Privacy Policy
1. Noorling is a parent-facing service
Noorling helps parents plan and reflect on family activities. Children do not create Noorling accounts, and Noorling does not provide child-directed advertising. An adult parent or caregiver creates and controls the family account and is responsible for the information entered about their family.
2. Information we collect
Depending on how Noorling is used, we may process:
- Parent account details, including email address and authentication records.
- Family and child profiles, including names, birth months rather than exact birthdays, interests, languages, aspirations, and parent-selected settings.
- Parent-entered plans, story feedback, mission and check-in activity, mood selections, short notes, family memories, and parent guidance questions.
- Co-parent invitations, membership, and access-control records.
- Photos or worksheet captures only when a parent chooses to upload or save them.
- Subscription status and product identifiers supplied by Apple and RevenueCat. Noorling does not receive complete payment-card details.
- Privacy-bounded technical information, such as app version, device platform, crash reports, and allowlisted product events when monitoring is enabled.
- Support messages, including their content, sender and recipient addresses, message headers, timestamps, device or build details, and any attachments a parent chooses to send.
3. How we use information
We use information to:
- create and secure parent accounts;
- keep each family's information separated from other families;
- provide family plans, stories, missions, check-ins, memory, and parent guidance;
- support authorized co-parent collaboration;
- manage subscriptions and restore purchases;
- protect the service, control costs, investigate failures, and improve reliability;
- respond to support, privacy, export, and deletion requests, protect the service, maintain necessary support history, and meet legal obligations.
4. Generated features and family information
Some stories and parent-guidance features use Anthropic models through Noorling's protected server. Noorling minimizes provider requests and excludes child names and stable account, family, child, event, and request identifiers from model prompts. Family information is not sold or permitted to train or fine-tune shared models. Parents remain responsible for reviewing generated suggestions and deciding what is right for their family.
5. Service providers
Noorling uses service providers only to operate and protect the service. Their roles may include:
- Apple — Sign in with Apple, TestFlight, and App Store billing.
- Supabase — authentication, database, and private application data.
- Railway — protected API and background processing.
- Anthropic — minimized generated-story and parent-guidance requests.
- RevenueCat — subscription entitlement and purchase-state management.
- Sentry — privacy-bounded crash and reliability monitoring.
- PostHog — allowlisted product analytics when enabled; no screen autocapture or family-written content.
- Cloudflare — website delivery, DNS, Cloudflare Email Routing for support-message delivery, and future private media delivery.
- Google Workspace — support-message storage and handling for messages delivered to Noorling support.
Noorling does not sell personal information and does not share personal information for cross-context behavioural advertising.
6. Retention and deletion
- Parent, child, family, plan, story, and memory information is generally kept while the family account is active, unless a parent deletes an item sooner.
- Account and family deletion is available in the app. Shared family information may remain available to an authorized co-parent when only one parent leaves the family.
- Deleted private photos and videos are queued for removal and are intended to be removed from active storage within 30 days. A parent may request earlier removal through support.
- Security, subscription, and usage-ledger records may be retained without family-written content when needed to prevent abuse, reconcile billing, or meet legal obligations.
- Support messages and attachments are deleted from the active mailbox no later than 90 days after the request is resolved. Google Workspace may retain deleted items in Trash for up to 30 additional days. A limited security and legal record without attachments or family-written content may be retained longer where needed to protect the service or meet legal obligations; a specific legal hold may also require longer retention.
- Backups and provider logs may remain until the applicable protected backup or log cycle expires. Noorling prohibits family-written content in analytics and crash telemetry.
7. Parent controls
Parents can use Noorling or contact support to:
- view and update family information;
- manage or revoke co-parent access where applicable;
- export family data;
- delete their account or, when authorized, the family;
- ask a privacy question or request correction or deletion.
8. Security
Noorling uses access controls, environment-managed secrets, encrypted provider connections, family-scoped database policies, and operational monitoring intended to protect family information. No internet service can guarantee perfect security. Please contact us promptly if you believe an account or family has been accessed improperly.
9. International processing and beta availability
Noorling is operated from Pakistan and uses providers that may process information in other countries. The bounded beta is not offered to residents of the European Union. We will review this policy and applicable transfer requirements before expanding beta geography.
10. Changes to this policy
We may update this policy as Noorling develops. We will change the effective date and provide appropriate notice when a change materially affects how family information is handled.
11. Contact
Privacy and account requests can be sent to help@noorling.com. Please use the subject “Noorling privacy request”, “Noorling data export request”, or “Noorling account deletion request” so we can route it correctly.