NoTension · iOS App

NoTension App Privacy Policy

Effective date: 13 August 2026
Last updated: 24 August 2026

1. Scope

This policy applies to the NoTension iOS app and to these app privacy and support pages. NoTension is operated by Ashwarya Gupta, an individual, B14 Sumukha Kalpavruksha Apt, Kodichiknahalli main road, Bengaluru, Karnataka 560076, India — reachable at hello@notension.ai, with the website at www.notension.ai.

NoTension creates transparent, personalized AI-generated visualizations of future moments — creative rehearsal content, clearly labelled as AI-generated. It is not therapy, medical care, diagnosis, a prediction of future events, or a way of creating real memories.

The Notension Atelier Privé commission service is a separate, application-based private consultation experience. It is not part of the iOS app and may have its own terms and disclosures, available on the main website.

2. Information the app collects

Account information

When you create an account, the app may collect:

• Your name, when provided through Sign in with Apple
• Your email address — including an Apple private relay address if you choose to hide your email
• An internal user and account ID
• Authentication and session information
• Subscription status and tier, provided through Apple when you subscribe — used to apply your memory allowance per subscription period. Apple processes the purchase and payment; we do not receive your payment card details.

This is used to authenticate you, maintain your account and deliver app functionality.

Face photographs

The app captures three guided face photographs — front, left and right. They are used to:

• Create your reusable avatar
• Place your likeness into AI-generated content that you request
• Regenerate content while your avatar remains active

The original photographs remain in private Supabase storage while you keep your avatar, linked to your account.

Voice recordings

You may provide two short voice samples. They are used to create personalized speech in the AI-generated videos you request. The voice samples remain in private Supabase storage while you keep your avatar, linked to your account.

Prompts and other content

• Written or dictated scene descriptions
• Optional surroundings photographs you select or capture
• Generated preview images and generated videos
• Memory titles and related metadata
• Consent records
• Content reports
• Support communications you send by email

In app versions that offer Share App Activity, and only if you turn it on, the app also collects the optional activity events described in section 5A.

3. Face and voice: what the app does and does not do

• NoTension does not create faceprints, facial-recognition templates, biometric identifiers, voiceprints or voice-clone profiles.
• The app does not use your face or voice to authenticate you.
• The app does not compare one person’s face or voice with another’s.
• Apple Vision face detection runs on your device only, to guide you into position during capture. This guidance is not face recognition, and its camera-frame analysis is not stored or transmitted.

4. AI processing and service providers

Supabase

Supabase provides authentication, database services, private file storage and backend functions. The current Supabase project is hosted in the ap-northeast-2 region (Seoul, South Korea).

Data stored with Supabase is retained while it is required to provide your account and content, or until you delete the relevant content, avatar or account. Database backups may remain for up to seven days; deleted storage objects are not included in those database backups.

AtlasCloud

AtlasCloud provides the AI media-generation services used to create your content, including bytedance/seedance-2.0/reference-to-video and google/nano-banana-2/edit. Depending on the feature you use, AtlasCloud may receive your face photographs, voice samples, optional surroundings photographs, scene prompts, and the generated inputs or outputs required to complete your request.

Under AtlasCloud’s published policy, submitted customer content may be retained for up to seven days and is then automatically deleted, and customer content is not used to train, fine-tune, improve, evaluate, benchmark or develop Atlas-hosted AI models unless the customer expressly authorizes it in writing. NoTension has not given such authorization. These are AtlasCloud’s published commitments, which we rely on and monitor.

Processing by AtlasCloud takes place in the United States under the current service configuration.

Apple

Apple services used by the app may include Sign in with Apple, on-device speech recognition for dictation, on-device face-position guidance, and standard App Store and operating-system services. Dictation and face-position guidance are performed on your device.

5. How information is used

We use your information only to:

• Create and manage your account, and authenticate you
• Create and maintain your avatar
• Produce the AI-generated content you request
• Save and display your private memory library
• Enforce your subscription’s memory allowance per subscription period
• Moderate prohibited prompts and process content reports
• Provide support
• Protect security, prevent abuse and comply with law
• Maintain and improve the app’s reliability, without cross-app tracking

The iOS app contains no third-party analytics, advertising, attribution or crash-reporting SDK.

