Terms of Service
These Terms of Service (hereinafter referred to as the "Agreement") govern the relationship between the Administration of the NiosMess service (hereinafter referred to as the "Administration", "we", "us") and any individual using the service (hereinafter referred to as the "User", "you").
By registering in NiosMess or using its functionality, you unconditionally agree to the terms of this Agreement. If you do not agree with any of the terms, you must immediately cease using the service.
1. General Provisions
- 1.1. Subject of the Agreement
- The Administration grants the User a non-exclusive right to use the NiosMess messenger, including private and secret chats, groups, channels, and the NiosGram publication feed (hereinafter referred to as the "Service"), on an "as is" basis.
- 1.2. Age Restrictions
- The Service is intended for individuals over 13 years of age (for residents of the EU/EEA — over 16 years of age, unless local member state law allows for a lower age). If you are under the specified age, you are not permitted to use the Service without the consent of your parents or legal guardians.
- 1.3. Changes to the Agreement
- The Administration reserves the right to modify the Agreement at any time without prior notice. Continued use of the Service after changes are made constitutes acceptance of such changes.
2. Rights and Obligations of the User
2.1. Account Responsibility: The User bears full responsibility for the security of their credentials (password, 2FA codes) and for all actions performed under their account.
2.2. The User is prohibited from:
- Using the Service for any illegal purposes, including, but not limited to: promoting terrorism, extremism, selling narcotics, weapons, and distributing child sexual abuse material (CSAM).
- Engaging in bulk sending of unsolicited messages (spam) or advertising without the consent of the recipients.
- Compromising the security of the Service (hacking, DDoS attacks, exploiting software vulnerabilities, distributing malware).
- Impersonating other individuals, representatives of the Administration, state bodies, or organizations to mislead others (phishing, scamming).
- Publicly posting (in channels, groups, or the NiosGram feed) personal data of third parties (doxxing) or content that violates third-party intellectual property rights.
- Using automated scripts (bots) to parse user data or artificially inflate reactions/comments in NiosGram.
3. Moderation System and Types of Sanctions
The Administration reserves the right to limit access to the Service if the User violates the terms of this Agreement. NiosMess provides for 3 (three) levels of sanctions:
3.1. Spamblock (Communication Restriction)
Description: Temporary or permanent restriction of the account's ability to initiate new dialogues with users who have not added you to their contacts, as well as a restriction on creating public posts in NiosGram.
Reason: Bulk complaints from users about spam, suspicious activity, automated messaging, or intrusive advertising.
Removal: May be lifted automatically after the expiration of the period set by algorithms, or after review by the Administration.
3.2. Account Freeze (Temporary Block)
Description: Complete suspension of access to account functionality (you cannot log into the profile, read, or send messages). Account data, chats, and posts remain preserved on the server.
Reason: Suspicion of account compromise (password leak), abnormal activity, or moderate violations of the Agreement (systematic insults, exploiting interface bugs).
Removal: Freezing is reversible. To restore access, the User must contact Support and verify their identity or resolve the cause of the violation.
3.3. Permanent Ban (Irreversible Block)
Description: Complete, final, and indefinite termination of access to the account without the right to recovery. All active sessions are terminated. Public content of the user (in NiosGram) is subject to deletion.
Reason: Gross violations of applicable law, distribution or mention of any type of pornography, financial fraud, terrorist threats, trade of prohibited substances, or systematic circumvention of previous blocks.
Removal: A permanent ban is not subject to appeal or reversal. Support does not process applications for permanently blocked accounts.
4. Privacy and E2EE (End-to-End Encryption)
4.1. Secret Chats: Messages sent in NiosMess Secret Chats are protected by end-to-end encryption (E2EE). The Administration does not have the technical capability to read, decrypt, or grant third parties access to such messages.
4.2. No E2EE Moderation: The Administration does not moderate the contents of Secret Chats. However, upon receiving a report from one of the participants of a secret chat with evidence of violations (using the built-in report feature for a specific message or forwarding messages to moderators), the Administration reserves the right to apply the sanctions described in Section 3 to the violator.
