Privacy Policy
Last updated: July 2026
Data Controller
The data controller for Noova is: Noova LLC Milwaukee, Wisconsin, USA privacy@noova.app
What we collect
We collect the information you give us directly: your email address when you create an account, the tasks and notes you save, and any voice input you record for brain dumps.
How we use it
Your content is processed by AI models to turn brain dumps into structured tasks and to sync your data across your devices. We do not sell your data or share it with advertisers.
How to delete your data
You can permanently delete your account and all associated data at any time from the Profile screen using "Delete my account". You can also email privacy@noova.appand we will remove your data within 30 days.
AI Processing
Your voice and text brain dumps are sent to Google Gemini AI to extract structured tasks and memory. Google does not store your prompts or use them to train models beyond the duration of the request. We do not send your data to any other AI provider.
Third-Party Processors
We use the following trusted third-party services to operate Noova: • Anthropic (Claude AI) — processes your brain dump text to extract tasks and memories. Data is not retained beyond the request. anthropic.com/privacy • Supabase — stores your encrypted data on secure servers in the US. supabase.com/privacy • RevenueCat — manages your subscription and purchase history. revenuecat.com/privacy • Stripe — processes web payments for subscriptions. stripe.com/privacy • Resend — sends transactional email such as password resets and account notices. resend.com/privacy • Twilio — delivers SMS and WhatsApp verification and check-in messages. twilio.com/privacy • Cloudflare — CDN, bot protection, and edge security. cloudflare.com/privacy • Google — optional sign-in only if you choose Google authentication. policies.google.com/privacy Each processor is contractually bound to protect your data and may not use it for their own purposes.
Data Retention
We keep your data (account, tasks, brain dumps, AI memory) until you delete your account. You can delete everything at any time from your profile screen — this is immediate and irreversible.
Your Rights
Under GDPR you have the right to access, rectify, erase, and export your personal data, and to object to or restrict its processing. Contact us at privacy@noova.appto exercise these rights. We respond within 30 days.
EU Representative
Noova LLC is based in Milwaukee, Wisconsin, USA. Our EU representative under GDPR Article 27 is to be appointed (pending). EU/EEA users can contact us at privacy@noova.appin the meantime.
Cookie Policy
Noova does not use tracking cookies. We use your browser's localStorage only to store your language preference and your sign-in session. No advertising, analytics, or third-party tracking cookies are set.
Contact
Questions? Reach us at privacy@noova.app.
SMS Communications
We do not share, sell, or disclose your mobile phone number to third parties or affiliates for their own marketing purposes. Message frequency varies based on your account activity and preferences. Message and data rates may apply. Contact your wireless carrier for details.