk is. Talk lets you speak with Nociflux on your iPhone or your Apple Watch. Its answers come from an AI model run by OpenAI, a company in the United States: you are talking with an AI, not a person. Talk gives general information, not a diagnosis or treatment advice. Talk is optional, and the rest of Nociflux works without it.

N10 Lawyer review Your own OpenAI key. In this version, Talk works only with your own OpenAI API key, which you add in Talk on the go. The key stays in your iPhone's Keychain. It isn't synced or put in backups, and it is only ever sent to OpenAI. OpenAI bills your OpenAI account for what you use. Because the key is yours, OpenAI can link what Talk sends to your OpenAI account, and your own agreement with OpenAI applies too. On the Watch, Talk connects to OpenAI directly, with a short-lived pass that your iPhone makes from your key.

N11 Lawyer review Nothing is sent before you say yes. The first time, Nociflux shows "Before you talk". It names OpenAI and lists what is sent. Nothing is sent until you choose Allow. Sending last night's sleep is a second, separate switch. It is off unless you turn it on, and Talk works with it off.

N12 Lawyer review What OpenAI receives. Only while you are talking:

Your voice, and the words of the conversation. OpenAI also writes out what you say.
On iPhone, a check-in in your own words. Talk asks how you are. It can draft a check-in from what you say: pain levels, body areas, what the pain feels like, sleep and triggers. It reads the draft back to you through OpenAI. Nothing is saved until you keep it, and then it is saved on your device.
On the Watch, a little context so answers fit. Your last pain rating, and up to five recent ratings or comparisons, with their times; your local time and time zone; and whether a check-in is open.
Only if you turned on the second switch: last night's sleep summary from Apple Health. That is the night, when it ended, minutes asleep, minutes in each sleep stage, and which app or device recorded it.

Talk on iPhone does not send your past records or your Apple Health data.

N13 Lawyer review What OpenAI keeps. Nociflux doesn't store your audio. OpenAI says it keeps API abuse-monitoring logs "for up to 30 days, unless longer retention is required by law". It also says it does not use API data to train its models unless the account holder opts in. Because Talk uses your key, that choice is in your OpenAI account. Watch Talk asks OpenAI not to keep a stored copy of its replies, but the abuse-monitoring logs still apply. OpenAI's own terms and policies govern what it keeps.

N14 Lawyer review Stopping Talk. In Settings or Device controls, choose "Stop sending to OpenAI". Nothing more is sent until you allow it again. You can also turn off the sleep switch, or remove your key from your iPhone. This stops future sending. It can't call back what OpenAI has already received; for that, see N13 and contact OpenAI. {{CONDITION PR #92: Delete everything also removes your key and your Talk choices.}}

5. Weather

N15 Lawyer review Weather. Weather is optional. To show the weather beside your days, Nociflux sends Open-Meteo either a city name you type, or a place rounded to 0.1° (about 11 km). It sends no rating, check-in, health reading, ID or cookie. Nociflux can't use your GPS in this version. Open-Meteo is run by Open-Meteo GmbH in Switzerland. It says it keeps web server logs that may contain IP addresses and coordinates, and deletes them after 90 days. You can turn weather off. {{CONDITION default city: the App Store version does not choose a city for you, so nothing goes to Open-Meteo until you choose a place.}}

6. Research

N16 Lawyer review Clinical trials. The Research page lists pain studies from ClinicalTrials.gov, a public registry run by the U.S. National Library of Medicine. When the page opens, Nociflux sends one condition from a fixed list of ten, such as "migraine". It is "chronic pain" unless you pick another. Words you type in the page's search box stay on your phone. No record, location, age, sex or ID is sent. The results are kept on your phone for 24 hours. The registry doesn't publish how long it keeps the logs of these requests.

N17 Lawyer review Backups, copies and reports. You can make an encrypted backup with a passphrase only you know, a readable (unencrypted) copy of your record, or a visit report PDF. Each one goes only where you send it, using your iPhone's share sheet. Nociflux doesn't upload them or keep a copy, and it can't recover your passphrase. Once you send a file somewhere, that place handles it under its own terms.

