Privacy Policy

1. Data controller

If you have any questions about how your data is processed, you can write to us at the email address above and we will reply within 30 days at the latest.

2. Data we collect

2.1 Account data

• Email address — needed to create the account and authenticate you.
• Password — stored securely and encrypted by Firebase Authentication. We never have access to your password in plain text.

2.2 Operational data

The app stores the information you enter to manage your work:

• Customers’ names, phone numbers and addresses
• Job descriptions (requests), statuses and dates
• Job amounts and recorded payments
• Photos attached to jobs (uploaded by you)

This data is yours. NOCTUX stores it on your behalf in Firebase / Google Cloud.

2.3 Messages to support

If you write through the app’s support chat (Settings, “Talk to support”), we keep your messages, your name in the shop’s team and the date, together with our replies. The conversation belongs to the shop: anyone on your team can see it, and the owner of NOCTUX reads it in order to reply to you.

2.4 Technical data

• Crashlytics: if the app crashes, an anonymous error report is sent automatically (device model, operating system version, error trace). It does not include data from your account or about your customers.
• App Check: verifies that requests come from the official app. It does not collect personal data.

2.5 Data we do NOT collect

• We do not collect real-time location.
• We do not carry out advertising tracking.
• We do not sell or transfer data to third parties for commercial purposes.
• Biometric data (fingerprint, facial recognition) is handled exclusively by your device’s operating system. NOCTUX never has access to it.

3. Purpose and legal basis

4. Recipients and data processors

To provide the service we use the following infrastructure providers, which act as data processors under appropriate confidentiality and security agreements:

Subscription payments are processed by Apple (App Store) or Google (Google Play), depending on where the subscription is purchased, as independent controllers and in accordance with their own privacy policies: NOCTUX neither receives nor stores your card details.

We do not disclose your data to any other third party except where required by law.

5. International transfers

Google LLC, RevenueCat, Inc. and Resend, Inc. are bound by the Standard Contractual Clauses approved by the European Commission, which ensure a level of protection equivalent to that of the GDPR for data transfers to the USA.

You can review the applicable safeguards in the Firebase privacy centre.

6. Data retention

• Account and operational data: kept for as long as you have an active account on NOCTUX.
• If you delete your account, we will erase all your data (jobs, customers, payments, photos and messages to support) from our systems within 30 days at the latest.
• Error reports (Crashlytics): kept for 90 days in accordance with Firebase’s policy.

7. Biometrics and on-device security

NOCTUX optionally offers quick unlock using fingerprint, facial recognition or the device PIN/pattern.

8. Minors

NOCTUX is a professional service intended for people aged 18 and over. We do not knowingly collect data from minors. If we find that a user is a minor, we will delete their account.

9. Your rights

Under the GDPR and the LOPDGDD (Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales, the Spanish data protection law) you have the following rights over your data:

• Access: to know what data we hold about you.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request the deletion of your data (“right to be forgotten”).
• Portability: to receive your data in a structured format.
• Restriction: to restrict processing in certain circumstances.
• Objection: to object to processing based on legitimate interest.

You can exercise any of these rights by writing to [email protected]. We will reply within 30 days at the latest.

If you are not satisfied with our reply, you can lodge a complaint with the Agencia Española de Protección de Datos (AEPD) (the Spanish data protection authority).

10. Changes to this policy

We may update this policy when necessary. If the changes are significant, we will notify you by email. The date of the last update appears at the top of this document.

11. Contact

For any question about privacy or data protection:

• Email: [email protected]
• Suggested subject: “Privacy request — [your name]”