5A. Optional app activity analytics (“Share App Activity”)

In app versions that offer Share App Activity, you can choose to share limited in-app activity with us. It is off by default: no activity event is collected or stored unless you explicitly turn it on, choosing “Not Now” changes nothing about how the app works, and no past activity is ever collected retroactively. App versions without this control collect no activity events at all.

What is collected if you turn it on

Activity events are linked to your account through your internal user ID. A pseudonymous identifier that can be associated with your account is linked data — we do not describe it as anonymous. Each event carries:

• An event identifier, the event name and timestamps
• App version and build
• Your internal user ID and, for invited study participants, a server-assigned study label
• Bounded event properties only: an opaque analytics-scoped reference to a memory (never its content or title), the in-app step or source, genuinely played watch seconds, duration and percentage, rolling counts, the notification-permission result, the Apple product identifier with a bounded purchase outcome, and — for the optional emotional pulse — a predefined feeling choice and a 1–5 “how real did it feel” answer

The events fall into these categories: starting and completing avatar capture; starting, completing and failing a generation; starting and finishing watching a memory; selecting or removing a Daily Future; reminder permission, enabling, disabling and time changes; opening a reminder notification; submitting the structured emotional pulse; viewing the subscription screen; and starting, completing, cancelling, failing or restoring a purchase.

Never included

Activity events never include: your name or email address; face, voice, photo or video data; generated media, stills, thumbnails or any link, storage path or URL to them; goals or goal categories; prompts, scenes, identity statements, titles or captions; any free-typed text; location; device or advertising identifiers; notification text; receipts, transaction identifiers, payment details, prices or currency; or raw error text and technical performance data.

Why we use it

Only to evaluate whether the experience works — setup and avatar creation, generation, rewatching, reminders, the emotional pulse, and consideration and completion of a subscription — and to improve the product. Not for advertising, and not for any purpose beyond product evaluation and improvement.

Who receives it

Events are stored in NoTension’s own database on Supabase, Inc. infrastructure in Seoul, South Korea (ap-northeast-2) — the same first-party infrastructure that runs the rest of the app (supabase.com/privacy). There is no separate analytics vendor. The app contains no third-party analytics, advertising, attribution or crash-reporting SDK, does not use the IDFA, does not fingerprint devices, does not track you across other companies’ apps or websites, and shares nothing with advertisers or data brokers.

Your choice and withdrawal

• The control lives at NoTension → @me → Your avatar → Share app activity and shows On, Off or Currently unavailable.
• Turning it off stops future collection immediately. Events collected while it was on remain until removed by the retention rule below, by account deletion, or on request to hello@notension.ai.
• This choice is separate from the face-and-voice consent described in sections 3 and 10 — enabling or disabling one never affects the other, and declining analytics never restricts any feature, allowance or price.

Retention

Raw account-linked activity events are deleted automatically no later than 90 days after collection, and earlier when you delete your account. Structured emotional-pulse answers and purchase events (product identifier and bounded outcome only — never receipts, transaction identifiers or payment details) are part of these raw events and follow the same lifecycle. Database backups may retain deleted rows for up to seven days, as described in section 8.

Invited validation study

We may run a small invited validation study. Participation is assigned server-side to a fixed roster of invited participants as a study label on the account. Membership alone never enables analytics — collection still requires your explicit opt-in — and never changes your credits, features or pricing. The validation-study cohort designation is deleted automatically no later than 90 days after the participant’s first successful memory, or 90 days after enrollment if the participant never creates one. It is deleted earlier when the associated NoTension account is deleted.

6. Training, advertising and tracking

• NoTension does not use your content to train its own AI model.
• Under AtlasCloud’s published policy, customer content is not used to train Atlas-hosted models without written authorization — and NoTension has not provided that authorization.
• NoTension does not sell personal information.
• The iOS app does not show third-party advertising.
• The iOS app does not use your information for cross-app tracking.
• The iOS app does not use the IDFA and does not show an AppTrackingTransparency prompt.
• The iOS app does not share personal information with data brokers.

