Privacy Policy

Your nights stay yours.

What Nox collects, why, who helps us run the app, and the choices you have.

Last updated: 6 October 2026

1. Introduction

Nox ("we", "us", "the app") is a nightlife diary. You drop photos at the places you visit during a night out, Nox pins them to a map, draws your route and builds a card of the night. With Crew, you can share a night with friends and see each other's drops on one map.

This policy explains what personal data we collect, why, how we use and store it, and the rights you have. Nox is operated by Raşit Gürses, who is the data controller. Questions about this policy or your data: privacy@nox-io.com.

2. What data we collect

Account information

• Your email address, used to create and sign in to your account
• Your username and your in-app character
• If you use Sign in with Apple: an identifier from Apple and, on first sign-in only, the name and email you choose to share

Content you create

• Photos you take in the app when you drop a stop
• An optional short message (caption) you add to a photo
• The location (GPS coordinates) and time of each stop
• Your nights, stops, routes, distance travelled and night cards
• Your level and experience progress, and the statistics shown in your profile and crew leaderboard

Location

We access your location only while you use the app, to place your stops on the map, centre the map and build your route. We do not track your location in the background and we do not record a continuous location trail. The distance of a night is calculated from the stops you drop.

Crew and social data

• The crews you create or join, and your role in them
• Which nights you share with your crew, and your visibility choices
• Reports you submit and users you block

Device and technical data

• A push notification token, if you allow notifications, so we can notify you about your crew's activity
• Your app language, device model, iOS version and app version
• Usage and crash information, described in section 7

We do not sell your personal data.

3. Crew and shared nights

Everything in Nox is private by default. Content becomes visible to others only when you choose to share it:

• When you share a night with your crew, crew members can see its photos, messages, stops, route and stats on the map, including new photos as you add them.
• You can set a night to "Only me" at any time. Crew members then can no longer see it.
• You can hide the location of a stop from your crew.
• Your username, character and crew statistics are visible to members of crews you belong to.

You can report content or a user, and block a user. When you block someone, their content is hidden from you and yours from them. We review reports and may remove content or accounts that break our rules.

4. Why we collect it and our legal basis

Under the EU General Data Protection Regulation (GDPR), we process your data on these bases:

• Performance of a contract: creating your account, saving your nights, stops and photos, generating routes and cards, running Crew and shared nights, The city tonight, and your subscription.
• Legal obligation: keeping purchase records as required by tax and accounting law.
• Consent: access to your camera, photos and location, push notifications, and tracking for advertising measurement (App Tracking Transparency). You give these through iOS permission prompts and can withdraw them at any time in your device settings.
• Legitimate interest: keeping the app secure, preventing abuse, handling reports, fixing crashes, and understanding how the app is used so we can improve it.

5. The city tonight

The city tonight is a Nox+ feature that shows how lively nightlife is around you. It works like this:

• Your location: when you open the screen, the app sends your current location (or a city you choose) to our server to work out activity within about 10 km. We use it to answer that request and do not store it with your account.
• Venue and weather data: venues and opening hours come from OpenStreetMap, a public map database. Weather is looked up for a coarse area of a few kilometres, never for your exact position, and without any information about you.
• "How is it now?" reports: if you tell us how busy a place is, we store the report (the venue, quiet / busy / packed, and the time) with your account so we can prevent abuse. Your location is checked at that moment to confirm you are at the venue, but it is not saved. Other people only ever see reports as an anonymous, combined level for an area. Reports are deleted after 30 days.

The activity shown is an estimate. It is based on public map data, time, weather and anonymous reports, not on tracking other users.

6. Subscriptions

• Payments: Nox+, Nox Pro and Nox Crew are bought and billed through Apple. Nox never sees your card or payment details.
• RevenueCat: we use RevenueCat to check whether your subscription is active. It receives your purchase and subscription status, the product, transaction identifiers and an internal Nox user ID. It does not receive your photos or nights.
• Crew pass: if you hold Nox Crew and give Pro to members of your crew, we record who gave access to whom, so it can be switched on and off.
• Records: purchase records may be kept for as long as tax and accounting law requires, even after you delete your account.

7. Analytics, crash reports and advertising

• Usage analytics (Google Firebase Analytics): anonymous events such as starting or finishing a night, so we can see which parts of the app work and where people get stuck. We use an internal user ID, not your email.
• Crash reports (Google Firebase Crashlytics): when the app crashes, a report with the device model, iOS version and technical details of the crash, so we can fix it.
• Session replays (Microsoft Clarity): recordings of how the app's screens are used, such as taps and scrolling, so we can find confusing or broken parts of the app. Your photos, messages, night text, map and sign-in fields are masked and are not visible in these recordings.
• Advertising measurement (Meta SDK): if we run ads for Nox, the Meta SDK helps us measure whether they lead to installs and first nights. Data linked to Apple's advertising identifier is used only if you allow tracking in the App Tracking Transparency prompt. You can change this at any time in Settings → Privacy & Security → Tracking. We do not show ads in Nox.

8. Where your data is stored

Your account, nights, stops, messages, crews and photos are stored with Supabase, our backend and storage provider, on servers in the European Union. Photos and stops are also cached on your device so the app works offline; this local copy is removed when you delete the night or your account.

Some providers listed below, such as Google, Microsoft, Meta and RevenueCat, may process data outside the EU, including in the United States. Where that happens, the transfer is covered by the providers' data protection terms, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

9. Third-party services

Each provider processes data only as needed to deliver its service to us.

10. How long we keep your data

• Your account and content: as long as your account exists. Deleting a night or stop removes its photos, messages and data.
• Shared nights: when you delete a shared night or leave a crew, your content is no longer shown to that crew.
• Deleting your account: permanently deletes your profile, nights, stops, photos, messages, crew memberships and account record from our systems.
• Reports about content or users: kept as long as needed to review them and protect the community.
• "How is it now?" reports: deleted after 30 days.
• Purchase records: kept as long as tax and accounting law requires.
• Analytics, crash reports and session replays: kept for a limited period set by each provider, after which they are deleted automatically.

11. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data, for example your username, which you can edit in the app
• Delete your data: you can delete your account and all associated data at any time in the app, under Profile → Delete Account
• Withdraw consent for camera, photos, location, notifications or tracking at any time in your device settings
• Object to or restrict certain processing, including analytics
• Data portability: request a copy of your data

Deleting your account does not cancel an Apple subscription. To stop being charged, cancel it in iPhone Settings → your name → Subscriptions.

To use any of these rights, email privacy@nox-io.com. You also have the right to lodge a complaint with your local data protection authority; in Italy this is the Garante per la protezione dei dati personali.

12. Age requirement

Nox is intended for people aged 17 and over and is not directed at children. We do not knowingly collect personal data from anyone under this age. If you believe a minor has given us personal data, contact us and we will delete it.

13. Security

We take reasonable measures to protect your data. Server-side access rules ensure you can only access your own data and the nights your crews have shared with you. Communication with our servers is encrypted, and sensitive operations are protected on the server side.

14. Changes to this policy

We may update this policy from time to time. When we make significant changes, we update the date at the top of this page and, where appropriate, let you know in the app. Continuing to use Nox after an update means you accept the updated policy.

15. Contact

Questions about this policy or your personal data: privacy@nox-io.com. For help with the app, see Support.

Nox, operated by Raşit Gürses.