Privacy Policy

1. Who we are

NOXA is operated by SERGKEI KARAKETIDIS, an independent developer based in Greece. For data-protection purposes, SERGKEI KARAKETIDIS is the controller of personal data processed through NOXA.

Privacy questions and requests can be sent to noxastreetapp@gmail.com.

2. Scope and age requirement

This policy applies to the NOXA mobile application, backend services, and public NOXA pages. NOXA is not intended for anyone under 16. If you believe a child has provided personal data, contact us so it can be removed.

3. Information we collect

• Account data, including email, account identifier, session information, and security events.
• Profile and garage data you choose to add, including names, biography, city, vehicles, specifications, and photos.
• Content and social activity, including posts, comments, likes, follows, messages, invitations, crews, and events.
• Precise location, heading, speed, accuracy, time, selected audience, and session expiry when you activate Live Drive.
• Technical information such as device and app data, IP address, request timestamps, crash information, and security logs.
• Website enquiry data, including email, city, device platform, business name, business type, location, and any message you submit through early-access or partnership forms.

4. Live Drive and background location

Live Drive is optional and starts only after you choose an audience and grant the required permissions. During an active session, NOXA may update precise location while the app is open, in the background, or while the screen is locked. A session lasts no longer than four hours.

Crew shares with eligible shared-crew members, Friends with mutual followers, and Global with authenticated NOXA users. Ghost stops Live Drive and removes your active presence where the device can complete the request.

5. How we use information

NOXA does not currently sell personal data, run third-party advertising, or use data for cross-app behavioural advertising.

• Create and secure your account and provide requested features.
• Display profiles, garages, posts, crews, events, and social interactions according to access settings.
• Operate Live Drive, selected visibility, nearby activity, and requested routes.
• Maintain, troubleshoot, secure, and improve NOXA and prevent abuse.
• Respond to support, safety, privacy, and legal requests.
• Manage pre-release tester invitations and respond to potential partnership enquiries.

6. Legal bases in the EEA

• Contract, where processing is needed to provide the service you request.
• Consent, for precise location, background location, photo access, and other permission-based features.
• Legitimate interests, for security, abuse prevention, debugging, moderation, and reliability.
• Legal obligation, when processing or retention is required by applicable law.

7. Sharing and service providers

Information is shared with other NOXA users only under the visibility, membership, and feature settings you select. We use service providers including Supabase for backend infrastructure and Mapbox for maps and routing. These providers may process ordinary service and device data under their applicable terms.

We do not sell or rent personal data.

8. Retention and deletion

Account and content data are generally kept while your account is active or as needed to provide NOXA. Live Drive sessions expire after no more than four hours. Account deletion is designed to remove the authentication account, associated database records, and owned uploads from active systems, subject to verification, technical backup cycles, fraud prevention, disputes, and legal duties.

Early-access and partnership enquiry details are kept only as long as reasonably needed to manage testing, respond to the enquiry, maintain appropriate records, or comply with law. You may request deletion by contacting the support email below.

9. Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, or portability and object to certain processing. You can withdraw permission through NOXA or device settings. EEA users may complain to the Hellenic Data Protection Authority or another competent supervisory authority.

See the Account Deletion page for instructions, or email noxastreetapp@gmail.com from the address connected to your account.

10. Security and international transfers

We use access controls, row-level database policies, encrypted network connections, authentication controls, and provider safeguards designed to protect data. No service can guarantee absolute security.

Providers may process data outside your country. Where required, transfers use applicable legal safeguards such as adequacy decisions or Standard Contractual Clauses.

11. Changes and contact

We may update this policy as NOXA changes. Material updates will be communicated by a reasonable method and the effective date will be updated.

Operator: SERGKEI KARAKETIDIS, Greece. Email: noxastreetapp@gmail.com.