8. The support line

N18 Lawyer review Need support. {{CONDITION PR #107: Nociflux shows a "Need support in …?" line with crisis lines for your country. The list is built into the app. Your country comes from your iPhone's Region setting, read on your iPhone. Showing or opening the line sends nothing and contacts no one. If you call or text a line, your phone does that as usual.}}

9. What we don't do

N19 Lawyer review No analytics, tracking or ads. Nociflux has no analytics, crash-reporting or advertising code. It doesn't track you across apps or websites, and it doesn't show ads. We don't sell, rent or trade your information. Nociflux doesn't use your information to make decisions about you by automated means. {{APPLE_ANALYTICS_SENTENCE}}

10. Delete everything

N20 Lawyer review Delete everything. Delete everything removes your whole record from your iPhone: check-ins, journal, Lab, Muse and EEG, blood pressure, wearable readings, rewards, settings, their keys and any temporary files. It can't be undone. {{CONDITION PR #87 and #92: It also asks your Apple Watch to delete its copy, and tells you when the Watch confirms. If the Watch can't be reached, Nociflux says so and keeps waiting, until the Watch confirms or you tell Nociflux that Watch was erased or unpaired. It also removes your saved OpenAI key and your Talk choices.}}

Delete everything doesn't touch:

Blood pressure readings Nociflux saved to Apple Health. They stay in Apple Health, where you can remove them in the Health app.
Backups and copies you saved elsewhere.
What Talk, Weather or Research already sent. See "How long things are kept".

11. How long things are kept

N21 Lawyer review How long.

Where	What	How long
Your iPhone and Watch	Your records and the copy of your Health data	Until you delete them
OpenAI (Talk)	Your voice, the words, and the context in N12	Abuse-monitoring logs up to 30 days, unless the law requires longer. Your OpenAI account settings also apply.
Open-Meteo (Weather)	A city name or rounded place, and your IP address	Logs deleted after 90 days
ClinicalTrials.gov (Research)	The condition, and your IP address	Not published
Us	Nothing from the app. If you email us, your message.	See N22

N22 Lawyer review If you contact us. If you email us, we use your message and your address only to answer you. We keep them for {{EMAIL_RETENTION_PERIOD}}. We won't ask you for health records to check who you are.

12. Keeping it safe

N23 Lawyer review Security. Your records are encrypted on your devices, as N03 explains. Nociflux connects to OpenAI, Open-Meteo and ClinicalTrials.gov only over encrypted connections. No protection is perfect. If a breach affects your information, we'll tell you and the regulators as the law requires.

13. Your choices and rights

N24 Lawyer review Your choices. Most of your information never leaves your device, so you can see it, copy it, correct it and delete it yourself in the app. You can also:

change Apple Health access in the Health app
stop Talk with "Stop sending to OpenAI"
turn weather off.

N25 Lawyer review Your rights. You can ask whether we hold information about you, and ask for a copy, a correction or deletion. You can withdraw your consent at any time, and you can complain. Because we don't receive your records, we usually hold nothing about you unless you have emailed us. Write to {{PRIVACY_EMAIL}}. We aim to answer within 30 days, and always within the time your local law allows. You can also complain to the regulator where you live (section 15).

14. Where information goes

N26 Lawyer review Outside your country. Talk sends information to OpenAI in the United States. ClinicalTrials.gov is in the United States. Open-Meteo is run from Switzerland {{OPEN_METEO_SERVER_LOCATION}}. Each of these services sees your device's internet (IP) address when Nociflux connects, as any website does. While information is in another country, the authorities there may be able to obtain it under that country's laws. Section 15 explains the protections for your region.

N27 Lawyer review Changes to this notice. Nothing in Nociflux can be switched on from afar, so any new kind of sending needs a new version of the app. If we change how Nociflux handles information, we'll update this notice and its date. If a change means sending new kinds of information, or sending to a new company, we'll ask you first in the app.

15. Where you live

Canada

N28 Lawyer review Canada (PIPEDA). We are responsible for personal information under our control, including what Talk sends to OpenAI {{LAWYER: our role when Talk uses the person's own OpenAI key}}. We ask for your express consent before Talk sends anything. You can withdraw it at any time, and Nociflux still works without Talk. You can ask for access to your information, or a correction, and we answer within 30 days. You can complain to the Office of the Privacy Commissioner of Canada. If a breach creates a real risk of significant harm to you, we'll report it and tell you as soon as we can.

