Nitnoi

Privacy notice

ไทย

Last updated 16 September 2026

Nitnoi carries messages between two people who do not share a language. Doing that means reading what you write, so this notice says plainly what is read, by whom, where it is kept, how long it stays, and what you can ask us to do about it.

Who is responsible

Nitnoi is operated by CodeCraft Innovations B.V., which is the data controller for the personal data described here. You can reach us at support@nitnoi.app about anything on this page, including a request to see or delete your data. For anything about your data, write to privacy@nitnoi.app. A person reads it.

Nitnoi is used mainly by two people talking across a language, at least one of whom is in Thailand, so this notice is written against Thailand's Personal Data Protection Act B.E. 2562 (2019).

What we process

• Your phone number. It is your account. You sign in with a one time code sent by SMS through our sign in service and its SMS provider, Twilio. Nitnoi's own servers never see the code, and they store the number in E.164 form.
• Your display name and profile photo. The name and picture the other person sees. There is no email field. A profile photo is optional, you can remove it at any time from your account settings, and it is visible only to the people you are in a conversation with.
• Your location, only when you send it. A conversation has a button that shares where you are, as a message. It reads your position at the moment you tap it, about a hundred metres accurate, and sends it to the other person like any other message. Nothing reads your position at any other time, we do not track your movements, and nothing in Nitnoi runs in the background looking for you. The permission your phone asks for is only for that button, and refusing it leaves everything else working.
• Your messages. The text exactly as you sent it, the translation of it, and the extra reading that Nitnoi produces about it, such as a warning that a phrase can be taken two ways and the questions that clear it up.
• Voice notes. The audio is uploaded so it can be transcribed, and the clip itself stays so you can both replay it, until you erase your data. The transcript and its translation stay with the message.
• Calls. We record who called whom, when, how long it lasted, and whether captions were switched on. We do not record call audio. If live captions are on, the caption text is kept as the call's transcript, which both of you can reread from the call's page for 90 days.
• Live captions. While captions are on, both voices are sent to a speech provider for translation. The caption text is stored as the call's transcript for 90 days. It is visible to both of you, and gone from your side the moment you delete that call from your history. The stored text itself is erased when both of you have deleted your accounts, the same way the rest of a conversation is. A captioned call is not end to end encrypted, both of you see that on screen while it runs, and either of you can stop captions at any moment without the other agreeing.
• Your shared dictionary. The words and phrases the two of you teach Nitnoi inside one conversation. It belongs to that conversation and is never used in anyone else's.
• Decoder threads. If you paste someone else's messages into the Decoder and give the thread a name, we keep what you pasted and the label you chose. If you do not name a thread, nothing is kept after the answer is shown.
• Notifications. The push endpoint your browser or phone gives us, and the notifications we send. A message notification can contain up to 120 characters of the message so that it is worth reading.
• Billing. Which plan you are on and the references our payment providers give us. Card details are handled by Stripe and never reach us.
• Settings. Your language, whether messages are translated automatically, your consent choices, your timezone, and when you were last seen.
• Where you came from. A link to Nitnoi from one of our ads or posts carries labels naming the campaign, and some ad networks add their own reference to the click. The app keeps the first of these that brought you, together with the site that sent you and the page you landed on, and never overwrites it later. On Android, Google Play passes the same labels to the app when it is first opened.
• How the app is used. The iPhone and Android apps use Google Analytics for Firebase to count installs, app opens, the screens people use, and purchases. It works with identifiers for the app on your phone, the kind of phone and its system version, and an approximate location worked out from your IP address. It is not given your phone number, your name, your account or anything you write, and it does not use your phone's advertising identifier.

Why we are allowed to process it

Carrying and translating your messages is the service itself, so we rely on the necessity of performing our contract with you. Deeper AI work is different, and it runs on consent: readings, the questions that clear up an ambiguous phrase, tone rewriting, reply help, Bridge and live captions all require both people in that conversation to have agreed, and a missing answer counts as no. Keeping a record of who has already used a free trial relies on our legitimate interest in preventing abuse. Billing records are kept because tax and accounting law requires it.

Counting how the app is used, and learning which of our ads and links bring people to Nitnoi, relies on our legitimate interest in understanding and advertising our own app. It is kept as small as it can be: no advertising identifier, nothing from your conversations, and nothing that follows you around other companies' apps. You can object by writing to privacy@nitnoi.app.

Nothing that keeps you safe is behind consent. Warnings about words that can be taken two ways, the questions that clear them up, and the words you have taught us work on every plan and whatever your consent choices are.

Consent, and taking it back

AI consent is set per conversation, on that conversation's own screen, because it is a promise about a particular two people. Turning it off in one conversation does not turn it off in another. Deep AI actions need both of you; the moment either of you withdraws, they stop. Captions re-read both answers at the moment they are requested, and stopping captions never needs the other person to agree.

Not end-to-end encrypted, on purpose

Nitnoi translates your messages, and an app that translates for you cannot also be end-to-end encrypted: a service that can read nothing cannot translate anything. Your messages are encrypted on the way to us and while stored, and our servers can read them. Any app that claims to do both is not telling you the truth.

Who else sees your data

We use other companies to do specific jobs. They act on our instructions and may not use your data for their own purposes. We do not sell your data, and we do not train any model on your conversations.

• Google (Gemini) translates messages and transcribes voice notes.
• Anthropic (Claude) is asked for a second opinion, and only when an automatic check finds something wrong with a translation in a conversation where both people have consented.
• A speech provider receives call audio while captions are running. This is Google today, and part of this work is moving to a Thai provider.
• Our sign in service and Twilio send and check the SMS code.
• Push services operated by Apple, Google and your browser's vendor deliver notifications, including the message preview inside them.
• Stripe takes payments, including PromptPay payments, and receives your phone number, your display name and your Nitnoi account id. RevenueCat handles purchases made inside an app store. It receives your account id and, when an ad or one of our links brought you, the campaign labels and click reference described above.
• Google Analytics for Firebase counts installs, app opens, the screens people use and purchases, as described above.
• A call relay passes call audio between the two of you. It records nothing.

