Privacy notice

last updated 10 October 2026

journal

The short version

Your chat history, journal notes, details and saved contacts are kept on your own device. No sign-up needed to chat, no tracking cookies, no ads, and no server-side chat history for you to return to. If you subscribe, we store your email address only to restore your access. We also keep necessary device, usage and subscription records, including your billing country. Nothing is answered on your phone itself: when you send a message, that message, the earlier turns of that conversation and the details you chose to add on the "about you" page travel through Noahkind's service to the AI provider that writes the reply. Your conversations are processed automatically to answer you and are never read by anyone at Noahkind, except replies you choose to report. If you report a reply, that reply and your note are sent to Claudine Carr for review. server keeps no copy — it holds no database of your messages — and the provider doesn't keep them as a chat history for you to return to, though it may hold them briefly for safety and abuse checks. Your journal notes and saved contacts are not sent.

How we collect, use and store your data

Collect. Only what the app needs to answer you: the message you send, the earlier turns of that conversation, and anything you chose to add on the "about you" page. If you use the microphone, the recording of what you say. If you subscribe, the email you paid with and your billing country. Your journal, notes and saved contacts are never collected — they stay on your device.

Use. To write a reply that fits you, to restore a subscription on a new phone and lift its limits, and to understand in aggregate whether Noahkind is useful. Nothing is used for advertising, profiling or model training, and no automated decision with legal or similarly significant effects is made about you. Messages are automatically checked for under-16 disclosures and crisis wording: an under-16 disclosure stops ordinary chat, while crisis wording helps Noahkind offer safety guidance. Public help contacts remain available.

Store. Chats, journal, notes, contacts, passcode and age confirmation live in your device's own storage until you delete them. Noahkind's server keeps no copy of your messages — there is no database of them to return to — and the AI provider that writes the reply holds them only briefly for safety and abuse checks. What we do keep is the small set of records needed to run the service: a subscription status and dates, billing country, usage counts with no IP address, and your email only to restore access. Card details stay with Stripe.

Who is responsible

Claudine Carr, a sole trader trading as Noahkind, is the data controller for the small amount of processing described here. Contact: hello@noahkind.app.

What is handled, and why

Your messages. Sent to the AI service, together with the earlier turns of that conversation, so a fitting reply can be written. This is the whole point of the app, so the lawful basis is performing the service you asked for.

Messages are automatically checked for wording that suggests someone is under 16 or in crisis, so Noahkind can point to real help. This happens as part of writing the reply; no one at Noahkind reads your conversations. If you choose to report a reply, Claudine Carr reads that reply and your note, not the rest of the conversation.

Your name, age, relationship status and what you're dealing with. Entirely optional. If you fill them in, they are sent alongside your message so the reply fits you. The lawful basis is your consent, given by choosing to enter them; leaving them blank changes nothing else about the app.

Your journal, notes, saved contacts, passcode and age confirmation. Stored only in your device's own storage. We never receive them.

If you use your voice. Tapping the microphone records what you say on your phone, and that recording is sent — through the same AI gateway that writes Noahkind's replies — to be turned into text. The recording isn't kept on your device or by us afterwards, and isn't used to train anything. The text then sits in the message box and is handled exactly like something you typed — you can edit it before sending. The listen button works the other way round: the words of a reply are sent to generate the audio you hear. Voice is always optional — typing works exactly as before.

Anonymous usage counts. To understand how the site is used, we count a handful of things happening — never what was said. We record: a page being opened (its address, without any personal details), the site that sent you here and any campaign tag in the link (for example from an Instagram post), whether you're on a phone or a larger screen, your country, and these actions: your first message on a visit (that one was sent, not what it said), reaching the free message limit, opening the voice, journal or safety pages, and tapping an upgrade button. These counts pass through Noahkind's own server, which removes your IP address and browser details before forwarding them to Umami, our analytics provider. No cookies are used, no identifier is stored on your device for analytics, no fingerprint is made, and your individual visits can't be linked together. Message, journal and voice content is never included. The lawful basis is our legitimate interest in understanding, in aggregate, whether Noahkind is useful. You can switch it off on any device by opening noahkind.app/?notrack — this saves a simple "don't count me" setting on that device.

We don't use advertising or tracking cookies, we don't build a profile of you, we sell nothing to anyone else, and no automated decision with legal or similarly significant effects is made about you.

Cookies, honestly. Noahkind itself sets no cookies. The company that hosts the site sets one or two of its own that are strictly needed to deliver and protect the pages — they can't be switched off, they aren't used for advertising or tracking, and they don't tell us who you are.

