Noxyl Privacy Policy

Noxyl helps travelers translate route notes, use AI travel assistance, create AI postcards, publish checkpoint updates, and manage credit-based travel tools. This policy explains how data moves through those workflows.

Effective date: April 10, 2026. Contact: support@noxyl.com.

1. Voice and Audio Processing

When you start Voice Relay, Noxyl accesses your microphone so the app can capture spoken route notes and submit them for translation. Voice input is processed only to create a translated output for the active session. Legal basis: consent and contract fulfillment for the translation action you request.

Retention: live microphone capture is session-only. Generated translation items remain in your local history until you clear app data or delete your account, and are removed when account-deletion processing completes.

2. Information We Collect

Account profile data such as username, avatar, and bio.
Route content you create, including posts, comments, route cards, and saved route media.
AI feature input and output, including AI Guide text, optional selected photos, AI replies, selected locations, scene notes, output-size choices, and generated postcards.
Location data you actively select or confirm for checkpoint tagging or AI postcard creation.
Device, diagnostics, and fraud-prevention signals needed to keep the service reliable.
Purchase and credit records for in-app transactions.

3. AI Guide, Postcard Maker, and Face Data

When you use AI Guide with a photo, Noxyl collects the text you enter and the image you select for analysis. If that selected image includes a person's face or visible facial features, the image may contain face data.

When you use Postcard Maker, Noxyl collects the selected location, any scene notes or prompt text you enter, and the requested output size so the app can generate the postcard you requested.

Noxyl uses AI feature data only to return the AI Guide response or generated postcard you asked for. Noxyl does not use uploaded photos or face data for face recognition, identity verification, biometric profiling, or advertising.

Before Noxyl first sends content from an AI feature to an AI provider, the app asks for your permission.

4. How We Use Your Information

To provide translation, AI Guide responses, AI postcard generation, checkpoint posting, profile surfaces, and credit redemption.
To preserve your trip history, saved cards, and media selections across sessions where local storage is enabled.
To investigate abuse reports, block unsafe accounts, and protect the Route Board community.
To monitor product reliability and resolve crashes or payment disputes.

Legal basis: contract fulfillment for core service actions, consent for permissions such as microphone, camera, and photo library, and legitimate interest for security and diagnostics.

5. Camera and Photo Access

Noxyl requests camera access when you capture a route photo or clip in the app, or when you take a photo for AI Guide. Noxyl requests photo library access when you choose saved media for a post or route card, when you select a photo for AI Guide, or when you save a finished postcard back to your library. Legal basis: consent.

Retention: route photos and other media you attach to content remain attached to that content until you delete it, or until account-deletion processing completes. AI Guide source photo handling is described in Sections 3, 6, and 11 below.

6. Third-Party AI Providers and Sharing

To operate AI Guide and Postcard Maker, Noxyl sends relevant request data to Alibaba Cloud Model Studio (DashScope), our AI processing provider.

For AI Guide, this may include the text you enter and any photo you choose to attach, including visible facial features that appear in that photo. For Postcard Maker, this includes the selected location, any scene notes or prompt text you enter, and your requested image size.

Noxyl does not sell face data or other personal data. Noxyl does not store the original AI Guide source photo on its own servers for this feature. Requests to DashScope are transmitted over encrypted connections.

7. Translation Features

Text Translation and Voice Relay send the content you choose to translation processing services so the app can return translated text for travel use. Translation results can be inaccurate and should not be used for medical, legal, or emergency decisions.

8. User Content and Community

Posts, comments, route cards you publish, and profile information are used to operate the Route Board and related community features. We may review reported content, apply blocks, and remove content that violates community rules. Legal basis: contract fulfillment and legitimate interest in platform safety.

Retention: public posts, comments, route cards, and profile content remain until you delete them or until account-deletion processing completes.

9. Payments and Credits

When you buy Credits, Noxyl receives transaction status, product identifiers, and balance updates needed to apply the purchase to your account. We do not store your full payment card details. Legal basis: contract fulfillment and legal compliance for accounting records.

Retention: purchase and refund records are retained for 7 years to satisfy accounting, tax, and fraud review obligations.

10. Analytics and Advertising

Noxyl may use limited device and usage signals to understand stability, surface route prompts, and improve the order of travel assistance content. Tracking-related data is handled only where your platform permissions allow it. Legal basis: consent where required and legitimate interest for service improvement.

Retention: crash and diagnostic logs are retained for 90 days unless a longer period is needed to resolve an active incident.

11. Data Retention

Voice capture: session only.
AI Guide source photos: current app session only. They are cleared from the composer when you remove them, are not written to long-term in-app history, and any in-session display ends when the session closes.
AI Guide text history and AI replies: local app storage until you clear app data or delete your account.
Generated postcards kept inside the app: local app storage until you clear app data or delete your account.
Postcards saved to your device photo library: until you delete them from your device.
Provider-generated postcard image links: may remain available for up to 24 hours before expiring.
Profile and account records: while the account is active, then through account-deletion processing.
Posts, comments, and route cards: until deleted by the user, then through account-deletion processing if applicable.
Purchase and credit records: 7 years.
Crash and diagnostic logs: 90 days.

12. Your Rights

You can request access, correction, deletion, or export of your personal data by emailing support@noxyl.com with the subject line Noxyl Privacy Request. We respond within 30 days. You may also remove posts, saved route cards, and profile information from inside the app where those controls are available.

13. Children's Privacy

Noxyl is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data through Noxyl, contact us and we will review removal promptly.

14. Changes to This Policy

We may update this policy when product features, legal duties, or data flows change. Material updates will be communicated inside the app before the new version becomes effective.

15. Contact

Questions about this policy can be sent to support@noxyl.com.