N29 Lawyer review Quebec (Law 25). For people in Quebec:

Our person in charge of protecting personal information is {{PRIVACY_OFFICER_NAME_OR_TITLE}}, {{PRIVACY_EMAIL}}.
The most private settings are the default. Talk, the sleep switch and Weather are off until you turn them on. Nociflux has no function that finds your location: Weather uses only a place you choose.
Talk sends information outside Quebec, to OpenAI in the United States. Before that, the law requires us to assess the protection it will get, and to have a written agreement (section 17). {{QUEBEC_S17_STATUS}}
Your rights: access, correction, and a copy in a usable format. We answer in writing within 30 days.
Complaints: the Commission d'accès à l'information du Québec.
En français : {{FRENCH_VERSION_LINK}}.

European Union, EEA and United Kingdom

N30 Lawyer review Who is responsible. Where the EU GDPR or the UK GDPR applies, {{OPERATOR_LEGAL_NAME}} is the controller of the information Nociflux sends {{LAWYER: our role for Talk with the person's own key, and for records that never leave the device}}. Our representative in the EU is {{EU_REPRESENTATIVE_NAME_AND_ADDRESS}}. Our representative in the UK is {{UK_REPRESENTATIVE_NAME_AND_ADDRESS}} (Article 27). {{LAWYER: whether the EU representative also covers Norway}}

N31 Lawyer review Why we may use information (legal bases).

Talk, including the sleep summary: your explicit consent (Articles 6(1)(a) and 9(2)(a)). We ask for the sleep summary separately. Withdrawing your consent doesn't affect what was sent before.
Weather and Research: {{LEGAL_BASIS_WEATHER_RESEARCH}}. They send no health information about you.
Emails to us: {{LEGAL_BASIS_CONTACT}}.

You don't have to give us any information to use Nociflux. Without Talk, nothing about your health leaves your device.

N32 Lawyer review Transfers to the United States. OpenAI is not listed under the EU–US Data Privacy Framework, its UK Extension, or the Swiss–US framework. So Talk transfers rely on {{TRANSFER_MECHANISM_TALK}}. Research requests go to ClinicalTrials.gov in the United States {{TRANSFER_MECHANISM_RESEARCH}}. You can ask us for a copy of the safeguards.

N33 Lawyer review Your rights. You can ask us for access to your information, and to correct it, delete it, limit how it is used, or move it. You can object, and you can withdraw consent at any time. You can complain to the data protection authority where you live or work. In the UK, that is the Information Commissioner's Office. If you make a UK data protection complaint to us, we acknowledge it within 30 days.

Switzerland

N34 Lawyer review Switzerland (FADP). Health information is sensitive under Swiss law, so Talk sends it only with your explicit consent. Talk transfers to the United States rely on {{TRANSFER_MECHANISM_TALK}}, because OpenAI is not listed under the Swiss–US framework. We have not appointed a Swiss representative {{LAWYER: confirm not required (Art. 14)}}. You can ask for information, correction and deletion, and you can complain to the Federal Data Protection and Information Commissioner.

Israel

N35 Lawyer review Israel (Protection of Privacy Law, as amended by Amendment 13).

You are not required by law to give us any information. Everything Nociflux sends is your choice.
Purposes and recipients are described above: OpenAI for Talk, Open-Meteo for Weather, and ClinicalTrials.gov for Research.
Talk sends information abroad only with your consent. {{LAWYER: basis for Weather and Research under the Transfer Regulations}}
You can ask to see and correct information we hold about you, at {{PRIVACY_EMAIL}}.
Complaints: the Privacy Protection Authority.

United States

N36 Lawyer review United States. We don't sell your information, and we don't use it for targeted advertising. Nociflux is not a health plan or a health care provider, so HIPAA does not apply to it. If you live in Washington, our Consumer Health Data Notice explains your rights under Washington's My Health My Data Act. {{LAWYER: Nevada and Connecticut}} If a breach of your health information happens, including a disclosure without your permission, we'll tell you within 60 days, and tell the FTC when the rule requires it.

16. Contact

N37 Lawyer review Contact us. {{OPERATOR_LEGAL_NAME}}, {{OPERATOR_POSTAL_ADDRESS}}. Email {{PRIVACY_EMAIL}}. EU representative: {{EU_REPRESENTATIVE_NAME_AND_ADDRESS}}. UK representative: {{UK_REPRESENTATIVE_NAME_AND_ADDRESS}}.