PRIVACY POLICY
This policy explains what data the NOCCA Connect mobile app collects, why we collect it, and the choices you have.
Who we are
NOCCA Connect (the “App”) is provided by NOCCA International s.r.o., Company ID 56 204 094, based in Bratislava, Slovakia (“NOCCA”, “we”, “us”). We are the controller of the personal data described below. For any privacy question, contact us at info@nocca-ehms.com.
This policy covers the App only.
Data we collect
Account information
When you sign in with Apple, Google, or email, we receive and store your email address and, where you provide it, your name. This is used to create and secure your account. Authentication and account data are stored securely with a third-party backend provider.
Device & usage data
-
Devices you pair and their settings and presets
-
Session history and cumulative usage statistics
-
Device status and technical telemetry (such as battery level, state, and error logs) used to operate features and assist with support
Your data is stored on your device and backed up to your account, so it's preserved across reinstalls and devices.
Notifications
Push notifications (such as update availability or account notices) are delivered via a third-party notification service, which processes a device-specific notification token. Certain alerts are generated locally on your device and are not transmitted to our servers.
Diagnostics & crash data
To maintain app stability, we collect crash reports and technical diagnostics (including error messages, app state, and device model) via a third-party diagnostics provider. Manually submitted diagnostic reports may additionally include recent connection logs and app state - you can review the contents before sending.
Bluetooth
Bluetooth access is used exclusively for communication with your NOCCA device. We do not use Bluetooth for location purposes, and the app does not collect or process any location data.
Camera
Camera access is used exclusively for scanning your device's QR code during the pairing process. All image processing occurs locally on your device - no images are stored or sent to our servers.
How we use your data
-
To provide and operate the App and connect to your device
-
To sync your presets, sessions, and settings across reinstalls and devices
-
To send you relevant notifications and account communications
-
To provide customer support and respond to your requests
-
To monitor stability, fix bugs, and improve reliability and security
Legal bases
Where the GDPR applies, we process your data on the basis of: performance of our contract with you (providing the App and its features); our legitimate interests (keeping the App secure, reliable, and improving it); compliance with legal obligations; and your consent where required (for example, certain notifications or diagnostics). You may withdraw consent at any time.
Sharing & processors
We do not sell your personal data. We share data only with service providers who process it on our behalf under appropriate agreements:
-
Supabase — authentication, database, and storage
-
OneSignal — push notification delivery
-
Sentry — crash reporting and diagnostics
-
Apple and Google — third-party sign-in only
We may also disclose data where required by law or to protect our legal rights.
International transfers
Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.
Retention
We keep account, device, and usage data for as long as your account is active. When you delete your account, we delete or anonymise the associated personal data within 90 days, except where we are required to retain certain records to comply with legal obligations. Crash and diagnostic data are retained for up to 90 days for troubleshooting.
Your rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, email info@nocca-ehms.com. You also have the right to lodge a complaint with a supervisory authority — in Slovakia, the Office for Personal Data Protection of the Slovak Republic.
Deleting your account and data
You can delete your account at any time directly in the App under Profile → Delete account. This removes your account and associated personal data from our systems. You can also request deletion by emailing info@nocca-ehms.com.
Children
The App is intended for adults and is not directed to children. We do not knowingly collect personal data from minors.
Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you in the App.