Privacy policy

1. Who is responsible for your data

Noisance is operated by Bobinette.net SAS, a French company (société par actions simplifiée) registered under number 919 609 446 R.C.S. Avignon, with its registered office at 2490 Traverse d'Orange, 84110 Vaison-la-Romaine, France. Bobinette.net SAS is the data controller within the meaning of the General Data Protection Regulation (GDPR).

For any question about this policy or your data, write to support@noisance.com.

2. Data that stays on your device

The following is created and stored only on your phone. We cannot see it, copy it or recover it:

• audio recordings of the events you record;
• the spectrogram and waveform derived from each recording;
• your event log (times, durations, sound levels, labels) and your app settings;
• the PDF reports you generate, until you choose to share them.

The microphone is used only while you are recording an event or, with Pro, while the AI monitor is running. Sound recognition in the AI monitor runs on your phone; no audio is sent anywhere for analysis.

You can erase all of this at any time with Settings › Delete all data, which also erases what the device has synchronised to our servers (see section 8), or by uninstalling the app, which removes only what is on the phone. The app's data is excluded from Android's backups: recordings are not copied to your Google account or to a new phone. Because this data exists only on your device, it is lost if you uninstall the app or lose your phone, and we cannot restore it.

3. Data we process on our servers

Nothing is sent to our servers while you use the free app on a single device. Data is sent only once Pro is active on a device, either because you bought Pro on it or because you linked it to a Pro account. From then on we process:

• Device registration: a random identifier for the device, its platform (Android or iOS) and a secret access token, of which we store only a cryptographic hash.
• An anonymous account: a random identifier that groups your linked devices (up to five), and the Google Play purchase token that proves the Pro purchase. The account has no name, email address or password.
• Event statistics: for each event on the device, including events recorded before Pro was activated - its start time, duration, minimum, mean and maximum sound level, whether it was recorded manually or by the AI monitor, the sound label detected by the AI monitor if any, and the time our servers received it.
• Pairing codes: the short-lived codes used to link a device, which expire after 10 minutes and are removed from our servers a day later.
• Technical logs: the IP address, date, time and path of each request to our servers, kept for up to 30 days.

We never receive audio, spectrograms, your name, your email address, your phone number, your contacts, your location or an advertising identifier. The app does not ask for location permission.

4. Why we process this data, and on what legal basis

• To provide the Pro features you bought - synchronising event statistics between your linked devices and recognising your entitlement. Legal basis: performance of our contract with you (GDPR art. 6(1)(b)).
• To keep the service secure, prevent abuse and diagnose faults, using the technical logs. Legal basis: our legitimate interest in running a secure service (art. 6(1)(f)).
• To comply with legal obligations that apply to us, such as accounting rules or a lawful request from an authority (art. 6(1)(c)).

We do not use your data for advertising, profiling or automated decisions, and we do not sell it.

5. Purchases

The Pro purchase is handled entirely by Google Play. Google processes your payment under its own privacy policy; we never see your card details, your name or your Google account. We receive only a purchase token, which we check with Google Play to confirm the purchase and keep as the record that Pro has been bought.

6. Who we share data with

We share data only with the service providers that we need in order to operate, acting on our instructions:

• Cloudflare, which serves this website and relays the connection between the app and our servers (see section 7);
• Google Play, for purchases, as described above.

We may disclose data if the law requires us to. Since we hold no audio and no identity details, what we could disclose is limited to the anonymous data described in section 3.

Reports are different: a PDF report leaves your phone only when you share it yourself, and it goes only to the people you send it to.

7. Where data is stored

The data described in section 3 is stored on servers in the European Union. We do not store any of it with another provider.

To protect your data, the connection between the app and the server passes through Cloudflare's network, as does this website. Cloudflare relays this traffic: it decrypts each request, passes it on to our servers and encrypts the reply, so the data described in section 3 passes through its systems in transit. Cloudflare may process this traffic, and connection data such as your IP address, outside the European Union, under the safeguards provided for by the GDPR, including standard contractual clauses.

8. How long we keep data

• Device and account data: for as long as the device remains registered, that is, until you delete your data as described below.
• Event statistics: until you delete them. When you delete an event in the app, it disappears at once from all your linked devices; it is marked as deleted on our servers and permanently erased 30 days later.
• Technical logs: up to 30 days.
• Backups: our servers are backed up daily and backups are kept for up to 30 days, so erased data can remain in a backup for that long.

Settings › Delete all data erases everything in one step: the recordings and settings on your phone, and everything our servers hold about that device - the statistics it synchronised and its registration. The device leaves its Pro account; if it was the account's last device, the account and its purchase token are erased too. To erase everything, do this on each of your devices. If you no longer have a device, write to support@noisance.com with its device code (shown on your other devices under Settings › Manage secondary devices) and we will erase its data within 30 days.

If you joined the waiting list we ran before launch, your email address is used only to announce the launch and is deleted within 30 days of it.

9. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, write to support@noisance.com. Because accounts are anonymous, we will ask for your device code so that we can find your data.

You also have the right to lodge a complaint with a data protection authority. In France this is the CNIL (www.cnil.fr).

10. Security

Access tokens are stored on our servers only as hashes, and on your phone in the system's secure storage. The data we hold is anonymous by design: it does not include your identity, your audio or your location.

11. Children

Noisance is not intended for children under 16, and we do not knowingly process their data.

12. This website

This website sets no cookies and uses no analytics or advertising trackers. It loads no content from third-party servers. Like any website, its hosting provider records technical connection data (such as IP addresses) for security purposes.

13. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your data, we will announce it in the app or on this website before it takes effect.