NCRPT Privacy Policy
Last updated: 1 October 2026
1. Who we are
NCRPT is an end-to-end encrypted messaging and calling app operated by ROKiT Group ("ROKiT", "we", "us"). This policy explains what the NCRPT app collects, why, and who it is shared with.
This policy is complete on its own: it covers your NCRPT account, from signing in with your phone number to deleting your account.
2. What we collect
NCRPT is built so that we hold as little as possible. Your messages and calls are end-to-end encrypted: only you and the people you talk to can read or hear them.
Your account. Your phone number, which is how you sign in and how people find you. The name and profile photo you choose, and an email address if you add one. These are stored on our servers so other NCRPT users can see who they are talking to. If you block someone, the list of people you have blocked, with the name and photo they had when you blocked them, is stored with your account so it applies on all your devices.
Your contacts. Only if you allow access. Your contact list stays on your device, where NCRPT uses it to show your contacts' names and let you start a chat. When you pick a contact, their phone number is sent to our server, which answers only whether that number is on NCRPT. The number is not stored and not logged. Your contact list is never uploaded.
Messages, media and calls. Text, photos, videos, files and voice messages are encrypted on your device before they are sent. Our servers store and deliver them in that encrypted form and cannot read them. Voice and video calls are encrypted between the devices on the call; when a direct connection is not possible, the encrypted call is relayed through our server.
To deliver messages, our servers need to know which accounts are in which chats and when messages are sent. They do not know what the messages say.
Reports. If you report a message, NCRPT sends us that message as you see it, readable, together with who sent it and when, so we can review the report and act on it. Nothing else from the conversation is sent, and nothing is sent unless you choose to report.
Your PIN and keys. If you set an app PIN, NCRPT creates an account key. Its private half is stored on our servers encrypted with your PIN, so we cannot use it; its public half is shown on your profile so others can send you PIN-protected messages. The keys that let you read your chat history on a new device are stored with it, sealed to that account key. PINs or passwords you put on individual messages never leave your device.
ROKiT Ai. Every account starts with a chat with ROKiT Ai, an assistant that runs on our own systems. This chat is not end-to-end encrypted, because the assistant has to read your message to answer it. Your messages are processed only to reply. The assistant does not keep them and they are never used to train or improve it. Like every chat, the conversation's history is held on our server so it appears on your devices. You never have to use this chat.
Device and technical information. A push notification token, your device model and operating system version and the app version. Our servers necessarily see your IP address when your device connects, as with any internet service, but our server logs do not record your IP address or anything else that identifies you.
Usage and diagnostics. App usage events, crash reports and performance measurements. These never contain your messages, contacts, name, phone number or account ID.
Permissions. NCRPT asks for the camera to take photos and videos and for video calls; the microphone for voice messages and calls; your photo library to send photos and videos; and notifications to tell you about messages and calls. Each is optional and used only for that purpose.
3. How we use it
We use your information only to run NCRPT:
- to create your account and verify your phone number;
- to show other users your name and photo, and to tell you which of your contacts are on NCRPT;
- to deliver your encrypted messages, media and calls, and to notify you about them;
- to let you restore your chat history on a new device with your PIN;
- to answer you in the ROKiT Ai chat;
- to keep the service secure, prevent abuse and review the reports you send us;
- to find and fix faults and to understand, in aggregate, how the app is used;
- to meet our legal obligations.
NCRPT shows no ads and we do not sell your information. We advertise NCRPT itself, and our analytics are linked to Google Ads only so we can measure how well those campaigns work, for example how many installs an ad led to. NCRPT does not collect your device's advertising identifier, and the events are not used for personalised advertising or remarketing. They never contain your name, phone number, account, contacts or messages.
