Privacy Policy

Introduction

Welcome to Northe (“we,” “our,” or “us”). We are committed to protecting your privacy and being transparent about how we handle your personal information. This Privacy Policy explains our data practices for Northe (“the App”).

Your privacy is our priority. The App is designed with a privacy-first approach, storing your data locally on your device and giving you complete control over how your information is handled.

Information We Collect

Personal Data You Provide

When you use the App, you may provide the following types of personal information:

• Mood: Your daily mood (1-5 scale) and the emotions you tag; on some nights, also your stress level (1-5)
• Evening Reflection: The tags you choose (who you were with, what went well, what was hard and the question of the day) and what you write on each page
• Today’s Practice: Whether you did it, tried it or had no chance, how much it helped (1-5), and any notes you add
• Physical Activity: When the reflection asks, the kind of activity you did and any note you add
• Your Profile (Me): Your name, your goals, the pages the App writes about you, your answers to them (“That’s me” / “That’s not me”) and the ideas you mark as resonating with you
• Older Entries: If you used earlier versions of the App, your entries may include sleep, energy, gratitude or decision notes. They stay on your iPhone; the App no longer asks for them

Automatically Collected Data

• Usage Patterns: Which features you use and subscription events, sent to Firebase as anonymous events only if you agree to share usage statistics — it is off until you turn it on, on the AI permission screen or in Settings (see “Analytics and Crash Reporting”). Your streaks and statistics are computed on your device
• App Performance: Technical information needed for the App to function properly

Wellbeing Data

• Self-Reported Only: Mood and stress level are values you enter yourself in the App
• The App does not read from Apple Health and requests no Health permissions

How We Store Your Data

Local Storage (Primary Method)

• Your data is stored locally on your device in encrypted files
• Data is encrypted by iOS on your device. It stays encrypted until the first time you unlock the iPhone after turning it on
• We use atomic file writes to ensure data integrity
• Storage location: Your device’s Documents directory

iCloud Sync (Optional)

• You control whether your data syncs to iCloud
• iCloud sync can be enabled or disabled in the App’s settings
• When enabled, your data is encrypted and stored in your personal iCloud account
• We cannot access your iCloud data — it belongs to you
• Conflict resolution: In case of sync conflicts, the newest data is preserved

How We Use Your Data

Your personal data is used exclusively to:

• Provide the core functionality of the App
• Generate personalized insights and recommendations
• Track your progress and identify patterns
• Suggest relevant mental models and growth strategies
• Calculate statistical analysis of your personal data trends

Your data is stored only on your iPhone — and in your own iCloud, if you turn on backup. We have no database. For Northe to work, it sends your reflections to AI providers, only with your permission, which the App asks for before sending anything and which you can withdraw anytime in Settings › Privacy. With permission, these are the moments data leaves your device: completing an evening reflection sends it, together with your reflections from up to the seven days before, to our server so the App can pick tomorrow’s practice; opening the App on a new day sends your reflections from up to the last seven days, together with the personal profile pages the App writes about you, so it can compose your daily north; opening the Me tab sends the reflections the App has not yet read, together with those pages, so it can update them — and when a practice ends, the reflections from the days you did it, so it can write down what you learned; asking for another practice with “Not a fit today?” sends your reflection and the days before it again; and opening My insights sends a summary in numbers (days tracked, average mood, streaks), with nothing you wrote. Crash reports and anonymous usage analytics are sent to Firebase (Google).

AI Services and Data Processing

AI Services

• AI Processing: AI features are processed through our secure proxy, a Cloudflare Worker. When Cloudflare cannot be reached at all — Spanish internet providers block it during some football broadcasts — the App sends the request to our backup server instead, hosted by Hetzner in Germany (EU). It runs the same code under the same rules
• Server-Side Keys: API keys are managed server-side, never stored on your device
• Only With Your Permission: Nothing is sent to an AI service until you accept the App’s AI permission screen. You can withdraw it anytime in Settings › Privacy; without it, the App cannot pick your practice or write your daily north, and nothing is sent
• What Is Sent: Your evening reflection, your mood, who you were with, your physical activity, how your practice went and how much it helped, your recent reflections, and the personal profile pages the App writes about you — including your name, your goals and all the free text in them — are sent to our server for processing by third-party providers
• AI Providers: Our proxy routes requests to OpenRouter and Groq, third-party AI providers. OpenRouter may pass a request to the services that host the model, always with its no-data-retention option on. If one provider is unavailable the request falls back to the next, so your content may be processed by any of them
• No Account Identifiers: The App has no accounts. Your email and Apple ID are never sent. Your name is sent only as part of your profile pages, as described above
• Daily Limit Per Subscription: To confirm you are subscribed, requests carry the App Store’s signed proof of your subscription. It contains a purchase identifier, the product and its dates — not your name, email, or Apple ID — and the daily limit is counted against that purchase identifier. Requests also carry a randomly generated device identifier, not linked to your name, email, or Apple ID. “Delete all my data” deletes it too
• No Server Storage: Our servers do not store what you write after processing. We have no database. For the daily limit each one keeps only, for 48 hours, the purchase identifier, its time zone and how many requests it has made

