Privacy policy

The short version

What stays on your device

Everything you put in Noxium is encrypted on your iPhone or iPad with AES-256-GCM before it is saved. Names, dates, places and notes are encrypted too. Your bolt pattern and recovery phrase are never stored; they are turned into a key on the device with Argon2id.

iCloud backup

If iCloud backup is on, Noxium stores encrypted copies in the private CloudKit database of your own Apple Account. Only encrypted data leaves your device. It counts toward your iCloud storage. We have no access to it, and Apple cannot decrypt it. You can turn backup off in Settings at any time.

Shared vaults

If you share a vault, the person you invite gets access to that one vault through iCloud sharing. It is protected by a password you give them yourself.

Purchases

Purchases are handled by Apple through the App Store. We receive no payment details and no personal information from them.

Crash reports

Noxium contains no crash reporter or analytics of its own. If you choose to share analytics with app developers in iOS Settings, Apple may pass us anonymous crash reports, which never include your photos, videos or notes.

Permissions

Noxium asks for the camera, microphone and Photos only when you use those features, and Face ID only to open your vault. Location data stays inside your encrypted photos.

This website and the beta sign-up

getnoxium.app uses Google Analytics to count visits and see which pages people read. When a page loads, Google Analytics sets cookies and receives the page address, the page that sent you here, your browser and device type, and an approximate location based on your IP address. Google says Google Analytics 4 doesn't log or store IP addresses. We use this only to improve the site; there's no advertising on it. You can block it with your browser's privacy settings, a content blocker, or Google's opt-out add-on. This is about the website only: the Noxium app has no analytics. Our fonts are served from getnoxium.app itself, so loading a page doesn't contact Google Fonts. The site is hosted by Cloudflare, which, like any web host, handles your IP address and basic request details to deliver pages and protect the site from abuse.

If you enter your email address and press "Get the beta", the page shows you the TestFlight link, and we receive your email address and the time you signed up. They are stored in a Google Sheet that only we can open, sent there through Google Apps Script. We use your email address only to contact you about the Noxium beta. We don't sell it or share it with anyone else. To have it removed, write to business@inertiaprojects.info from that address and we'll delete it.

Your browser remembers your light or dark choice and, if you joined the beta, the email you used, so the page can show that you're on the list. This stays in your browser; "Use a different email" clears it.

Children

Noxium does not knowingly collect information from anyone, including children.

Changes and contact

If this policy changes, we will update this page and its date. Questions: business@inertiaprojects.info.