Privacy
What stays yours, what others can see, and where the Living layer's model runs. Everything here is read from how the product works today.
Who runs this service
The pilot is operated by Víctor Andújar Murcia, acting as an individual in Spain. Noemori is the name of the service.
Postal address: Avinguda Comte Ramon Berenguer, 146, Bajos 2a, 08690 Santa Coloma de Cervelló, Spain.
Email support or make a data request · hello@noemori.comPilot terms and privacy · 6 October 2026
Data and why we process it
We process your account email and authentication records, project and idea content, files, sharing choices, help conversations, circle participation and saved intelligence results to provide the service you request (GDPR Article 6(1)(b)). Account access, abuse prevention, moderation and bounded cost controls serve legitimate interests in running a safe service (Article 6(1)(f)); you can object. Optional author memory and complementary matching follow your settings and can be paused or disabled. We do not sell your data or use it for advertising.
Pilot place requests
If you ask for a place from the home page, we keep the email you give us and, if you add them, your name and what you would like to grow. Only the person running the pilot uses them, to decide and send you the invitation. Asking for a place creates no account: an account is created only if we invite you and you accept the invitation by choosing your password. The request is deleted when it is dismissed or if you ask us to remove it by writing to the contact above, and it goes with your account if you create one and later delete it.
Providers and recipients
Supabase provides authentication, database and private-file storage. The deployment host processes technical connection data. Model providers receive the selected context needed for intelligence; the currently configured provider and processing region appear below. Semantic embedding services may receive private piece text to support your own retrieval; that private index is not shared with other accounts. Source research can send a focused query to external search services. Public content and explicitly shared material go to their stated audiences. Provider contracts, hosting location and international-transfer safeguards must be verified for the live deployment before opening the pilot; an unknown region here is an unresolved deployment check.
Conservation and deletion
Your work and account data are retained while your account exists, unless you remove them sooner. Account deletion removes active records and revokes access; queued Storage cleanup is retried until it succeeds. Recovery backups, when enabled, are encrypted and retained for seven days; a restored backup must replay deletion cleanup before the service reopens. Other authors may retain accepted copies. Moderation records can require a separate review where erasure would compromise another person’s appeal or a legal obligation. Ask support for a specific retention assessment; do not assume every third-party provider uses the same retention period.
Your rights
You can request access, correction, erasure, restriction, portability and, where relevant, object to processing or withdraw consent without affecting earlier lawful processing. Use your account’s export and deletion controls or email the operator. We verify requests proportionately and normally respond within one month. You can complain to Spain’s supervisory authority, the Agencia Española de Protección de Datos (AEPD), or your competent authority. We do not use this service to make automated decisions with legal or similarly significant effects about you.
Cookies, local storage and operational signals
Authentication uses necessary session cookies. The app stores interface preferences and device-local work in browser storage. We do not install advertising trackers. Vercel Web Analytics counts page views without cookies and without identifiers or tokens in the address. Operators see aggregate pilot activity and usage signals, such as working days and help linked to decisions; private project content is not available through the administration panel. Security, delivery and provider systems may keep operational records. Optional non-essential tracking would require a separate choice before activation.
Where the Living layer runs
The Living layer’s readings are generated by OpenAI. Verified processing location: a location not yet verified for this deployment.
On eligible provider failures, the configured fallback can send the required context to Qwen on Alibaba Cloud Model Studio. Its processing location must be verified separately.
A model call carries the pieces of the idea that reading needs, not your email or password. Readings are stored with your idea and shown only to you.
Private semantic retrieval and public world composition retain Qwen embeddings. Only the authorized context required by each task is sent. The embedding service has its own configured processing location.
Private by default
Your workspace, its pieces, decisions, files and readings are seen only by you. A new idea is private until you choose to make it public.
What you choose to show
A public idea shows its title and garden in the world. A published need shows the title and description you wrote for it. Nothing else of the workspace goes with them.
The Living layer
When it reads an idea, the pieces it needs are sent to the model provider above. It never shares one person's work with another.
The free reading without an account
If you try the free reading on the entrance or the blog, the text you paste is sent to the model provider named above to be read once, and we do not store it. To limit attempts we keep, for 90 days, a keyed hash of your network address (never the address itself), the time and how many tokens the reading used. Your own browser remembers what you pasted so that, if you create an account, your first project starts with it. Only if you press “Create a link to share” do we keep the reading (title, verdict, map and findings, never your text) behind a link known only to whoever receives it; you can take it down at any time from that same browser.
Complementary projects
The threads between projects are found from what people chose to publish: discovery profiles, open needs and offered help. A thread shows titles, never workspace content, and a connection starts only when both people accept it.
Links to people you know
A shared link shows only the pieces and the question you chose, expires on the date you set and can be withdrawn at any time.
Your circle
Joining a circle makes its shared conversation visible to joined members. Only already-public ideas, active Gives and visible Needs accompany it; membership never opens a private workspace. Returning a message to your idea is an explicit copy with provenance. Leaving revokes group access and keeps shared history. Account deletion removes your authored group messages; copies already accepted into another person’s private idea remain part of their work.
Yours to take or delete
From your account you can download everything in Markdown or JSON, and delete the account with everything it holds.