Separately from the app: the public website at www.notension.ai uses Google Analytics 4 to understand website visits. That is website analytics only — it is not collection by, or inside, the iOS app.

7. Visibility and sharing

Your avatar captures and stored memories are private to your account. Files are held in private storage and accessed through authenticated or expiring links.

You may export or share generated media through Apple’s system sharing features. Once you share content outside NoTension, the recipient or external service controls that shared copy.

Every generated output is AI-generated visualization content — not a record of a real event — and should always be treated and presented that way.

8. Retention

We do not promise instant erasure from every infrastructure log or third-party system; the periods above describe how deletion actually propagates.

9. Your controls and deletion

Inside the app you can:

• Delete an individual memory — removes its database record, the generated video, its thumbnail and any associated surroundings image.
• Delete your avatar — removes the stored face photographs, voice recordings and preview stills.
• Delete your account — removes your authentication account, your database records and your stored files, recursively, and revokes the app’s Sign in with Apple authorization. In our verification testing, account deletion removed every database record and every stored file, after which the account could no longer sign in.

Two things do not disappear instantly:

• AtlasCloud processing copies expire under its own retention schedule of up to seven days, because it does not currently expose an immediate deletion API.
• Supabase database backups may retain deleted database records for up to seven days.

Deleting your NoTension account does not cancel an Apple subscription. Cancel any active subscription in your Apple account Settings.

You can also ask us to access, correct or delete your personal information at any time by writing to hello@notension.ai. A summary of these controls is at notension.ai/app/privacy-choices.

10. Consent and content rights

Before face and voice capture, you must affirmatively confirm that:

• You own, or have permission to use, the images, voice recordings and other material you provide.
• You consent to their use to create your personalized AI-generated content.

Your acceptance records who consented, when, and the policy version. Withdrawing consent prevents future use of your avatar and may require deleting the avatar or account.

You must not submit another person’s likeness or voice without their permission.

11. Security

• HTTPS protects data in transit.
• Supabase provides platform storage protection for stored data.
• Storage buckets containing your media are private.
• Your media is delivered through authenticated or time-limited links.
• Authorization controls prevent users from accessing other users’ records and media.
• Provider and administrative secrets are kept server-side and are not included in the app.

No system can be guaranteed completely secure, and we do not claim any security certification.

12. Children

NoTension is not directed to children under 13, and we do not knowingly allow children under 13 to create accounts or submit face or voice information. If we learn that information was provided by a child under 13, we will take steps to delete it. A parent or guardian may contact hello@notension.ai.

13. International processing

Your information may be processed in:

• South Korea, through Supabase (Seoul, ap-northeast-2)
• The United States, through AtlasCloud
• Other locations where Apple or necessary service providers operate

We use reasonable safeguards for international processing.

14. Regional privacy rights

United States

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information. NoTension does not sell personal information and does not use it for cross-context behavioral advertising. To make a request, write to hello@notension.ai. We will not discriminate against you for exercising your rights.

India — privacy and grievance contact

If you are in India, you may request access to, correction of, or erasure of your personal data, and raise any privacy concern or grievance, by writing to hello@notension.ai with the subject line “Privacy grievance”. We will acknowledge and respond within the timelines required by applicable law.

United Arab Emirates

If you are in the UAE, you may request access to, correction of, or deletion of your personal data where applicable law provides those rights, by writing to hello@notension.ai.

15. Legal requests, safety and business changes

We may disclose information when reasonably required to:

• Comply with law or valid legal process
• Protect users, NoTension or others
• Investigate fraud, abuse or security incidents
• Support a merger, financing, acquisition or asset transfer, subject to appropriate notice and safeguards

16. Changes to this policy

If we make material changes, we will update the date at the top of this page and, where appropriate, provide notice in the app.

17. Contact

Privacy enquiries: hello@notension.ai
Product: NoTension
Operator: Ashwarya Gupta, an individual, B14 Sumukha Kalpavruksha Apt, Kodichiknahalli main road, Bengaluru, Karnataka 560076, India
Website: https://www.notension.ai

Help using the app: NoTension App Support