Back to Noctiq

Noctiq Privacy Policy

Effective date: 3 July 2026

This Privacy Policy explains how Noctiq ("Noctiq", "we", "us") collects, uses, shares, and protects your information when you use the Noctiq: Sleep Coach mobile application and related services (the "Service"). Noctiq is operated by Stylianos Sapalidis (the "data controller"). If you have questions, contact us at support@trypadelup.com.

Noctiq provides general sleep and wellness information and is not a medical device and does not provide medical diagnosis or treatment.

Who we are and how to reach us

  • Controller: Stylianos Sapalidis
  • Contact: support@trypadelup.com

If you are in the EU/EEA or UK, this policy is intended to meet GDPR/UK GDPR transparency requirements. If you are in the United States, state-specific notices below apply.

What data we collect

We collect only what we need to provide the features you use.

  • Account data: your Apple ID relay identifier (Sign in with Apple), email address (if you use email sign-in), or an anonymous identifier if you continue without an account.
  • Sleep and health data: sleep duration, sleep stages, heart rate, heart-rate variability, and related metrics you allow us to read from Apple Health (HealthKit). Data from wearables such as Garmin, Oura, or WHOOP is read only where you have synced it into Apple Health. This is special-category (health) data.
  • App activity: program and curriculum progress, supplement reminders you create, and settings.
  • Coaching content: the messages you send to, and receive from, Noctiq Coach.
  • Community activity: posts and interactions you choose to submit to community features.
  • Subscription data: your subscription status, purchase and renewal events (processed via Apple and RevenueCat). We do not receive your full payment card details.
  • Device and technical data: push notification tokens, app version, device model, operating-system version, and diagnostic/crash information.
  • Optional analytics: usage events, if you have not disabled optional analytics.

How we use your data

  • To provide core features you request: sleep tracking, scoring, coaching, education, routines, reminders, widgets, and community.
  • To generate AI coaching responses (wellness information, not medical advice).
  • To manage your subscription and entitlements.
  • To send notifications you have enabled.
  • To secure the Service, prevent fraud and abuse, and debug problems.
  • To understand and improve the Service through optional analytics.
  • To comply with legal obligations.

Legal bases (EU/EEA/UK): performance of a contract (providing requested features); your explicit consent (health/biometric processing, optional analytics, community participation, marketing notifications); our legitimate interests (security, fraud prevention, service improvement) balanced against your rights; and legal obligations (records, tax, disputes).

HealthKit

Health data read from Apple Health is used only to provide in-app features you request and, where you enable it, to sync insights across your devices. We do not use HealthKit data for advertising, we do not sell it, and we do not share it with third parties for their own purposes. HealthKit data remains on your device unless you enable features that require processing it on our infrastructure.

Who we share data with (processors and subprocessors)

We share data with service providers who process it on our behalf under appropriate agreements, only as needed to run the Service:

  • Supabase — cloud infrastructure, authentication, and database hosting.
  • Apple — Sign in with Apple, HealthKit, push notifications, and App Store payment processing.
  • RevenueCat — subscription and entitlement management.
  • Google (Gemini API) — generating AI coaching responses from the content you submit to Coach.
  • PostHog — optional product analytics.
  • Sentry — error and crash monitoring.
  • Cloudflare — content delivery and network security.

We do not sell your personal information, and we do not sell or share health data for cross-context behavioral advertising. We may disclose information if required by law or to protect rights, safety, and the integrity of the Service.

International transfers

Some providers listed above process data in the United States or other countries outside the EU/EEA. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep data

We keep personal data for as long as your account is active and as needed to provide the Service. After account deletion we remove account-linked data, except where limited retention is required for legal compliance, fraud prevention, dispute resolution, tax and transaction records, or short-term backups, after which it is deleted or anonymized.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export (portability), restrict or object to processing, and delete your data, and to withdraw consent at any time without affecting prior lawful processing.

  • In the app: Settings → Data & Privacy lets you manage optional processing, export your data, and delete your account.
  • You can disable optional analytics, notifications, HealthKit access, and wearable connections at any time in Settings or your device settings.
  • To exercise any right or ask a question, contact support@trypadelup.com. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Withdrawing consent for health processing, analytics, or community participation will stop the related features but does not affect processing already carried out lawfully.

United States state privacy notices

If you are a resident of California or another US state with a comprehensive privacy law, you have rights to know, access, delete, correct, and opt out of "sale"/"sharing" of personal information. Noctiq does not sell personal information and does not share it for cross-context behavioral advertising. To exercise your rights, contact support@trypadelup.com. We will not discriminate against you for exercising your rights.

Children

Noctiq is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use the Service. We do not knowingly collect data from children below this age; if you believe a child has provided us data, contact us and we will delete it.

Security

We use platform authentication, row-level access controls, encryption in transit, server-side secret storage, and restricted service credentials to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this policy to reflect changes to the Service or the law. We will update the effective date above and, for material changes, provide additional notice in the app.

Contact

Questions or requests: support@trypadelup.com