Data Sharing and Third Parties

We Do NOT Share Your Data For:

• Advertising or marketing purposes
• Tracking across apps or websites
• Sale to third parties
• Social media integration

Limited Data Sharing:

• AI Services: With your permission, your recent reflections and profile pages are sent to third-party AI providers via our secure proxy, at the moments described in “How We Use Your Data”
• Firebase (Google): Crash reports and anonymous usage events, as described below
• iCloud: Only if you enable sync, data goes to your personal iCloud account

Analytics and Crash Reporting

• Firebase Crashlytics: Crash reports, device model, OS version, and stack traces are sent to Google for stability monitoring. No personal tracking data is included, and reports are not tied to your device identifier. Crash reports are always sent; the Settings switch covers usage analytics only
• Firebase Analytics: Only if you agree, anonymous usage events — feature usage counts and subscription events — are sent to Google. No mood data, reflections, or personal content is included
• We do not collect advertising IDs or track you across apps or websites
• Your reflections, mood entries, and personal content are never sent to analytics services

Your Rights and Choices

Data Control

• View Your Data: Access all your stored data within the App
• Delete Data: Remove individual entries or reset all data
• Export Data: Your data is stored in standard JSON format
• Disable Features: Turn off iCloud sync, usage analytics, or AI processing at any time in Settings. Without AI processing, the App cannot pick your practice or write your daily north

California Privacy Rights (CCPA)

If you’re a California resident, you have the right to:

• Know what personal information we collect and how it’s used
• Delete your personal information
• Opt-out of the sale of personal information (Note: We don’t sell personal information)

European Privacy Rights (GDPR)

If you’re in the European Union, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict or object to processing
• Data portability

Data Security

We implement appropriate security measures to protect your data:

• Local Encryption: Data is encrypted on your device using iOS file protection
• Secure Transmission: Any network requests use HTTPS encryption
• No Unnecessary Access: We cannot access your locally stored data
• Regular Updates: We keep the App updated with latest security practices

Data Retention

• User Control: Your data is retained until you choose to delete it
• No Automatic Deletion: We don’t automatically delete your data (longer history improves insights)
• Complete Removal: You can completely reset all App data at any time

Children’s Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

Location Services

The App does not request or use location services. Firebase may infer your approximate country or region from your IP address, for anonymous statistics only.

Cookies and Tracking

The App does not use cookies or web beacons. Firebase uses a random installation identifier to count usage anonymously; it cannot follow you across apps or websites and is not used for advertising.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the “Last updated” date
• We will notify you through the App if changes are significant
• Continued use of the App constitutes acceptance of the updated policy

Contact Us

If you have questions about this Privacy Policy or your data:

Email: support@deltaailabs.com Subject: Privacy Policy Inquiry - Northe

For data subject requests (access, deletion, etc.), please include:

• The nature of your request
• Any relevant details to help us locate your data

Legal Basis for Processing (GDPR)

Our legal basis for processing your personal data:

• Consent: For optional features like iCloud sync, external AI services and usage analytics
• Legitimate Interest: For core app functionality and local analytics
• Contract Performance: To provide the services you’ve requested

---

Summary: Your privacy matters to us. Your entries live on your device, you keep control of them, and we never share your personal information for advertising or marketing. Most processing happens on your device — the exceptions are your recent reflections and profile pages, which, with your permission, the App sends to our proxy for processing by third-party AI providers at the moments described above, without storing them afterwards, and anonymous crash and usage analytics sent to Firebase.