4.3. Public Content: Content published in the NiosGram feed, public channels, and groups is not encrypted with E2EE and is subject to automated and manual moderation for violations of the Service rules.
5. Limitation of Liability (Disclaimer of Liability)
5.1. "As Is" Principle: The Service is provided on an "as is" basis. The Administration does not guarantee uninterrupted operation of the Service, the absence of errors, or the preservation of data (especially cached encryption keys in the local storage of the device).
5.2. User Content: The Administration is not responsible for any information posted by Users. All opinions, files, and media transmitted through the Service are the sole responsibility of the persons who published them.
5.3. Loss of Access: The Administration is not responsible for the User's loss of access to Secret Chats in the event of device loss, session reset, or using the "Reset E2EE Keys" function in the settings.
5.4. Damages: Under no circumstances shall the Administration be liable for any direct, indirect, incidental, or consequential damages (including lost profits) arising out of the use or inability to use the Service.
6. Intellectual Property
6.1. The User retains the rights to all content they upload or publish in NiosMess.
6.2. By publishing content in public sections (NiosGram), the User grants the Administration a global, non-exclusive license to display, store, and transmit this content as part of the Service's operation.
7. Final Provisions
7.1. This Agreement is governed by and construed in accordance with the laws of the Republic of Cyprus. All disputes arising in connection with this Agreement shall be subject to the jurisdiction of the courts at the location of the Administration.
7.2. All potential disputes arising from this Agreement shall be resolved through pre-trial correspondence via email.
7.3. If any provision of this Agreement is found by a court to be invalid, the remaining provisions shall remain in full force and effect.
Support Service
Email: niosmess@gmail.com
Privacy and Personal Data Processing Policy
This Privacy Policy (hereinafter referred to as the "Policy") defines the procedure for processing and protecting personal data of users of the NiosMess service (hereinafter referred to as the "Service", "Messenger") carried out by the Service Administration (hereinafter referred to as the "Operator") in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Terms and Definitions
- Operator
- The Administration of the NiosMess Service, which independently or jointly with other parties organizes and carries out the processing of personal data.
- User
- Any individual registered in the Messenger and using its features.
- Personal Data (PD)
- Any information relating to an identified or identifiable natural person (data subject).
- End-to-End Encryption (E2EE)
- A data transmission method where only the Users participating in the communication have access to the messages. The Operator does not possess decryption keys and has no access to the content of such messages.
2. Legal Basis for Processing Personal Data
The Operator processes Users' personal data based on the following legal grounds:
- The User's consent to the processing of their personal data, expressed by performing affirmative actions (checking the tick-box during registration).
- Performance of the Terms of Service to which the User is a party.
- Legitimate interests of the Operator (such as fraud prevention, ensuring Service security and stability).
3. List of Processed Personal Data
The Operator processes the following data of the User:
- Email address;
- Username and Display Name;
- Profile description ("About Me" / Bio);
- Profile image (Avatar);
- Network identifiers: IP address, device type and model, operating system, cookies, and local storage technologies (LocalStorage, IndexedDB) for session analytics and security purposes;
- Files and media voluntarily uploaded by the User to public channels, groups, or chats without end-to-end encryption.
The Operator processes Secret Chat messages exclusively in encrypted form (as unreadable encrypted data blocks) and transfers them between Users' devices. Decryption keys are stored solely locally on the Users' devices. Due to the architecture of E2EE, the Operator has no technical ability to decrypt, read, modify, or store the contents of Secret Chats in an unencrypted format.
4. Purposes of Processing Personal Data
Personal data of Users is processed solely for the following purposes:
- Registration and identification of the User within the Service;
- Providing the core functionality of the messenger (message delivery, creation of groups and channels, publishing posts in the NiosGram feed);
- Ensuring account security, including sending two-factor authentication (2FA) codes;
- Moderation of public content in accordance with the Terms of Service (ToS) and applicable laws;
- Technical support and handling inquiries in case of account freeze.
5. Collection, Storage, and Deletion of Personal Data
5.1. Data Location: The Operator hosts and processes the personal data of Users on secure servers located in Germany (European Union) in compliance with the EU General Data Protection Regulation (GDPR).
