Privacy Policy
This Privacy Policy explains how NNM ("we", "us", "our") collects, uses, and protects your information when you use NNM X (the "Service"), a messaging application built on the Matrix protocol.
1. Information We Collect
- Account information: your chosen username and password, stored in encrypted form on our homeserver at
im.nnmconnect.com. - Profile data: any display name and avatar you choose to set.
- Messages and media: end-to-end encrypted by default. We cannot read the content of your encrypted conversations.
- Metadata required for delivery: sender, recipient, timestamps, and routing information necessary to deliver messages between devices.
- Push notification tokens: APNs/FCM device tokens used to deliver notifications, processed via our push gateway at
push.nnmconnect.com. - Technical logs: minimal server logs (IP addresses, request timestamps) retained for security and abuse prevention, deleted after 30 days.
2. How We Use Your Information
We use the information we collect to operate, maintain, and secure the Service: to deliver your messages, authenticate your account, prevent abuse, and provide customer support. We do not use your data for advertising and we do not sell it.
3. End-to-End Encryption
Conversations in NNM X are protected with end-to-end encryption by default using the Olm/Megolm cryptographic ratchet (the same scheme used by the Matrix protocol). Encryption keys are generated and held on your devices. We do not have access to the plaintext of your encrypted messages.
4. Sharing of Information
We do not sell or rent your personal information. We may share information only:
- with service providers strictly necessary to operate the Service (e.g. push notification providers Apple APNs and Google FCM, which receive only the encrypted notification payload);
- when required by applicable law, regulation, or legal process;
- to investigate suspected fraud, abuse, or threats to the safety of users.
5. Data Retention
Your account and message data are retained while your account is active. When you delete your account, your profile and undelivered messages are removed from our systems within 30 days. Encrypted messages already delivered to other users' devices remain under those users' control.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support@nnmconnect.com.
7. Security
We use industry-standard safeguards including TLS for data in transit, end-to-end encryption for message content, encrypted storage for authentication credentials, and access controls on our infrastructure. No service can guarantee absolute security; please report any suspected vulnerabilities to support@nnmconnect.com.
8. Children's Privacy
NNM X is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced through the Service or by email where reasonably practicable.
10. Contact
If you have questions about this Privacy Policy or your data, contact us at support@nnmconnect.com.