4. Our legal basis
Where data protection law such as the UK GDPR or EU GDPR applies, we rely on these legal bases:
| What we do | Legal basis |
|---|---|
| Creating your account, verifying your phone number, showing your profile, delivering messages, media, calls and notifications, storing your key backup, answering you in the ROKiT Ai chat, deleting your account | Performance of our contract with you (our Terms of Use) |
| Checking whether a contact you pick is on NCRPT | Your consent, given when you allow contacts access; you can withdraw it at any time in your device settings |
| Camera, microphone, photo library and notifications | Your consent, given through your device's permission prompts; you can withdraw it at any time in your device settings |
| Usage analytics, crash reports, performance data and measuring our own advertising | Our legitimate interest in keeping NCRPT reliable and understanding how people find it, balanced against your privacy by excluding your name, number, account, contacts and messages |
| Reviewing reports, preventing abuse and keeping the service secure | Our legitimate interest, and yours and other users', in a safe service |
| Keeping records the law requires and responding to lawful requests | Compliance with a legal obligation |
Where we rely on legitimate interests, you have the right to object; contact us at the address below.
5. Who we share it with
We do not sell your personal information. We do not share your contacts, and we cannot share your messages or calls: they are end-to-end encrypted and we cannot read them.
NCRPT uses these service providers, each only for the purpose shown:
| Provider | What it receives | Why |
|---|---|---|
| Google Firebase Authentication | Your phone number | To send and check the code that verifies your number when you sign in |
| Google Firebase Analytics | App usage events, such as which screen was opened or whether sign-in succeeded. Never your messages, contacts, name or phone number | To understand how the app is used and improve it, and, through its link to Google Ads, to measure how well our own advertising of NCRPT works |
| Google Firebase Crashlytics and Performance Monitoring | Crash reports and performance measurements, with device model and OS version | To find and fix faults |
| Apple Push Notification service (iPhone, iPad) and Firebase Cloud Messaging (Android) | A device token and the information needed to deliver a notification. Message content stays encrypted and is decrypted on your device | To tell you about new messages and incoming calls |
| Google STUN server | Your device's IP address, during a call | To find a network route between you and the person you are calling |
| Our hosting providers | Data we store, as described in this policy | To run NCRPT's servers |
We may also disclose information when the law requires it, to protect the safety of users or others, or as part of a merger or sale of the business. Because messages and calls are end-to-end encrypted, we cannot disclose their content.
6. Deleting your account
You can delete your account at any time in the app: Settings › Delete account. Deletion happens straight away and cannot be undone. The app confirms when your account has been deleted, then signs out and removes NCRPT's data from your device.
Deletion removes from our servers your account, phone number, name, photo and email address, your key backup, and every message, photo, video, file and voice message you have sent.
Copies of your messages that were already delivered to other people's devices stay on those devices, because they are encrypted for those devices and we cannot reach them. We may keep limited records where the law requires it.
7. How long we keep information
We keep your account information and encrypted messages while your account exists, and delete them when you delete your account. Phone numbers checked against NCRPT from your contacts are not kept at all. Messages to ROKiT Ai are not kept by the assistant. Analytics and crash data are kept by Google for the retention period set in our Firebase settings, and are not linked to your name, phone number or account.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how we use it, and to withdraw consent. You can change your name and photo in the app and delete your account in Settings. For anything else, email us at the address below. You also have the right to complain to your local data protection authority.
9. Security
Messages, media and calls are end-to-end encrypted. Data stored on our servers is protected with access controls and encryption in transit. No system is perfectly secure, so keep your phone and your PIN safe.
10. International transfers
NCRPT's servers and service providers may be in countries other than yours. Where the law requires it, we use appropriate safeguards for these transfers.
11. Children
NCRPT is not for children under 13, or under the minimum age for digital consent in your country if that is higher. We do not knowingly collect information from them.
12. Changes to this policy
If we make significant changes, we will tell you in the app before they take effect. The date at the top shows when this policy was last updated.
13. Contact us
ROKiT Group
ROKiT House, Kingswood Business Park, Holyhead Road, Albrighton, WV7 3AU, United Kingdom
Email: support@rokit.com