5.2. Personal data is collected directly when the User fills out registration forms and during the use of the Messenger.
5.3. Personal data is stored in a form that allows identification of the data subject for no longer than is necessary for the purposes of its processing.
5.4. Upon account deletion by the User or upon a valid erasure request, all personal data of the User is permanently deleted or anonymized within 30 calendar days, except where a longer retention period is required by applicable law.
6. Disclosure of Personal Data to Third Parties and International Transfers
6.1. The Operator does not transfer personal data of Users to third parties without their explicit consent, except when necessary to comply with applicable law or to respond to lawful requests from law enforcement agencies.
6.2. Any international transfer of personal data outside the European Economic Area (EEA) is carried out in accordance with applicable laws, using Standard Contractual Clauses (SCCs) or other appropriate safeguards to ensure an adequate level of data protection.
7. Rights of Users (Data Subjects)
Under the GDPR, the User has the right:
- To access their personal data and receive a copy of the processed data;
- To request rectification, restriction, or erasure ("right to be forgotten") of their personal data if it is incomplete, outdated, inaccurate, or unlawfully obtained;
- To withdraw consent to the processing of personal data at any time by sending a request to the Operator. Withdrawal of consent results in the deletion of the Messenger account;
- To data portability;
- To object to the processing of their data;
- To lodge a complaint with a supervisory data protection authority.
8. Protection of Personal Data
The Operator takes necessary and sufficient legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, alteration, blocking, copying, distribution, as well as from other unlawful actions of third parties in accordance with international information security standards.
9. Amendments to the Privacy Policy
The Operator has the right to make changes to this Policy. The new version of the Policy takes effect from the moment it is posted on the Service website, unless otherwise provided by the new version.
10. Contact Information
For inquiries, withdrawal of consent, or obtaining information regarding the processing of personal data, the User may contact the Operator via email at: niosmess@gmail.com.
Согласие на обработку персональных данных
Создавая аккаунт в NiosMess или Nios ID, а также входя в уже созданный аккаунт, вы (Пользователь) соглашаетесь с тем, что Администрация NiosMess (Оператор) обрабатывает ваши персональные данные так, как описано ниже. Отдельной галочки нет: согласие даётся самой регистрацией. Если вы не согласны, не регистрируйтесь и не пользуйтесь сервисом.
1. Какие данные мы обрабатываем
- Аккаунт: адрес электронной почты, имя пользователя (username), отображаемое имя, пароль в виде необратимого хэша (сам пароль мы не храним), идентификатор Nios ID.
- Профиль: описание, аватар, а также телефон, дата рождения, рабочие часы и статус-эмодзи, если вы их указали.
- Сессии и устройства: тип и модель устройства или браузера, IP-адрес, время создания и последней активности сессии, токен сессии в виде хэша, токен для push-уведомлений и платформа устройства.
- Переписка: сообщения, файлы, голосовые и видеосообщения, реакции, ответы, время отправки и правки, состав чатов, групп и каналов, счётчики непрочитанного.
- Звонки: кто звонил, в каком чате, когда и как долго. Сам разговор в базе данных не хранится.
- NiosGram: посты, комментарии, реакции, подписки. Для постов ИИ автоматически подбирает теги.
- Настройки и социальные связи: правила приватности, блокировки, значки, стикерпаки, созданные боты.
- Подписка Nios+: статус, срок действия, использован ли пробный период. ИИ: расход лимита (в символах) и выбранная модель.
- Письма поддержки и жалобы, которые вы отправляете сами.
2. Зачем
- Создавать аккаунт, подтверждать почту и входить, в том числе по двухфакторным кодам.
- Доставлять сообщения, файлы и звонки, вести группы и каналы, показывать публичные посты.
- Присылать уведомления и письма с кодами.
- Отвечать на запросы к ИИ: @ai, NiosAI, перевод и улучшение текста.
- Защищать сервис: бороться со спамом и злоупотреблениями, расследовать жалобы, блокировать нарушителей по Условиям использования.
