Privacy Policy

Contact and this beta notice

Use the visible “Report a problem” button to contact NOXLI about your account or privacy. If you are signed out, include a reply address only if you want a response. The legal operator identity and dedicated privacy contact are still being finalised for a wider launch; this beta notice will be updated with those details.

Your account and plans

Supabase handles authentication, including your email, password and login session. NOXLI uses your account ID, email, username and city to provide your profile. Saved records link your account to venue references. Going records also include plan timing and status. Tonight’s Activity presents venue counts rather than other users’ account identities.

You can edit your username and city, remove Saved places and change Going plans in the app. Account data is used to deliver these features and keep account access secure.

Location and searches

Location is optional and requested through your browser. When available, coordinates help display nearby places, distances and the map, and are sent to Google for relevant place searches. If unavailable, NOXLI uses its city fallback. The app does not create a location-history record.

Search text may be sent to OpenAI to interpret your request and to Google Places to find venues. Avoid entering sensitive personal information in searches.

Google Maps and venue content

NOXLI uses Google Maps, Places and photos. Google receives information needed to serve those requests, such as network and device information and map/search inputs. Google content is covered by the Google Privacy Policy. NOXLI keeps Google Place IDs as venue references; current Google display details are loaded into temporary application memory, and the photo proxy instructs browsers and shared caches not to store photo responses.

Feedback and service providers

A problem report includes your message, the current page path, submission time and browser/device user agent, plus your account ID when signed in. Anonymous reports are supported. Do not include passwords or other sensitive information. Reports help investigate problems with the beta.

Hosting, authentication/database, email delivery and search/map providers process information needed to run their parts of the service. These include Vercel, Supabase, the configured authentication email provider, Google and OpenAI. Their services may process data outside Ireland or the EEA; provider transfer arrangements and the complete retention schedule must be documented as the beta develops.

Cookies, local storage and retention

Authentication uses session cookies and related browser storage. Saved venue-reference caches are scoped to your account and are optional; the server remains the source of truth. Signing out ends access to protected app pages. Account, plan and feedback records remain available for their service purposes unless removed through the app or handled following a request. A fixed retention schedule has not yet been finalised.

Your privacy choices

You can deny or revoke location permission in your browser. You can contact NOXLI through “Report a problem” to request access, correction or deletion of personal data, or to ask about restriction, objection or portability where applicable. The app does not yet offer automatic account deletion. Requests may require identity verification. You can also raise concerns with the Irish Data Protection Commission.