Privacy policy

Kredy Company, a SASU with a share capital of EUR 1,000, 6 rue d’Armaillé, 75017 Paris, France, registered in Paris under number 106 214 034. For any question about your data: [email protected].

• A visitor never sees the occupant’s name, e-mail address or postal address, and nothing tells them whether the occupant is home. They only see the name the occupant gave the door, such as “Door 4B”.
• During a call, the voice goes through our servers, never straight from one phone to the other: the occupant’s IP address is not passed to the visitor. Video only goes from the visitor to the occupant. Nothing is recorded.
• Every photo sent is re-encoded: its metadata, GPS location included, is removed.
• Nokko shows no advertising, sells no data and uses no audience measurement tool.

You do not need an account. Depending on what you do, we process:

• the messages you send and the reason you choose (parcel, parking, noise…), passed to the household at that door;
• if you ring, the date, length and outcome of the call; the sound and, if you turn it on, your camera’s picture are passed on live and are not recorded;
• the contact details you choose to leave so you can be answered, which the household can read;
• your e-mail address, if a reason requires a verified contact, to send you a six-digit code;
• the first and last name you give if you sign your message;
• a random identifier kept by your browser, which lets a household block an unwanted visitor without knowing who they are, and a session token to get back to your conversation.

If you write with a Nokko account, the household never sees your e-mail address: it sees a pseudonym specific to its door, or your name if you sign.

Your messages to a door are analysed automatically by our servers, against a list of words, to spot insults and threats. Nobody reads them for this: the message is delivered as usual, the household is offered the chance to report it, and we count how often this happens at each door. If a member of the household reports the conversation, a Nokko moderator may read it while the report is open, and may block you from that home or close your account. You are not told.

• Your e-mail address, used to sign you in with a code, with no password, and the app’s language.
• Your profile, if you fill it in: first name, last name and photo. Your household sees it and, if you join your building’s group, so do verified neighbours. Visitors never do.
• Your homes: address, floor, the name shown on the door and settings (accepted reasons, call hours). The address is used to link the home to its building; it is never shown to visitors.
• When you add a home, the country you are connecting from, which Cloudflare infers from your IP address, to propose that country straight away. It is neither stored nor passed to any other service.
• The members of your household and the invitations you send, with the invited person’s e-mail address.
• Your conversations with visitors and your replies. The Nokko team does not read them, unless a member of your household reports one: a moderator may then read it, replies included, while the report is open, without seeing which of you replied. They know who reported it. The visitor is not told.
• The devices that receive your notifications: a notification identifier, the system (iOS or Android) and the language, as well as your notification preferences.

• To join the group of neighbours in your building, you send a proof of address, such as a bill, with your first and last name. The Nokko team reviews it, and it is deleted as soon as a decision is made. If it has not been reviewed within 30 days, it is deleted unread. A neighbour never sees it.
• A refused request is kept for 90 days, without the document, so you can see why.
• In the group, verified neighbours see your name, your photo, your door number and your messages.
• A reported person never learns who reported them. The moderation team does see who made the report. The note that may come with it is erased once the report has been handled.
• Your vote in the election of your building’s president is recorded so it can be counted.

• To limit abuse, we count requests by network and by e-mail address. These values are irreversibly transformed (hashed) before use and are never stored in the clear. The counters disappear on their own, one hour after they are created at the latest.
• Some doors ask for an anti-robot check. It is computed by your browser, with no third-party service.
• The app may ask Apple or Google to confirm that the device and the app are genuine.
• Every action of the moderation team (viewing a proof of address or a reported conversation, a decision, a suspension, a deletion) is written to a log, so that this power is itself accountable. The log contains no messages and no documents.
• We do not measure how often doors are visited: only a daily total of scans across all doors is kept.

Your data is never sold or rented. It is processed by Kredy Company and by the following providers, solely to run the service:

• OVH SAS (France): hosting of the servers, database, files, e-mail and calls;
• Cloudflare, Inc. (United States): secure routing of traffic between your device and our servers;
• Expo, by 650 Industries, Inc. (United States): sending the app’s notifications;
• Apple Inc. and Google LLC (United States): delivering notifications and calls to iPhone and Android, and confirming the app is genuine;
• Komoot GmbH (Germany), Photon service; the French National Institute of Geographic and Forest Information, Géoplateforme service; the Swiss Federal Office of Topography, swisstopo; Digitaal Vlaanderen, Paradigm and the Public Service of Wallonia (Belgium), each for the addresses in its region: looking up addresses and linking them to their building. They receive the address typed, from our servers, without your name or your IP address.

Transfers outside the European Union rely on the EU-US Data Privacy Framework, on the European Commission’s standard contractual clauses or, for Switzerland, on the Commission’s adequacy decision, depending on the provider.

Nokko uses no advertising or audience measurement cookies. Only what the service needs to work is stored, which requires no prior consent:

You have the right to access, rectify, erase, restrict, object to and port your data, and the right to give instructions about what happens to it after your death.

• In the app, Account, then Download my data: you receive by e-mail a link to a full copy, valid for 7 days and usable once.
• Account, then Delete my account: your account, profile and homes are deleted, including for the other members of your household. Names you signed at other doors are erased. The details, and how to ask without the app: Delete your account.
• For any other request, write to [email protected]. We answer within one month.

If you wrote to a door without an account, Nokko does not know who you are. Your messages are deleted after the periods set out above.

You may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France: www.cnil.fr.

You must be at least 15 years old to create a Nokko account.

We may change this policy as the service or the law evolves. The date of the last update is shown at the top of the page. If a change is significant, account holders are told by e-mail or in the app.