Privacy Policy
Last updated: November 9, 2026
Noera is an app for explaining what you read in your own words and revisiting it later. This policy explains what data the Noera app and this website handle, why, who else is involved, and how to delete it.
Noera is operated by Felipe Arosa, an individual developer based in Brazil. In this policy and in our terms, "we" and "us" mean Felipe Arosa.
The short version
- We collect only what the app needs to work: your account, your books, and what you write.
- No ads, no analytics, no tracking, and we never sell your data. Neither the app nor this website uses cookies or third-party trackers.
- Your writing is sent to an AI model only when you ask for follow-up questions or a summary, and only after you've agreed to it in the app.
- Deleting your account in the app permanently removes your account and everything in it.
What we collect and why
| Data | Why | Where it's stored |
|---|---|---|
| Name, email address, password (stored only as a secure hash) | Your account | Our database |
| If you use Sign in with Apple: your Apple account identifier and the email Apple shares (which may be a private relay address) | Signing in with Apple | Our database |
| Session token, plus the IP address and device user agent of each signed-in session | Keeping you signed in | Our database; the token is also kept in your device's secure keychain |
| IP address, for rate limiting | Protecting the service from abuse | Our database, not linked to your account |
| Books you add (title, author, ISBN, cover link) and their chapters | Your library | Our database |
| Your explanations, your answers to follow-up questions, the AI's questions, and AI summaries | The core of the app | Our database |
| Technical request logs | Running and fixing the service | Our hosting provider's logs |
We don't collect your contacts, location, photos, or advertising identifiers.
Why we're allowed to use it
Data-protection laws such as Brazil's LGPD and the EU's GDPR require a legal basis for each use of personal data. Ours are:
| Use | Legal basis |
|---|---|
| Your account, sessions, library and writing | Needed to provide the app you signed up for (performance of a contract) |
| Sending your writing to Anthropic for follow-up questions or summaries | Your consent, given in the app and withdrawable at any time |
| Request logs and rate limiting | Our legitimate interest in keeping the service secure and working |
AI follow-up questions and summaries
Noera can ask you follow-up questions about an explanation, and write a summary of it. Both are optional. Before the first time, the app asks for your permission; you can withdraw it at any time in the app's Account screen. Withdrawing stops anything new from being sent and keeps the questions and summaries you already have.
When you use these features, our servers send the following to Anthropic's Claude API, which generates the questions or summary:
- Follow-up questions: your explanation, the questions and answers so far, and the book's title, author and chapter title.
- Summary: your explanation and the questions and answers, nothing else.
We send nothing else about you: no name, email address or account identifier.
According to Anthropic's privacy documentation, data sent through its API is not used to train its models by default. Anthropic deletes API inputs and outputs within 30 days, except where it must keep them longer to enforce its usage policy (for content its safety systems flag) or to comply with the law.
The AI never changes what you wrote. Summaries are stored separately from your explanation and labelled "AI-written" in the app.
Book search
When you search for a book, the search terms are sent from our servers to Open Library to find the title, author and cover. No identifier for you is sent with the search. Open Library's own privacy policy applies to what it receives.
Dictation
If you dictate instead of typing, speech recognition is done by Apple: on your device when it supports it, otherwise on Apple's servers, under Apple's privacy policy. Noera never receives or stores the audio — only the text that ends up in your explanation.
Service providers
We use a small number of providers to run Noera. They process data only on our behalf:
- Neon — hosts our database, in the United States (AWS us-east-1).
- Amazon Web Services — runs our servers and keeps request logs, in the United States (us-east-1).
- Anthropic — generates follow-up questions and summaries, only when you use them (see above).
- Apple — Sign in with Apple, and dictation when you use it.
- Open Library — book search, with no identifier for you.
- Cloudflare — hosts this website.
How long we keep data, and how to delete it
- Your account and everything in it are kept until you delete your account. In the app, go to Account → Delete account. This permanently deletes your account, your library, your explanations, follow-up conversations and summaries. If you signed in with Apple, we also revoke Noera's access to your Apple account.
- Sessions end when you sign out, and are deleted with your account.
- Request logs are kept for one month, then deleted automatically.
- Rate-limiting records (an IP address and a request count, not linked to your account) are deleted automatically within 48 hours of the last request from that address.
- Data sent to Anthropic is deleted by Anthropic within 30 days, with the exceptions described above.
Security
Passwords are stored only as secure hashes. The app keeps your session token in your device's secure keychain, and all traffic between the app and our servers is encrypted.
Your rights
You can see and edit what you've written in the app at any time, and delete it — or your whole account — from the app. Depending on where you live, you may also have the right to request a copy of your data, to correct it, or to object to how it's processed. To make a request, email support@example.com.
Children
Noera is for people aged 18 and over, and we don't knowingly collect data from anyone younger. If you believe someone under 18 has created an account, email support@example.com and we'll delete the account and its data.
This website
This website uses no cookies, no analytics and no third-party scripts. Our hosting provider, Cloudflare, processes the technical data any web server needs to deliver a page, such as your IP address.
Changes to this policy
If we change this policy, we'll update the date at the top of this page.
Contact
Questions about privacy: support@example.com.