- Оформлять и учитывать подписку Nios+.
- Показывать на сайте обобщённую статистику: число аккаунтов и сообщений округляется вниз и не раскрывает данные отдельных людей.
3. Как защищена переписка
Секретные чаты защищены сквозным шифрованием (E2EE, Double Ratchet). Ключи хранятся только на ваших устройствах, на сервере лежит шифротекст, и прочитать его Оператор не может.
Обычные чаты, группы, каналы и комментарии защищены иначе. Данные передаются по защищённому соединению и хранятся в базе в зашифрованном виде (AES-256-GCM), но ключ шифрования находится на сервере. Это не сквозное шифрование: технически Оператор имеет доступ к содержимому. Мы не читаем переписку из любопытства. Доступ возможен только по жалобе на нарушение, по требованию закона или чтобы устранить техническую неисправность. Нужна приватность от сервера, используйте секретный чат.
Это относится и к общению с ИИ. Запросы к ИИ не защищены сквозным шифрованием и обрабатываются внешними сервисами (раздел 4).
4. Кому данные передаются
Мы не продаём данные и не показываем рекламу. Для работы сервиса часть данных получают внешние исполнители:
- ИИ-провайдер polza.ai и модели, которые он запускает (сейчас Qwen, Google Gemini, OpenAI). Им уходит текст вашего запроса к ИИ и недавний контекст диалога, а также текст, который вы просите перевести или улучшить. Историю диалога с NiosAI сервер держит только в оперативной памяти.
- Поиск в интернете для ИИ (Google или DuckDuckGo). Им может уйти поисковая фраза, которую ИИ составил по вашему вопросу.
- Google (Firebase Cloud Messaging): доставка push-уведомлений на Android. Им передаются токен устройства и данные, нужные для показа уведомления.
- Почтовый сервис Gmail (SMTP): отправка писем с кодами. Ему передаются ваш адрес и текст письма.
- Google Fonts: веб-версия подгружает шрифт с серверов Google, поэтому им виден ваш IP-адрес и браузер.
Код, который выполняет ИИ-ассистент у подписчиков Nios+, запускается в изолированной среде на нашем сервере без доступа к сети и к данным NiosMess.
Кроме того, мы раскрываем данные государственным органам, если этого требует закон, и другим пользователям в пределах ваших настроек приватности: ваш профиль, публичные посты и то, что вы отправляете в чаты.
5. Где и сколько хранятся данные
- Серверы NiosMess расположены в Германии (Франкфурт-на-Майне).
- Данные хранятся, пока существует ваш аккаунт. Сообщения с автоудалением удаляются по таймеру чата.
- После запроса на удаление аккаунта действует 31 день, в течение которых удаление можно отменить, потом аккаунт и связанные с ним данные удаляются. Данные, которые вы отправили другим людям, могут остаться у них на устройствах.
- Резервные копии базы данных могут храниться ещё ограниченное время, после чего заменяются новыми.
6. Срок действия и отзыв согласия
Согласие действует с момента регистрации, пока вы не удалите аккаунт или не отзовёте согласие. Отозвать его можно в любой момент, написав на privacy@ni-os.ru или удалив аккаунт в приложении. Без согласия мы не можем предоставлять сервис, поэтому отзыв приводит к удалению аккаунта и ваших данных в порядке, описанном в разделе 5.
Вы также можете запросить у нас копию ваших данных, исправление или удаление через тот же адрес.
7. Возраст и изменения
Регистрируясь, вы подтверждаете, что вам не меньше 13 лет (или не меньше 16, если вы живёте в ЕС или ЕЭЗ, если местный закон не разрешает меньше), либо что родитель или законный представитель разрешил вам пользоваться сервисом.
Если мы изменим этот документ, новая версия появится на этой странице. Продолжая пользоваться сервисом после этого, вы соглашаетесь с обновлённой версией.
Data Processing Consent
By creating an account in NiosMess or Nios ID, or by signing in to an existing account, you (the User) agree that the NiosMess Administration (the Operator) processes your personal data as described below. There is no checkbox: your consent is given by registering itself. If you do not agree, do not register and do not use the service.
