NChat Privacy Policy

Effective 3 September 2026 · Last updated 3 September 2026

NChat is a mobile messaging application published by Noris Solutions ("Noris Solutions", "we", "us"). This policy explains what personal data the NChat app collects, why we collect it, how it is stored and shared, how long we keep it, and how you can delete it.

It covers the NChat app on iOS and Android and the NChat backend service at nchat.norissolutions.com. If you do not agree with this policy, please do not create an NChat account.

1. Who is responsible for your data

Noris Solutions is the controller of the personal data described here. You can reach us using the contact details in section 11.

2. What we collect

We collect only what the app needs in order to work. We do not use advertising networks, and we do not track you across other companies' apps or websites.

Data	When it is collected	Why
Name	When you register	Identifies you to people you chat with, and labels your account.
Mobile phone number	When you register	It is your account identifier and how we verify that the account is yours. A one-time code is sent to it by SMS at sign-up and when you reset your password.
Email address (optional)	If you choose to provide it	An alternative route for password reset.
Message content	When you send or receive messages	To deliver your messages and show your conversation history. This includes text, and the messages you send in groups.
Photos, videos and files	Only when you attach one to a message, post a status update, or set a profile picture	To deliver the attachment to the people you sent it to, and to display it.
Coarse location (optional)	Only if you choose to add business details during registration	Stored with your account so your business can be listed in the NChat business directory. If you do not add business details, no location is collected.
Device identifier	Automatically, when you sign in	An installation identifier generated by the app, used to enforce one active device per account, plus a push notification token so we can deliver notifications to your handset.
Account activity	While you use the app	Online / last-seen status, message delivery and read state, and call records (time, duration, participants) so calling and delivery receipts work.

What we do not collect

We do not collect your contacts list or address book.
We do not collect precise GPS location, and we do not track your location in the background.
We do not use advertising identifiers, and we do not serve ads.
We do not use third-party analytics or behavioural tracking in the app.
We do not sell your personal data to anyone, ever.

3. Device permissions

The app asks for permissions only at the point it needs them, and it works without the optional ones:

Camera — to take a photo to send, and for video calls.
Microphone — for voice and video calls.
Photo library — to attach a photo or file you choose, and to save an attachment you download.
Location — only used if you add business details to your account.
Notifications — to alert you to new messages.

You can withdraw any of these at any time in your device settings.

4. How we use your data

To create and maintain your account, and to sign you in securely.
To deliver your messages, attachments, status updates and calls to their recipients.
To send notifications about new messages to your device.
To verify your phone number at sign-up and during password reset.
To apply the privacy choices you set in the app (last seen, profile photo, about, read receipts).
To keep the service secure, prevent abuse, and diagnose faults.

We do not use your messages or attachments for profiling, advertising, or for training any automated system.

5. Who we share it with

We do not sell your data and we do not share it for marketing. Your data reaches third parties only where a part of the service depends on it:

Other NChat users — the people and groups you choose to message receive what you send them, along with your name and profile picture, subject to the privacy settings you have chosen in the app.
Google Firebase Cloud Messaging — used to deliver push notifications to your device. Google receives the notification payload and your device's push token in order to route the notification.
An SMS provider — receives your phone number and the one-time code so the verification message can be delivered to you.
An email provider — receives your email address and message content only when a password-reset email is sent to you.
Our hosting provider — stores the NChat database and uploaded files on our behalf.
Legal requirements — we may disclose data where we are required to by law, or to protect the rights and safety of our users.

6. Storage and security

All traffic between the app and our servers uses HTTPS.
Passwords are stored only as a bcrypt hash. We never store, and cannot read, your password.
Sessions use opaque server-side tokens that can be revoked immediately — which is what makes "sign out" and password reset take effect at once.
Uploaded files are stored in a directory configured so that uploads cannot be executed as code.
Access to the production database is restricted to authorised Noris Solutions personnel.

Please note: NChat messages are encrypted in transit but are not end-to-end encrypted. Message content and attachments are stored on our servers so that your conversation history is available across sign-ins. You should not treat NChat as a channel for information that requires end-to-end encryption.

7. How long we keep it

We keep your account data for as long as your account exists. Messages and attachments are retained so your conversation history remains available to you and to the people you sent them to.

One-time verification codes are short-lived and expire automatically. Deleting a message in the app removes it from the service.

8. Deleting your account

You can permanently delete your NChat account from inside the app at any time. No email or request to us is required.

Settings → Delete account, then confirm with your password.

Deleting your account permanently removes:

your profile — name, phone number, email address, profile picture, about text, and any business details and location you added;
your sessions, registered devices and push notification tokens;
your privacy and notification settings, and your contacts;
your messages, group memberships, status updates and reactions;
your call records;
your bills, weighbridge tickets and any company records held under your account.

Deletion is immediate and cannot be undone. Messages you sent are removed from the conversations they were sent to. Once your account is deleted, your phone number is free to register a new account.

Backups taken before deletion may retain a copy for a short period until those backups are rotated out in the normal course.

9. Your rights

You can access and correct most of your data directly in the app, under Settings. You may also ask us to provide a copy of the personal data we hold about you, to correct it, or to delete it — although deletion is faster and immediate if you use the in-app option in section 8. Contact us using the details in section 11, and we will respond within 30 days.

10. Children

NChat is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

11. Contact us

For any question about this policy or about your data:

Noris Solutions
Email: privacy@norissolutions.com
Website: nchat.norissolutions.com

12. Changes to this policy

If we change this policy we will update the "Last updated" date at the top of this page. Where a change materially affects how we handle your data, we will give notice in the app before it takes effect.