NOID Privacy Notice

Scope and roles

AIEng / NOID publishes the aieng.co.za website and operates the NOID service described on it. This notice applies to public website visits, client registration, communication routing, account access, device records, feedback, diagnostics, Rewards and optional features such as location sharing.

Third-party services have their own privacy responsibilities. A browser, operating system, internet provider, map provider, payment destination or advertising vendor can process information under its own terms. Links to an external site do not make that site part of NOID.

Information the service may process

• Account information: NOID address, chosen alias, PIN verifier, account status, settings and security events.
• Installation information: device credential, installation identifier source, client version, platform, operating-system or browser details and compatibility state.
• Operational communication metadata: participating NOID addresses, timestamps, direction, message type, delivery state, call duration, attachment size or type and connection measurements.
• Support information: feedback category, user-supplied description, diagnostic context and the account identity used to submit a private request.
• Rewards information: eligible client state, qualifying activity, unique-recipient checks, pending and available entries, anti-abuse signals and payment status.
• Public website information: request time, IP address, user-agent, requested URL, security logs, consent choices and advertising or aggregate measurement events.

Encrypted message text and attachment contents are not presented in the relay administrator message register. A recipient can, however, see content intentionally sent to that recipient, and a user can choose to include information in a support request.

Why information is used

Information is processed to authenticate installations, allocate and maintain NOID addresses, route calls and messages, show account activity, manage aliases and settings, retry delivery, prevent abuse, diagnose failures, respond to support, verify Rewards, secure the service, maintain records and comply with applicable obligations.

Public website data supports delivery of pages, security, consent management, aggregate performance measurement and advertising on eligible content. NOID does not describe private conversation content as advertising inventory.

Where processing depends on consent, the relevant choice can be declined or withdrawn through the available browser, device or consent controls. Some service functions cannot work without the operational information needed to perform them.

Optional permissions and location

Microphone access is requested for a call. File access is requested when a user selects an attachment. Location is requested only when a user opens a feature that needs a position, such as location sharing, GPS messaging, tracking or geofencing.

The browser or operating system controls the protected permission prompt. A user can deny access or later withdraw it in device settings. A position intentionally shared with a selected recipient can be read by that recipient. Saved boundaries or tracking events can also create operational records needed to deliver the chosen feature.

Google advertising, identifiers and consent

Eligible public information pages may use Google AdSense. Google and other third-party vendors may place or read cookies, use web beacons, process IP addresses or use other identifiers to serve, limit, personalise and measure advertisements. Advertising cookies can reflect visits to this website and other websites where permitted.

On phones, AdSense is limited to these responsive public pages when they are viewed in a normal web browser. The installed NOID progressive web app uses a standalone application window and is centred on private calls, messages and account tools, so it does not load AdSense or create advertising requests.

Where law or Google policy requires consent, the AdSense account must publish a Google-certified consent-management message and identify the configured advertising partners. A visitor can choose the options presented for the relevant region and can also manage personalised advertising through Google Ads Settings.

Google explains how it uses information from sites and apps that use its services at How Google uses information from sites or apps that use its services. Its advertising technologies are described at Google advertising policies and technologies.

Ad code is excluded from the installed NOID PWA and from login, PIN entry, account, administration, private support, calls, private messaging, phonebook, music playback, Settings, downloads, permission prompts and error screens. The separate Advertising Standards explain placement and invalid-traffic rules.

When information may be shared

Information can be processed by infrastructure, security, analytics, consent, advertising or payment providers that help deliver the relevant function; by the selected NOID recipient when a user communicates or shares a location; or when disclosure is reasonably necessary to protect users, investigate abuse, operate the service or comply with a valid legal obligation.

NOID does not sell private message text or attachment contents as advertising data. Advertising vendors can still receive information associated with a visit to an eligible public page as described above.

Retention and security

Records are kept for as long as reasonably necessary for the purpose that created them, security, fraud prevention, service reliability, dispute handling and applicable legal obligations. Retention differs by record type: a short-lived connection event, device registry entry, support request and verified reward ledger serve different needs.

Reasonable technical and organisational safeguards are used, including protected credentials, limited administrative access, authentication controls, security headers and separation of private utility pages from public advertising pages. No connected service can guarantee absolute security.

User choices and requests

Users can control browser cookies, advertising preferences, device permissions, locally stored site data and the information they choose to send. Deleting browser storage can also remove the local NOID installation credential and may require registration or recovery.

Depending on applicable law and the nature of the record, a person may request access, correction, deletion, restriction or an explanation of information associated with that person. NOID may need to verify the account and authority before changing or disclosing records, and some information can be retained where required for security, disputes or legal duties.

A person can follow the public account-deletion instructions and submit an external request through Contact. Registered users can otherwise sign in and use Contact AIEng so a request carries verified account context.

General audience and children

The public NOID documentation and communication service are intended for a general audience and are not designed as a child-directed service. A person who cannot lawfully agree to the Terms and privacy choices should use the service only with the involvement and permission required by applicable law.

Advertising is not intentionally placed on school or child-directed content. If NOID later introduces a specifically child-directed area, it must use separate audience, consent and advertising safeguards before publication.

Changes and contact

This notice can change when the service, vendors, law or data practices change. The effective date is updated when material revisions are published. Earlier operational records remain governed by the notice and law applicable to their processing.