Privacy Policy

1. Data We Collect

We do not collect, receive, store, or otherwise process any personal data on systems we control. Because we collect nothing, providing personal data to us is never a statutory or contractual requirement, and there are no consequences of not providing it. We carry out no automated decision-making or profiling within the meaning of Article 22 GDPR — the app's story personalization runs entirely on your device and its inputs and outputs never reach us. We obtain no personal data from any source other than what you enter into the app on your own device.

3. How Stories Are Generated

By default, stories in Noctales are generated entirely on your device by Apple Intelligence. In this mode no story prompt, child profile detail, or preference data leaves your device, and stories are produced and stored only on your device.

Optional Apple Private Cloud Compute (version 1.1 and later). A parent can choose, in Settings > Story Engine and behind a parental gate, to have stories written by Apple's Private Cloud Compute for longer, richer stories. It is off unless a parent turns it on, and can be turned off at any time. When it is on, the details needed to write that night's story are sent to Apple's Private Cloud Compute: the child's first name, age, pronouns, favorite animal and color, the theme and mood, and a short summary of story preferences. Apple uses the request only to write the story, does not store it, and does not make it accessible to anyone, including Apple. The request never reaches us: Noctales has no servers. The finished story is saved only on your device. If Private Cloud Compute cannot be reached, the story is written on your device instead. See Apple's description of Private Cloud Compute.

One-time narration download. Shortly after installation, Noctales automatically downloads its story-narration voice files (machine-learning model assets) in the background using Apple's Background Assets service — the same Apple infrastructure that delivered the app itself. This request is handled by Apple and contains no personal data from Noctales: no child profile, no preferences, and no story content. Once this one-time download completes, story generation and narration work fully offline, without an internet connection.

4. Noctale Voice

The Noctale Voice feature allows stories to be narrated in a parent's recorded voice using iOS's Personal Voice capability. Personal Voice is a feature built and managed entirely by Apple within iOS Settings. Noctales never has access to the raw voice recordings used to create a Personal Voice — we only request authorization to use the synthesized voice for narration, which Apple processes on your device.

We do not store, transmit, or have any access to voice data. Apple's privacy practices for Personal Voice are governed by Apple's Privacy Policy.

5. iCloud Sync (Optional)

Noctales offers an optional iCloud sync feature that allows story libraries and child profiles to be backed up and restored across your personal Apple devices. This feature is disabled by default and must be explicitly enabled in the app's Settings.

When iCloud sync is enabled:

• Your child profiles, story history, and Story Intelligence preferences are stored in your personal iCloud account using Apple's CloudKit framework
• This data is encrypted and governed by Apple's iCloud privacy policies — we have no access to it
• Data syncs only between devices signed into the same Apple ID
• No data is stored on Noctales servers — CloudKit stores it directly in your iCloud account

To disable iCloud sync, turn it off in the app's Settings. To remove iCloud copies entirely, delete the app or remove its iCloud data via iOS Settings → [Your Name] → iCloud → Manage Account Storage.

6. Purchases and Subscriptions

All in-app purchases and subscriptions are processed by Apple through the App Store. We do not collect, store, or have access to your payment information. Purchase receipt validation happens on-device using Apple's StoreKit framework, and your subscription status is stored only on your device.

Apple's handling of purchase data is governed by Apple's Privacy Policy.

11. Children's Privacy (COPPA & GDPR)

Noctales is designed for use by parents and caregivers on behalf of children. The app does not collect any personal information from children or adults. No account registration, email address, or personal identification is required to use the app.

Because we collect no data, there is no personal information to review, delete, or modify. All data stored by the app (child profiles, stories, preferences) exists solely on your device and can be deleted at any time by deleting the app.

Noctales complies with the Children's Online Privacy Protection Act (COPPA), and with the GDPR's protections for children (including Article 8), by virtue of collecting no personal information whatsoever.

12. Data Deletion

Because all data is stored locally on your device, you are always in full control:

• Delete individual child profiles within the app at any time
• Delete the app from your device to remove all associated data permanently
• If iCloud sync is enabled, disabling it or deleting iCloud data in iOS Settings removes cloud copies

There is no account to close and no server-side data to request deletion of, because none exists.

13. Changes to This Policy

If we make material changes to this Privacy Policy, we will update the effective date at the top of this page and, where appropriate, notify users within the app. Continued use of Noctales after any changes constitutes acceptance of the updated policy.

Given the nature of this app — no data collection, no servers — we do not anticipate material changes to this policy.

14. Contact

Noctales is an iOS application developed and published by Embay, LLC, a limited liability company registered in Florida, United States ("we," "us," or "our"). For the purposes of the EU and UK GDPR, Embay, LLC is the data controller for any personal data processed in connection with Noctales. We have not appointed a Data Protection Officer, and given the nature and scale of our processing we are not required to appoint one.