The companies below are not our processors. What each one sees is spelled out here, and it is never anything from your conversation.

• Klipy supplies the GIFs. Your searches go to our server, which asks Klipy for matching GIFs without telling them who or where you are. The GIF pictures themselves load onto your phone straight from Klipy's servers, which see your IP address the way any image host does, but never the words you typed. We ask for their strictest safe search on every request. Nothing from your conversation is sent.
• Apple supplies the song list and the artwork in the story music picker, so your phone loads that artwork from Apple and Apple sees your IP address. The 30 second preview itself comes through our servers, not from Apple to your phone.
• Apple Search Ads. On iPhone, the app asks Apple whether it was installed from one of our ads in the App Store. Apple answers with the campaign and the search keyword, and RevenueCat keeps that answer with your purchases. No advertising identifier is used.
• Google Ads. When the app is first opened, Google Analytics for Firebase tells our Google Ads account that an install happened, so we can see which of our Google ads led to installs. Google is not told who you are, and we have switched off its use of this data for personalised advertising.
• OpenAI. If an ad shown in ChatGPT brought you to Nitnoi and you later subscribe through Google Play, we tell OpenAI that the click on that ad led to a subscription: the reference OpenAI added to the link, the plan's price and currency, and when it happened. We never send your phone number, your name or anything you write, and we never report purchases made through Apple's App Store.

Where your data goes

Some of these companies are outside Thailand. Message text, voice note audio and call audio for captions are processed by providers in the United States. The call relay that passes live call audio is hosted in Singapore. Payment and SMS providers are also outside Thailand, and GIF searches and story artwork requests go to companies in the United States. App analytics and ad measurement are handled by Google and OpenAI in the United States. Thailand has not issued an adequacy decision covering these destinations, which means your data may be processed in countries that do not protect it the way Thai law does. If that is not acceptable to you, Nitnoi is not the right app for you, because there is no version of this product that translates without sending your words somewhere.

How long we keep it

• Your conversation is kept for as long as your account exists. It is the thing you are keeping, and blocking someone or reaching the limit of your plan never deletes any of it.
• Voice note audio stays for both of you to replay, until you erase your data. Encrypted backups age out within 14 days, and deletions are re-applied after any restore from backup. Payment webhook copies are pruned after 90 days and notification records after 30 days.
• Caption text is kept as the call's transcript for 90 days, then deleted by a nightly sweep. The call itself stays in your history, with the words removed: who called, when, and how long it lasted.
• Short repeated phrases, a greeting, a thank you, a "see you tomorrow", are kept once for the whole service, so the second person to send one does not pay for the same translation again. Only the phrase and its translation are stored, never who sent it to whom; a phrase nobody has needed for ninety days is deleted, and everything your account contributed goes when you erase your data.
• Push endpoints are deleted when you sign out, when you turn notifications off for that device, and automatically when the push service tells us the address is dead.
• Backups of the database are kept for about fourteen days, plus the transaction log needed to restore them. Something deleted from the live system can survive in a backup until it ages out, and we re apply deletions after any restore.
• Billing records are kept for as long as tax and accounting law requires.
• App analytics. Google keeps the detailed events for two months and the record of an app installation for fourteen months after it was last used. After that only totals remain. Analytics is not tied to your account, so deleting your account cannot single it out; it ages out on this schedule instead.
• Where you came from is kept with your account record, and at RevenueCat with your purchases.

Your rights

• See it and get a copy. Write to support@nitnoi.app and we will send you a document containing everything Nitnoi holds about your account, including the conversations you are part of.
• Correct it. Your name and your language settings are yours to change in the app at any time.
• Delete it. Ask us to delete your account and we destroy your side of it: your account record, your voice note files, the conversations you are in and the data derived from them, subject to what follows.
• Withdraw consent. The AI consent switch on each conversation is as easy to turn off as it was to turn on.
• Complain. You can complain to Thailand's Personal Data Protection Committee. We would rather you told us first, at support@nitnoi.app.

What deletion means for the other person

A conversation belongs to two people and is both people's personal data at once. When you delete your account, every conversation you were in is closed and disappears from the app for the other person as well, and your account record is emptied so that nothing in it points back at you. The other person, if they have not deleted their own account, can still obtain the history of that conversation through their own copy request, because it is their conversation too. It is destroyed when they delete their account.

One record survives deletion on purpose: if you have used a free trial, we keep a one way digest of your phone number so that the same number cannot take a second free trial. That digest cannot be read back into a phone number by anyone who does not already have the number.

Unlinking a conversation

Unlinking ends a conversation for both of you immediately, revokes the dictionary the two of you built, and removes the conversation from the app for both people. It is not a deletion of the underlying data. If you want the content gone, delete your account.

Decoder threads and people who never signed up

The Decoder works on text you paste, which is usually written by someone who does not use Nitnoi and has not agreed to anything. We keep that text only if you choose to save the thread. Deleting a thread deletes the thread and everything in it permanently, in one step, and we recommend using it. If you are the person whose messages someone else has pasted into Nitnoi and you want them removed, write to us and we will help.

Children

Nitnoi is not for children. You must be old enough to enter into a contract where you live, and at least 18, to use it.

Changes

If we change this notice we will update the date at the top, and we will tell you in the app if the change is one that matters. Continuing to use Nitnoi after a change means the new notice applies to you.