Privacy Policy

Last Updated: January 18, 2026

Welcome to Noctis, an AI-powered educational assistant created by Ritvik Gautam. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

When you use Noctis, we collect the following information:

1.1 Account Information

• Google Account Information: When you sign in with Google, we receive your name, email address, and profile picture
• Email/Password: If you create an account with email, we store your email and an encrypted password hash

1.2 Educational Data

• Canvas LMS Data: When you connect Canvas, we access your courses, assignments, grades, and calendar events using your Canvas API token
• Google Calendar Data: When you connect Google Calendar, we access your calendar events to provide schedule assistance

1.3 Communication Data

• WhatsApp Number: When you link WhatsApp, we store your phone number to enable messaging
• Chat History: We store your conversations with Noctis to maintain context and improve your experience

1.4 User Preferences

• Settings: Theme preferences, notification settings, and customization options
• Profile Data: Projects, assignments, and interests you manually add or that we sync from Canvas

2. How We Use Your Information

We use your information to:

• Provide AI Assistance: Generate personalized responses based on your academic context
• Display Your Schedule: Show assignments, deadlines, and calendar events
• Enable WhatsApp Messaging: Allow you to chat with Noctis via WhatsApp
• Personalize Experience: Tailor greetings and responses to your specific courses and projects
• Maintain Context: Remember your conversation history for better assistance
• Improve Our Service: Analyze usage patterns to enhance Noctis's capabilities

3. Data Storage and Security

3.1 Encryption

• Canvas API Tokens: Encrypted using AES-256-GCM encryption
• Google Calendar Tokens: Encrypted using AES-256-GCM encryption
• Passwords: Hashed using bcrypt with salt rounds

3.2 Storage Location

• Data is stored on secure servers with encrypted connections
• Chat history and user data are stored in local JSON files (for self-hosted instances)
• No data is stored on third-party cloud services without your explicit consent

4. Third-Party Services

Noctis integrates with the following third-party services:

4.1 Google Services

• Purpose: Authentication (Google Sign-In) and calendar access
• Data Shared: Profile information, calendar events
• Privacy Policy: Google Privacy Policy

4.2 Canvas LMS

• Purpose: Access course information, assignments, and grades
• Data Shared: Your Canvas API token (encrypted)
• Note: We only access data you explicitly authorize

4.3 WhatsApp (Meta)

• Purpose: Enable messaging with Noctis via WhatsApp
• Data Shared: Your phone number, messages
• Privacy Policy: WhatsApp Privacy Policy

4.4 OpenRouter (AI Processing)

• Purpose: Process your messages and generate AI responses
• Data Shared: Your chat messages and context (assignments, courses)
• Privacy Policy: OpenRouter Privacy Policy

5. Data Sharing and Disclosure

5.1 We DO NOT:

• ❌ Sell your personal information to third parties
• ❌ Share your data with advertisers
• ❌ Use your data for marketing purposes without consent
• ❌ Access your Canvas or Google data without explicit permission

5.2 We DO Share Data With:

• ✅ Services you explicitly connect (Google Calendar, Canvas, WhatsApp)
• ✅ AI processing services (OpenRouter) to generate responses
• ✅ Law enforcement if legally required

6. Your Rights and Controls

You have complete control over your data:

6.1 Access and Export

• View all your chat history in the app
• Export your data at any time

6.2 Disconnect Services

• Disconnect Google Calendar in Settings
• Remove Canvas token in Settings
• Unlink WhatsApp numbers in Settings

6.3 Delete Your Data

• Delete individual chats
• Clear all chat history
• Delete your entire account (contact support)

6.4 Data Retention

• Chat history is retained until you delete it
• Account data is retained while your account is active
• Deleted data is removed from our systems within 30 days

7. Cookies and Tracking

• Session Cookies: Used to keep you logged in (required for functionality)
• No Third-Party Cookies: We don't use advertising or tracking cookies
• Local Storage: Used to store theme preferences and settings locally in your browser

8. Children's Privacy

Noctis is designed for educational use and may be used by students of all ages. If you are under 18, please ensure you have parental consent before using our service. We do not knowingly collect personal information from children under 13 without parental consent.

9. International Users

Noctis is operated from the United States. If you are accessing the service from outside the US, your data may be transferred to and stored in the US. By using Noctis, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We'll update the "Last Updated" date at the top
• We'll notify you of significant changes via email or in-app notification
• Your continued use of Noctis after changes means you accept the updated policy

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Email: ritvikgautam132@gmail.com
• Website: noctis0.genhance.ai
• Developer: Ritvik Gautam

12. Legal Basis for Processing (GDPR)

If you are in the European Union, we process your data based on:

• Consent: When you explicitly agree (e.g., connecting Google Calendar)
• Contract: To provide the service you requested
• Legitimate Interest: To improve our service and prevent abuse

© 2026 Ritvik Gautam. All rights reserved.