Know the data-handling scope before you choose to connect.

Controller and contact

The controller for Noesis is 康耐德股份有限公司 (CONNACT INC., Unified Business No. 55867343). Registered address: 4F., No. 132, Sec. 2, Nanjing E. Rd., Zhongshan Dist., Taipei City, Taiwan. Privacy and data requests: problems@noesis.seges.ai.

We store the email address, display name, and profile photo URL on the account you sign in with (currently Google), all from that same sign-in event. The email address identifies your account and is used to send required service notices, such as advance notice of a change to these terms; the display name and profile photo URL are used to identify your account.

Where you can see it: where one is available, the email address is shown on the account page, and on the connection approval page before you approve a connection.

Connection and result storage

An authorized connection requires store_results=true. Do not interpret public pages as a promise of stateless service or optional result storage.

So that you can recognise each connection yourself, approving a connection from an AI app also records, alongside that connection: the name and callback domain the app registered with Noesis, when the connection was made, an approximate country derived at the network edge from where the request came from (country level only), and the timezone and offset your own device reported at that moment. This connection record does not itself include your IP address, and it does not include a city or any finer location. The timezone comes from your device and is used for one thing: showing each connection at the time you actually saw on your own clock. Separately, and for a different purpose: when you grant the required-purpose consent itself on the account page, we do record the IP address, browser user-agent string, and browser language header present at that moment, kept as part of the consent record so what was agreed to can be demonstrated if it is ever challenged. That is unrelated to the connection record above and is likewise never used to infer your nationality or residence.

These fields exist for security transparency — so you can tell which connection was yours and which was not — and are never used to infer your nationality or residence, and never for advertising or profiling. They are stored with your account, are covered by the same 24-month retention as other account- and consent-linked data, are included in a copy of your account data, and are within the scope of an account deletion request.

What the required purposes actually process

When you use Noesis with an account, the purposes below are the basis on which the service is provided rather than settings you can switch off; the full clause is the "Required purposes" section of the Terms of Service. This section states what each one stores and what a connected AI assistant can read back.

Account-linked result storage: stores the instrument name, a source marker, the scored result, your own optional confidence rating, and when the result was created, linked to your account identifier and to the consent record in force at the time. You can read these results on the account page. To obtain a copy of your account data, use the data-copy request on that page: the request is recorded and the copy is delivered separately through a verified channel rather than as an immediate download, and the data itself is never sent by email. A connected AI assistant can read back your own results.

Research use: this permission allows your stored results to be used in de-identified form to evaluate and improve the service. What the system records today is the permission itself; this page does not state that any specific research activity is currently running.

Running profile summary: stores one summary compiled by a connected AI assistant from what you have shared, held as nine free-text sections (present context, current activities, history, relationships and support, stressors, strengths and resources, values and motivations, goals, communication notes), and may include quoted fragments of your own words and a source marker for the summary. A connected AI assistant reading it back sees only the latest one; each update is in fact stored as its own dated snapshot rather than overwritten, and the full history is included in your data-copy request.

Notes on results: stores the free-text note you attach to a single stored result, kept with that result. A connected AI assistant reading that result also reads the note.

Journal: stores the journal entries you choose to share, including the entry text, any category tags, and the date. Whether a connected AI assistant can read a particular entry depends on a separate access permission you grant per assistant, purpose, category, and date range, not on this required purpose by itself.

To stop: you can withdraw all required purposes at any time, all at once, on the account page. Withdrawal applies going forward, so the service stops processing them for your account, but it does not by itself delete data already stored lawfully. To ask for existing account data to be deleted, use the account deletion request on the account page.

Counsellor-search records

When you (or a connected AI assistant on your behalf) use the feature that finds nearby counselling providers, the location you enter (typically a city- or district-level place name, such as "Taipei, Da'an District," not a precise device location) and any topic or keyword you enter are sent to a third-party service, Google Places (Google's place-search service), to retrieve a list of nearby counselling centres or psychiatric/psychological clinics; without this transfer, the search cannot be completed.

Optional site analytics

Microsoft Clarity loads only after you choose “Accept analytics” on public pages; it does not load on connection, sign-in, or account pages. Choosing “Accept essential only” does not load the service; you can clear local site data to choose again.

Retention and deletion

Account- and consent-linked data is retained for 24 months. That figure is not a promise about backups, disaster-recovery copies, or audit logs — those may be retained on a different, and possibly longer, schedule for security, abuse-prevention, or audit purposes, and a legal hold can delay deletion beyond it.

Geographic availability

Noesis is not offered to requests from observed locations in the EU, EEA, or UK. We do not infer your nationality or residence from this location check.