Privacy policy
NoNetChat application, presentation website and Web client. Version dated 14 October 2026. Offline conversations are distinct from visiting an Internet website or contacting support.
1. Who is responsible?
COVOIT.NC, 5 rue Charles Frogier, 98800 Nouméa, New Caledonia, determines the purposes and means of the processing it implements for NoNetChat, its websites and support. Privacy contact: [email protected]; telephone: +687 84 48 13.
The association does not automatically receive conversations, contacts, dates of birth or application history. Communication takes place directly between devices. Having no conversation server does not mean all data is anonymous or that recipients cannot keep it.
2. Local data and age check
The application keeps a nickname, profile options, a cryptographic identity, contacts and verifications, messages and attachments, groups, preferences, blocking and hiding choices, and technical sending and relay queues on your device. A nickname and date of birth are required for access; other profile fields are optional.
The date of birth is used for the local age check and to calculate your age if you choose to share it. It is never added to radio messages, reports or identity exports. An access refusal is remembered. The check uses declared information and the device clock; no identity document is requested.
Android excludes application data from cloud backup and device transfer. On iOS, the date uses a device-bound, non-synchronizing keychain item with a local fallback during an outage. That fallback and desktop or browser data may be included in system-managed backups. Dedicated database and attachment encryption is not yet available: protect access to your device.
4. Permissions and diagnostics
Bluetooth and local network permissions enable discovery and communication. Some Android versions or the Nearby accelerator require location permission for discovery; this does not automatically share GPS coordinates. Microphone and file access are requested for functions you use. Notifications depend on system settings. Refusing a permission may prevent the relevant function without authorizing other collection.
Diagnostics are optional and disabled at startup. They keep bounded technical measurements in memory and offer voluntary export. Exports contain no message content, nicknames, identifiers, dates of birth, keys or GPS coordinates. You choose whom to send an export to.
Nearby is an optional accelerator provided by Google Play services on Android. Google describes collection of SDK usage diagnostics according to device settings. Stores, operating systems and services you open have their own policies; the association does not control that processing.
5. Purposes and legal grounds
Operations essential to the messaging you request and its local storage provide the service you use. Abuse prevention, the age check and technical security serve the legitimate interest of protecting people and the service, subject to your rights. Optional profile fields and permissions depend on specific choices that you can withdraw in the application or system.
Support requests are processed to answer you and follow up incidents; website logs support delivery, availability and protection. Depending on the operation, the grounds are fulfilling your request or the association’s legitimate interest. Data strictly necessary to comply with a legal duty may be retained on that basis. The application adds no targeted advertising, sells no conversations and carries out no centralized commercial profiling.
6. Retention and deletion
History, attachments, contacts and preferences remain locally until you delete them or erase application data. Pending private messages are retried for at most 24 hours; their history can remain visible afterwards with a failed status. Technical copies of relayed private packets expire within 24 hours. Public posts expire after 3 hours and alerts after 6 hours. Caches also have size limits.
Old discovery keys are kept for about 24 hours after retirement, with a short technical grace period to receive packets in transit, then removed from application metadata. Noise session keys are not written to disk. This does not guarantee physical erasure of every trace in a backup or on a storage medium.
The date of birth and age-check result remain local so the date need not be requested again and an immediate retry cannot bypass a refusal. Blocking and hiding choices remain until removed or limited by local storage bounds. In-memory diagnostics disappear when the process stops; an exported file remains where you saved it.
Support emails are retained while the request and its follow-up are handled, then deleted or archived only where a legal obligation or defence of a right justifies it, for the applicable period. Website technical logs rotate according to volume; information needed to investigate an incident may be isolated during that investigation. Providers describe their own retention in their policies. These criteria do not govern copies kept by your contacts.
7. Website visits and browser storage
Visiting nonetchat.com, loading web.nonetchat.com or downloading over the Internet sends website providers your IP address, time, requested URL, browser information and technical security data. OVH hosts the infrastructure and support email; Cloudflare protects and delivers the websites. These providers support Internet access to the websites, not local conversation transport.
The website language is included in its URL; this choice requires neither a cookie nor local storage. The Web client stores the data needed for operation and conversations locally. Clearing site data in the browser may delete this history. No third-party advertising or audience measurement tool is added to the website code. Cloudflare may use technical cookies required by active protections; its documentation describes their names, purposes and expiry.
8. Recipients and processing locations
Your contacts and group members receive content you address to them; network participants receive public posts and necessary radio information. Authorized association personnel receive only what you voluntarily send them and information needed to operate the websites. Technical providers support hosting, email and website security.
The association is established in New Caledonia; OVH SAS is in France and Cloudflare operates an international network, including in the United States. Their documents describe contractual data protection commitments and transfer mechanisms. You can ask the privacy contact about applicable safeguards. NoNetChat cannot guarantee where your contacts’ devices or backups are located.
9. Reporting and content controls
In-app reporting stays on your device and hides content for you. No report goes to the association, a moderation server or the authorities. You can undo hiding. The association cannot access messages to erase them remotely. An email to support is a separate voluntary exchange; do not attach private conversations or illegal content.
Only in the public area, confirming a report also shares anonymous feedback: the public post identifier and a signature by the rotating identifier, without a reason, nickname or permanent identity. This feedback expires with the post. Each device decides locally whether to collapse the content based on received feedback; anyone can reveal it. Alerts are never collapsed automatically. Private-chat, group and profile reports are never broadcast.
10. Your rights and contacts
You can manage your profile, visible fields, contacts, blocks and local data in the application and system settings. For processing under the association’s responsibility, you have rights of access, correction, erasure, restriction, objection and portability where the legal conditions apply. You can withdraw a consent-based choice without affecting earlier lawful processing.
Send requests to [email protected] or COVOIT.NC’s registered office. We request only information needed to understand your request and, if there is reasonable doubt, verify that it concerns you. With no server copy of conversations, the association cannot provide or modify data held only on your devices or recipients’ devices.
You can complain to the CNIL or the competent supervisory authority. The French Data Protection Act applies in New Caledonia under its territorial provisions and the protection rules to which it refers. This policy will be updated when operation changes; new sharing features will have appropriate information.