Group Chat Privacy
When Nora joins a group chat, here’s exactly what happens with your data.
How Nora activates
Nora only becomes active in a group when a subscriber explicitly mentions her by name. She confirms with a short message and stays quiet unless spoken to. Nora never auto-joins or listens silently.
What we process
- Text messages in the group — read for conversational context when Nora is active. A rolling buffer of recent messages is kept in memory (not persisted to disk). The buffer clears when the server restarts.
- Group decisions and reminders — stored in our database when someone explicitly asks Nora to remember something or set a reminder for the group.
What we don’t process
- Voice messages from non-subscribers are never transcribed.
- Images from non-subscribers are never processed.
- Personal data (calendar, email, contacts, notes) is never loaded into group context by default. Subscribers can request their own data explicitly.
Non-subscriber privacy
If you’re in a group with Nora but don’t have a Nora account:
- Your phone number is anonymized before it reaches our AI model. You appear as “Person A”, “Person B”, etc.
- Your messages are read for context only — so Nora can follow the conversation — but are not stored permanently.
- You can use group-level features (ask questions, set group reminders) but have no access to personal tools.
- Say “Nora stop” at any time and your messages will be excluded from the buffer going forward. Immediate, no questions asked.
Legal basis
We process group chat data under legitimate interest (GDPR Article 6(1)(f)) — providing group coordination features requested by a subscriber. This is balanced by:
- Data minimization (text only, anonymized identifiers)
- No persistent storage of non-subscriber data
- Easy opt-out (“Nora stop”)
- Transparency at activation (this page)
Your rights
Under GDPR, you have the right to access, correct, or delete your data. Non-subscribers can opt out instantly via “Nora stop”. Subscribers can deactivate Nora in any group via DM. For any data requests, contact privacy@nora.fyi.
You can also lodge a complaint with your national data protection authority. In Norway: Datatilsynet.
Who we are
Nora is operated by Nucleon AS. See our full privacy policy for complete details about how we handle data across all Nora services.