Necro Privacy Policy

1What we collect

Account information

• Your mobile number, to sign you up, let you sign in with a one-time code and help you get back into your account. Verification codes are sent by text message (SMS).
• Your username, display name and password. We never store your password in readable form, only a cryptographic hash of it, so nobody, Necro's admins included, can see your password.
• Anything you add to your profile yourself: a picture, a banner image, an "About me" text and a game name.
• If you live outside Iran and sign up without a number, the short note you write so we can approve your account.
• If you turn on two-step verification, its secret key is stored encrypted and your recovery codes are stored as hashes.

What you send on Necro

Your messages, photos, videos, files, voice messages, reactions, messages in groups and server channels, and soundboard sounds are stored on Necro's servers. Without that, a message could not be delivered and your chats would not show up on your other devices.

Calls and meetings

The audio and video of calls pass through Necro's servers to reach the other people in the call, but they are never recorded or stored. AI noise suppression runs on your own device; your voice is not sent anywhere else for it.

Technical information

• Your IP address, the type of device and operating system, and the name and version of the app or browser each time you sign in. You can see all of this in Settings → Devices, and sign any device out of your account from there.
• Your online status, when you were last active, and your "last seen" time.
• In the Android app: your phone's notification token (so we can tell you about new messages and calls) and the app version.
• Server logs, which include IP addresses and are used to keep the service secure and to track down errors.

Games

We store your game results, skill rating and level. Your rating and rank on the game leaderboards are visible to others. Chat messages inside a game are kept only in the server's memory until that game ends, unless someone reports a player (see section 5).

"Playing…" in the Windows app

While "Share my activity" is on, the Windows app compares the list of running programs with a list of games on your own computer and sends only the name of the game it finds, so it can be shown next to your name. The list of programs on your computer never leaves it. You'll find this option in Settings → Activity.

Inviting others

If you invite someone to Necro by their mobile number, we keep that number so its owner can sign up. We never send anything to that number, and the invitation expires after 14 days.

What we don't collect

• We don't access your phone's address book or contacts.
• We don't collect your location (GPS).
• There are no third-party advertising or analytics tools (such as Google Analytics) in Necro's apps or website.

2Android app permissions

• Microphone, for calls, voice messages and voice channels; only when you start one of them.
• Camera, for video calls; only when you turn your camera on.
• Notifications, to tell you about new messages and calls.
• Photos and files: the app has no access to your phone's storage and only sees the file you pick to send.
• Calls on the lock screen and running in the background, so you can see an incoming call even when your phone is locked, and a call doesn't drop when you leave the app.

3How we use it

• To deliver your messages and calls and keep your chats available on all your devices;
• to sign you up and in and keep your account safe: sending codes, recognizing devices you've signed in with before, telling you about every new sign-in, and stopping password guessing;
• to send you notifications;
• to fight spam, scams and harassment;
• to handle reports;
• to find and fix errors and keep the service running;
• to answer messages you send us.

We don't use your information for advertising or to build advertising profiles, and we don't sell it to anyone.

4Who can see it

Other users

• Your username, display name, picture and profile text are visible to others.
• Your messages are seen by the members of the chat, group or channel you send them to.
• Others can see whether you're online and when you were last seen, unless you set your status to "Invisible".
• By default your mobile number is not shown to anyone. In settings you can show it to your friends or to everyone.
• In games with people you don't know, your game name is shown instead of your username.

Services that help us run Necro

• ArvanCloud, our content delivery network and website protection. Your connection to Necro passes through it.
• Iran Payamak, the SMS service that texts verification codes to your number. It receives only your number and the code.
• Google Firebase Cloud Messaging, which delivers the Android app's notifications to your phone. A notification may include the sender's name and part of the message.
• GIPHY, for GIF search. Necro's server sends what you search for to GIPHY without any information about your account, and you get the GIF file itself from Necro's server.
• SoundCloud, YouTube and Spotify, when you ask the Necro music bot for a song: Necro's server looks up the song's name or link on these services.
• eNamad, Iran's e-commerce trust seal. The seal at the bottom of this website's home page is loaded from eNamad's server, which sees the visitor's IP address.

Legal requests

If a competent judicial authority requests information under the law, we provide only what the law requires.

5Access by Necro's admins

Because messages are not end-to-end encrypted, a small number of Necro admins can access conversations through the admin console. This access is used only to handle reports of abuse, to fight spam and misuse, or to respond to a legal requirement. The sign-in codes sent to you in the official Necro chat are hidden from admins too, and no user's password can be seen by anyone.

If you report someone in a game, the latest messages of that game are saved with the report so it can be reviewed. They are deleted 90 days after the report has been reviewed.

6Storage, retention and security

• Where: Necro's servers, in a data center in Iran.
• Messages and files stay until you delete them. When you delete a message, its text and file are deleted from the server too, and deleting a chat deletes its messages for good.
• "Clear history" only hides messages from you (or, if you choose, from every member of the chat); it doesn't delete them from the server. To remove a message, delete the message itself.
• A file that was uploaded but never sent in a message is deleted after a few days.
• Server logs are kept for about two weeks.
• The database is backed up every night and each backup is kept for about two weeks, so something you delete may remain in backups for up to two weeks.
• Emails you send to info@necro.ir are kept for up to 90 days.

All connections between the apps and our servers are encrypted over HTTPS. Passwords are stored as hashes, two-step verification with an authenticator app is available, and you're told about every new sign-in to your account in the official Necro chat. Still, no system is perfect. If you think someone has got into your account, change your password and use "Sign out everywhere" in Settings → Devices.

7Your choices

In Settings → Privacy & Safety you decide:

• who can see your mobile number;
• who can call you, message you, send you friend requests or add you to groups;
• whether others can see that you've read their messages (read receipts).

You can also go invisible, block anyone, turn off "Share my activity", see the list of your devices and sign out of any of them, delete your messages, and disable or delete your account. If you'd like to know what information we hold about you, or want something corrected, email info@necro.ir.

8Deleting your account

You can delete your Necro account in the Android app or on the web:

In the Android app

1. Open Settings → Profile & account.
2. At the bottom of the page, under "Account removal", tap "Delete account".
3. Enter your username and password, and confirm.

On the web

1. In a browser (on your phone or computer), go to web.necro.ir and sign in.
2. Open Settings → My Account.
3. At the bottom of the page, under "Account removal", tap "Delete account", enter your password and username, and confirm.

The Android app has the delete-account button from version 0.4.10; on older versions of the app, please use the web version. If you can't sign in to your account, email a deletion request to info@necro.ir with the account's username and mobile number. We'll make sure the account is really yours before deleting it.

What happens after you ask to delete it

• You're signed out on every device right away, and nobody can find, message or call you any more.
• You have 14 days to change your mind: just sign in again and cancel the deletion.
• After 14 days, your username, display name, picture, banner, profile text, game name, mobile number, friends, block list, soundboard sounds, game stats and your official Necro chat are deleted, and you leave every group and server. A group you created passes to its longest-standing member.
• Messages you've already sent to others stay in their chats, labeled "Deleted account". If you want a message gone, delete it before you delete your account.
• If you own a server, you need to transfer it to someone else or delete it before you can delete your account.
• Backups may still hold this information for up to about two weeks after it's deleted.

9Children

Necro is not meant for children under 13, and we don't knowingly collect information from them. If we learn that an account belongs to a child under 13, we delete it. If you think such an account exists, please let us know.

10Changes to this policy

Whenever this policy changes, we update the date at the top of the page. We also announce important changes in the official Necro chat.

11Contact us

For any question or request about your privacy or your information, write to info@necro.ir.