1. Who we are
Energy Doc is a product of Noor Concierge LLC (“Energy Doc”, “we”, “us”), a United States limited liability company, with its principal place of business at 5651 Nomes Ct, Fairfax, VA 22030-4627, United States. We are the controller of the personal information described in this policy. You can reach our privacy team at hello@saibbyweb.com.
Energy Doc is a wellbeing application. It is not a healthcare provider, not a covered entity under HIPAA, and does not provide medical advice, diagnosis, treatment, or emergency services.
2. Information we collect
Account information. When you sign in with Apple we receive a stable user identifier and, unless you choose Apple’s private relay, an email address. We do not collect your name, date of birth, or address.
Conversation content. Text you send and text transcribed from your speech, together with the companion’s replies, stored as a continuous thread under your account.
Voice audio. Processed in real time by our speech provider for transcription and discarded within seconds. It is not retained by us and is not used to train any model.
Journal entries and derived signals. Entries you write or accept, and the mood and theme labels derived from them.
Crisis events. A timestamp, assessed risk tier, and the resource surfaced. No message content is stored in a crisis event record.
Device and diagnostic data. Device model, OS version, app version, crash reports, and coarse usage counts. Not linked to conversation content.
3. Information stored only on your device
Your emergency contact is written to the operating system's secure storage on your device and is never transmitted to our servers. If you delete the app, that record is deleted with it. We cannot recover it and we cannot contact that person on your behalf.
4. How we use information
We use your information to provide the conversation and journal features, to maintain continuity of context between sessions, to operate the two-layer crisis safety screening, to process subscriptions, to diagnose faults, and to comply with law.
We do not use your conversations or journal entries to train foundation models, and we do not permit our processors to do so under their agreements with us.
5. Service providers
We share the minimum necessary with processors who act on our instructions: a cloud hosting provider (United States regions), a speech-to-text provider, a voice synthesis provider, a large language model provider for generating replies and classifying risk, and the Apple App Store for payments.
Each is bound by contract to confidentiality, to use the data only to provide the service, and to refrain from training on it. We never sell personal information, and we do not share it for cross-context behavioural advertising.
6. Legal disclosure
We may disclose information if compelled by valid legal process, or where we believe in good faith that disclosure is necessary to prevent imminent death or serious physical harm. Where lawfully permitted, we will notify you before responding to a request for your data.
7. Retention and deletion
Conversations, journal entries, and memory are retained while your account is active. Deleting your account from Profile → Data begins removal from our production systems right away; residual copies in backups are purged on our routine backup cycle.
Crisis event records are immutable and are retained in de-identified form after account deletion for safety auditing and regulatory purposes. They contain no message content.
8. Security
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Access by our personnel is role-restricted, logged, and limited to what is required to operate the service or respond to a support request you initiate. No system is perfectly secure, and we do not claim otherwise.
9. Your rights
You can access, correct, delete, or export your personal information at any time from Profile → Data, or by writing to us. Energy Doc is a US-only service at this time; we have not yet completed the assessment needed to make specific CCPA or GDPR compliance commitments, so this section describes what you can actually do in the app today rather than claiming a regulatory status.
Exercise any of these in-app, or write to hello@saibbyweb.com. We will never penalise you for making a request.
10. Children
Energy Doc is intended for people 18 and older. We do not knowingly collect information from children under 13. If we learn that we have, we delete it promptly.
11. International transfers
Our servers are located in the United States, and Energy Doc is currently offered as a US-only service. If that changes, this section will be updated with the specific transfer mechanism that applies.
12. Changes to this policy
If we make a material change, we will notify you in the app and by email at least 14 days before it takes effect, and update the version and date at the top of this page. Previous versions are available on request.