Privacy Policy
Effective date: November 2, 2026
Noren is a lightweight point-of-sale (POS) app for very small businesses. We collect only what we need to run the app, we do not sell your data, and we never share information that identifies you, your business or your customers.
Who we are. “Noren,” “we” and “us” mean Noren Labs LLC, 69 Madison Ave STE 60683, New York, NY 10016. Privacy questions: [email protected].
Who this covers. “You” means a merchant or staff member using the Noren app. “Your customers” are the people who buy from you.
In short
- We do not sell personal information or share it for advertising.
- Noren contains no third-party ad trackers and does not track you across other apps or websites.
- Your business data stays contained within your Noren account.
- Any future insights drawn from marketplace data are generalized to categories and areas. They never identify a brand or a location.
- You can delete your account and data from inside the app.
Information we collect
| Category | What it includes | Why we need it |
|---|---|---|
| Account information | Name, email address, sign-in credentials (or Sign in with Apple identifier), business name, business category, general area (city or region) | Create and secure your account; provide support |
| Business data | Item catalog, prices, taxes, discounts, orders and sales records, receipts, inventory, staff entries | Run your POS and show your reports |
| Customer details you choose to enter | For example, an email address or phone number to send a receipt | Deliver what you asked for. Noren does not require customer identities |
| Payment information | Transaction amount, time, method and status. Full card numbers are handled by your payment processor, not stored by Noren | Record sales and reconcile payments |
| Location while taking payments | Your device’s location at the moment you accept an in-person card payment, read by our payment processor’s software. Card payments are unavailable while location access is off | Required by our payment processor to prevent fraud and disputes |
| Device and diagnostics | Device model, iOS version, app version, crash logs, performance data | Keep the app working and fix bugs |
| Support messages | What you send us and our replies | Resolve your request |
Camera and image scanning. Noren asks for camera access so you can scan receipts and menus. We use the camera only when you choose to scan, never in the background. Receipts add expense details to your records, and menus help you build your item catalog. From a receipt we extract details such as vendor, date, totals and line items. From a menu we extract item names, descriptions and prices. To read these details, we send the image to a third-party AI service provider, which processes it on our behalf. The app asks for your permission before it sends your first image, and you can enter receipts and menu items manually instead. We save the extracted data to your account. The image is used only to read that information and is then deleted. Only the extracted data remains in your account. Receipts can contain personal details, such as a name or the last four digits of a card, so scan only what you are entitled to keep. You can turn camera access off at any time in iOS Settings, and Noren will still work without it, though you will need to enter receipts and menu items manually.
What we do not collect. We do not collect contacts, health data or advertising identifiers. We use location only to accept card payments as described above, never to track where you go, and we do not use the app to track you. If a future feature needs another device permission, the app will ask first and use it only for that feature.
How we use information
We use information to:
- Provide, operate and maintain Noren, including processing and recording your sales and extracting data from receipts and menus you scan.
- Authenticate you and protect accounts against fraud and abuse.
- Respond to support requests and send service messages (receipts, security alerts, policy updates).
- Diagnose problems, measure performance and improve the app.
- Create aggregated, de-identified insights (see “Aggregated marketplace insights”).
- Meet legal, tax and accounting obligations.
We send marketing messages only if you opt in, and you can opt out at any time.
Legal bases (EEA and UK users). We rely on performance of our contract with you (running your account), our legitimate interests (security, improving the app, aggregated insights), your consent where requested, and legal obligation.
How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only in these cases:
- Service providers. Companies that host our infrastructure, handle authentication, process payments, read scanned receipts and menus with AI, deliver email or report crashes. They may use the data only to serve us and are bound by contract to give it the same or equal protection described in this policy.
- At your direction. For example, when you send a receipt to a customer.
- Legal reasons. To comply with law, legal process or a valid government request, or to protect the rights, safety and security of Noren, our users or the public.
- Business transfers. If Noren is involved in a merger, acquisition or sale of assets, data may transfer to the successor, which must honor this policy or give you notice and a choice.
- Aggregated or de-identified data. Information that cannot reasonably identify you, your business or your customers.
Aggregated marketplace insights
In the future, Noren may combine data across merchants to show insights, such as which product categories are trending in a region. We commit to these limits:
- Insights are generalized to categories (for example, “coffee and tea”) and areas (for example, a city or region), never to a specific brand or location.
- Insights never include business names, addresses, customer details or individual transactions.
- Insights are shown only when enough merchants contribute that no single business can be picked out.
- We will update this policy and notify you in the app before we begin generating insights, and we will give you any choices the law requires.
Payments and third-party services
Card and mobile payments are processed by a third-party payment processor (Stripe). The processor collects and handles card data under its own privacy policy, and Noren does not store full card numbers. Subscriptions or purchases made through the App Store are handled by Apple under Apple’s terms and privacy policy. Noren does not control these third parties and is not responsible for their practices, so please review their policies.
Security, retention and deletion
Security. We protect data with encryption in transit (TLS), encryption at rest, and access controls limited to staff who need them. No system is perfectly secure, and we will notify you of a breach as the law requires.
Retention. We keep your data while your account is active. Sales and tax records may be kept longer where the law requires.
Deletion. You can delete your account in the app at Settings > Account > Delete Account. We then delete or de-identify your personal data within 30 days, except records we must keep by law. Backups are overwritten within 90 days. Aggregated, de-identified data that no longer identifies you may remain.
Your rights and choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and receive a copy.
- Correct inaccurate information.
- Delete your information.
- Port your data to another service.
- Restrict or object to certain processing, and withdraw consent at any time.
- Opt out of the sale or sharing of personal information. We do not sell or share it.
- Not be discriminated against for exercising these rights.
California (CCPA/CPRA) and EEA/UK (GDPR). These rights apply to residents of California, the European Economic Area and the United Kingdom, and we extend them to all users. EEA and UK users may also complain to their local data protection authority.
How to use them. Email [email protected] or use the in-app settings. We may verify your identity first, and we respond within 45 days (CCPA) or one month (GDPR).
Your customers’ data. For customer details you enter into Noren, you are the controller (or “business”) and Noren acts as your processor (or “service provider”). You are responsible for giving your customers any privacy notices the law requires. If a customer contacts us about their data, we will refer them to you.
Do Not Track. Noren does not track you across other websites or apps, so there is nothing to opt out of.
Children, transfers, changes and contact
Children. Noren is a business tool for adults and is not directed to anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
International transfers. Noren is operated from the United States, and your information may be processed there. Where required, we use safeguards such as Standard Contractual Clauses for transfers from the EEA and UK.
Changes. We may update this policy. For material changes we will notify you in the app or by email before they take effect, and we will update the effective date above.
Contact. Noren Labs LLC, 69 Madison Ave STE 60683, New York, NY 10016, [email protected].