← back

privacy.

last updated · may 2026

noctly is built around a simple idea: your shift data belongs to you, and it should stay on your phone. this policy explains exactly what we collect, where it lives, and what we don't do.

what stays on your device

everything you tell noctly during onboarding — your first name, shift hours, job type, nights per week, and the biggest struggle you picked — is stored locally on your iPhone in iOS UserDefaults. it never leaves the device.

your meal logs, caffeine entries, recovery scores and shift history are kept the same way: on-device only.

backend

noctly currently has no active backend. a Supabase backend is wired into the codebase but inactive — we may activate it in a future version to enable opt-in features like cross-device sync. if and when that happens, it will be off by default, opt-in only, and we will update this policy before any data is sent.

notifications

shift nudges (pre-shift meal, caffeine cut-off, wind-down meal, etc.) are scheduled locally using Apple's UserNotifications framework. nothing is sent through a remote push server. if you turn notifications off in iOS Settings, nothing breaks — the schedule is just silent.

calendar

noctly only requests calendar read access if you turn on smart shift import. when enabled, your calendar events are read on-device to detect shifts. the events themselves never leave your phone. you can revoke calendar access at any time in iOS Settings.

widgets

the home- and lock-screen widgets read your profile and shift state from a shared App Group on-device. this is standard iOS behaviour — no network call is involved.

subscriptions

subscriptions, if any, are processed by Apple via StoreKit. we receive only the active subscription state from Apple — we never see your name, card number, or other payment details.

what we don't do

• no analytics. no Mixpanel, Amplitude, PostHog, Segment.
• no crash reporting. no Sentry, Crashlytics, Bugsnag.
• no advertising identifiers. we don't read the IDFA.
• no tracking pixels, no fingerprinting, no third-party SDKs.
• no email list. we don't ask for your email address.

deleting your data

open noctly, go to settings → reset onboarding. that wipes the on-device profile and starts you fresh. deleting the app from your phone removes everything noctly has ever stored.

children

noctly is not directed at children under 13 and we do not knowingly collect data from children.

changes

if this policy changes, the "last updated" date above will change with it. material changes will be highlighted in-app before they take effect.

contact

privacy questions go to [email protected]. real human, usually answers within a day.