1. What data we process
- Account: email address, username, display name, your password as an irreversible hash (we never store the password itself), and your Nios ID identifier.
- Profile: bio, avatar, and phone number, date of birth, working hours and status emoji if you provide them.
- Sessions and devices: device or browser type and model, IP address, session creation and last-activity time, the session token as a hash, the push-notification token and device platform.
- Conversations: messages, files, voice and video messages, reactions, replies, send and edit times, membership of chats, groups and channels, unread counters.
- Calls: who called, in which chat, when and for how long. The conversation itself is not stored in the database.
- NiosGram: posts, comments, reactions, subscriptions. AI automatically generates tags for posts.
- Settings and connections: privacy rules, blocks, badges, sticker packs, bots you created.
- Nios+ subscription: status, expiry, whether the trial was used. AI: usage against your limit (in characters) and your chosen model.
- Support requests and reports that you send yourself.
2. Why
- To create your account, verify your email and sign you in, including two-factor codes.
- To deliver messages, files and calls, run groups and channels, and show public posts.
- To send notifications and emails with codes.
- To answer your AI requests: @ai, NiosAI, translation and text improvement.
- To protect the service: fight spam and abuse, investigate reports, and block violators under the Terms of Service.
- To process and account for Nios+ subscriptions.
- To show aggregate statistics on the website: the numbers of accounts and messages are rounded down and do not reveal data about individual people.
3. How conversations are protected
Secret Chats use end-to-end encryption (E2EE, Double Ratchet). Keys stay on your devices, the server only holds ciphertext, and the Operator cannot read it.
Regular chats, groups, channels and comments are protected differently. Data travels over secure connections and is stored in the database encrypted (AES-256-GCM), but the encryption key is held on the server. This is not end-to-end encryption: technically, the Operator can access the content. We do not read conversations out of curiosity. Access happens only after a report of a violation, when the law requires it, or to fix a technical fault. If you need privacy from the server, use a Secret Chat.
The same applies to AI conversations. AI requests are not end-to-end encrypted and are handled by external services (section 4).
4. Who receives data
We do not sell data and we do not show ads. To run the service, some data goes to outside providers:
- The AI provider polza.ai and the models it runs (currently Qwen, Google Gemini, OpenAI). They receive the text of your AI request and recent conversation context, as well as text you ask to be translated or improved. The NiosAI conversation history is kept only in server memory.
- Web search for AI (Google or DuckDuckGo). They may receive a search phrase the AI composed from your question.
- Google (Firebase Cloud Messaging): delivery of push notifications on Android. It receives your device token and the data needed to show the notification.
- Gmail (SMTP): sending emails with codes. It receives your address and the email text.
- Google Fonts: the web version loads a font from Google servers, so Google sees your IP address and browser.
Code run by the AI assistant for Nios+ subscribers executes in an isolated environment on our server with no network access and no access to NiosMess data.
We also disclose data to public authorities where the law requires it, and to other users within your privacy settings: your profile, your public posts and what you send in chats.
5. Where and how long data is kept
- NiosMess servers are located in Germany (Frankfurt am Main).
- Data is kept while your account exists. Messages with auto-delete are removed on the chat timer.
- After you request account deletion there is a 31-day period in which you can cancel it; after that the account and its data are deleted. Data you sent to other people may remain on their devices.
- Database backups may be kept for a further limited time and are then replaced by newer ones.
6. Validity and withdrawal
This consent is valid from registration until you delete your account or withdraw it. You can withdraw it at any time by writing to privacy@ni-os.ru or by deleting your account in the app. We cannot provide the service without consent, so withdrawal results in deletion of your account and data as described in section 5.
You can also ask us for a copy of your data, or for its correction or deletion, at the same address.
7. Age and changes
By registering you confirm that you are at least 13 years old (or at least 16 if you live in the EU or EEA, unless local law allows a lower age), or that a parent or legal guardian has allowed you to use the service.
If we change this document, the new version will appear on this page. By continuing to use the service afterwards you accept the updated version.