If you subscribe. Payments are handled by Stripe, our payment provider, so your card details and billing address go to Stripe and never reach us. We keep a record that this device has a subscription — an anonymous ID already on your phone, the subscription's status and its dates, your billing country (to understand where subscriptions are bought), and the email you paid with only to restore access (so we can send a one-time code if you move your plan to a new phone) — so the free daily limit can be lifted. You can cancel any time, and a full refund within 30 days is guaranteed in our refund policy.

Sensitive subjects

Conversations about your health, feelings, relationships, sexuality or beliefs may count as special category information under UK and EU data protection law. It is handled only to write your reply, on the basis of the explicit consent you give by choosing to write to Noahkind, and it is not stored by us afterwards.

Who else is involved

No reply is written on your phone — there is no model stored on your device. One AI provider, reached through Lovable's AI gateway, receives your message in order to generate the reply, and processes it on our instructions. Message content is not used to train models. If you use the microphone or the listen button, a speech provider reached through the same gateway receives what you say, or the words of a reply, to turn it into text or audio, on our instructions. Anonymous usage counts, with no IP address or personal details, are sent to Umami. Website hosting is provided by Lovable, which handles the technical connection needed to deliver the site and keeps standard technical records — which page was asked for, when, and any fault — never the words of your messages. Noahkind's typefaces are included with the site itself, so no request to Google Fonts or any other outside font service is ever made.

Providers may process data outside the UK or EU. Where they do, transfers rely on the standard contractual protections those providers put in place.

How long it is kept

Subscription records are kept while your plan is active and remain after it ends for access restoration, payment queries, refunds and any applicable legal record-keeping duties. We aim to delete subscription records within 12 months of cancellation; this isn't automatic yet. You can ask for deletion by emailing hello@noahkind.app; we will explain what can be deleted and any records that must be retained, and why. Cancelling a plan or deleting chats on your device does not delete subscription or payment records.

Read the deletion and retention policy for device deletion, subscription records and deletion requests.

On your device: until you delete it. "Delete everything" on the passcode screen or the what Noahkind keeps page removes all of it immediately. Clearing your browser data does the same.

With the AI provider: message text is processed for as long as needed to write the reply. Noahkind requests that the provider does not store the conversation, and it does not keep a chat history you can return to, though it may hold messages briefly for safety and abuse checks. The copy you can return to stays on your device.

Backups and diagnostics: we keep no backup of your messages, because we hold no copy of them. If your phone or browser backs itself up to iCloud, Google or similar, your chats are inside that backup — that copy belongs to you and your device settings, not to us. The host keeps standard technical records — which page was asked for, when, how long it took and any fault — and never the words of your messages.

Your rights

You have the right to see, correct, delete, restrict or object to the processing of your information, to withdraw consent at any time, and to complain to a regulator. Because everything lives on your device, you can already see all of it on the "what Noahkind keeps" page and delete all of it there in one tap — no request needed.

For anything else, email hello@noahkind.app. In the UK you can complain to the Information Commissioner's Office at ico.org.uk; in the EU, to your national data protection authority.

The 16 and over floor, and how it's checked

Noahkind is built for people 16 and over. Before chat opens you're asked for the month and year you were born. Chat opens only after the end of your 16th birthday month — for example, October 2010 is allowed from November 2026. Until then, you're shown a kind message and a link to the help page. The date you give is used once, in the moment, to work out whether you're old enough; it is never stored, never sent anywhere and never used to profile you. All that's kept on the device is a yes.

This is a self-declaration, not identity verification. We don't ask for ID, documents, a photo or a card, because that would mean collecting far more about you than the check is worth. Where Apple or Google give an app an age signal from the device itself, we use it alongside the declaration.

If you're under 18

Because people aged 16 and 17 use Noahkind, we follow the UK Information Commissioner's Age Appropriate Design Code — the Children's Code — for everyone, not only for younger users. In practice that means: the most private settings are the defaults and no one has to change anything to be protected; we collect the least we can, and nothing about you is required; there is no sign-up needed to chat, no cross-site tracking, no analytics profile (only anonymous counts), no advertising and no profiling of any kind; nothing is shared with third parties for their own purposes; and there are no streaks, rewards, or nudges designed to keep you here longer or press you into sharing more than you meant to.

Please don't put your address, school, passwords or bank details into a message. If you'd rather an adult knew you were using Noahkind, that's a good instinct — telling one is usually the right move.

If a conversation worries us

Nobody routinely reads or monitors your conversations, so Noahkind can't raise a concern about you to anyone — and won't pretend otherwise. What Noahkind does instead is name what's happening plainly, ask directly whether you're safe, point you to a helpline or emergency services when there's danger, and encourage you towards an adult or friend who can actually be there. Every reply also has a "report this reply" control, so anything that reads as unsafe can be flagged and sent to us, and we change the wording when it's wrong. A report carries only that reply, your note about it, which chat it came from and the time — no name, no device identifier, and none of the rest of the conversation.