Privacy policy

01In short

02Who is responsible for your data

nTher is a product of Spidigo. This policy covers the nTher apps for iPhone, iPad, Mac and Android, the servers they connect to, the sign-in pages we run for organisations (including TheDugout, the sign-in for JFSC), and this website.

Under India's Digital Personal Data Protection Act, 2023, the Data Fiduciary for the personal data described here is:

In this policy, "Spidigo", "we" and "us" mean that company.

When your organisation runs its own server

Some organisations run nTher on a server of their own. For what is stored there, your organisation is the Data Fiduciary, its own privacy notice applies, and its administrators answer your requests; we act for it. We supply the software and its updates, and for such a server we may also:

• hold the key that opens its encrypted backups, so that it can be restored;
• deliver its notifications through Apple and Google with our app's credentials (see Notifications);
• relay its calls through our call relay when a direct connection is not possible (see Calls).

The app's organisation look-up (when you type an organisation code or your email address's domain) asks our servers, and may ask other nTher servers, for that organisation's public details. Only the code, or the part of your email address after the @, is sent.

03Organisations and their own platforms

You use nTher as a member of an organisation: a company, a club or a league. You sign in with the account your organisation gives you, and only people in your organisation can find and message you there. Your organisation decides some things, such as whether its conversations are end-to-end encrypted and which of its services appear in the app.

Encryption depends on the organisation. In an end-to-end encrypted conversation our servers store only data they cannot read. Some organisations use conversations our servers can read, so that search and the assistant work on them. JFSC's conversations on nTher are not end-to-end encrypted. Elsewhere, a group can be created readable by the server, and the app shows which kind each conversation is.

Some organisations keep their own records outside nTher. JFSC's league platform, run by Gullee, keeps JFSC's player records, fixtures, scores and statistics. When you use one of those features in nTher, we pass your request to that platform and its answer back to you. The platform is responsible for its own records under its own privacy notice.

04What we collect, and why

We collect only what nTher needs to work. Everything below is linked to your account. We do not use any of it to track you or to show you advertising.

What we do not collect

• No advertising data, and no tracking across other companies' apps or websites.
• No analytics, crash reporting or log uploads from the apps. If you choose to share crash reports with developers through Apple or Google, they reach us through them.
• No browsing or search history. A search for people or players is answered at once and not kept by us; searching your messages happens on your device.
• No health, fitness or financial data, and no postal address.
• No location in the background, and no upload of your address book.

The basis on which we use it

We use your data with your consent, which you give when you accept the terms of use in the app and, for Aura, when you tap Allow; and without consent only where Indian law allows it, for example to comply with the law or a court order. We use it to provide nTher: to sign you in, deliver and keep your conversations, run the features you use, support you and keep people safe. Beyond that, we use it for two things only: Aura's record, for your organisation's administrators, and improving Aura (see Improving Aura). We never sell your data.

05Aura, the assistant

Aura answers questions about your conversations, summarises them and translates messages. Where your organisation runs a sports platform, Aura can also read your own cricket there and make changes you confirm. Aura acts only when someone asks it. Not every organisation offers it.

• Your permission first. Before your first question, "Before you ask Aura" tells you what is sent. Nothing is sent until you tap Allow. You can withdraw it at any time in Settings › Account and security › Aura.
• What is sent. Your question. For a conversation that is not end-to-end encrypted, up to the last 200 messages of that conversation, with who sent each one and when. For an end-to-end encrypted conversation, only your question. Translating a message sends its text, also from an end-to-end encrypted conversation. With each request go the conversation it is about, whether it is encrypted, and your time zone.
• Conversations Aura belongs to. An organisation can make Aura a member of its group conversations, for example a club's team chats. When any member asks it about one of them, it reads that conversation's recent messages, including yours, to answer. Beyond those conversations, Aura reads only what is sent with a question.
• End-to-end encrypted conversations Aura is admitted to. If a member admits Aura to an end-to-end encrypted conversation, Aura can read that conversation from then on, on our servers, to answer the questions its members ask. The app asks before anyone admits it, and tells the conversation.
• Your phone's contacts, calendar and reminders. On iPhone and iPad, if you allow nTher to use them, Aura reads or adds the entries a request needs, and what it reads is sent with your question. Changes wait for your confirmation.
• Voice notes and meetings. When you ask Aura with your voice, the recording is turned into text on our servers. When you record a meeting with the meeting recorder, the audio is transcribed on your device and uploaded so that Aura can work with it; the audio and transcripts are kept for 30 days. Tell the people in the room before you record them.
• Web searches. When a question needs the web, Aura sends the search words, not your name, to a search provider (Brave, Tavily or Serper). We keep a record of the search, with who asked, for your organisation's administrators.
• Accounts you link. If you link a Google or Microsoft account (for example to work with your mail, calendar or files), Aura reads from it only what a request needs, with the access you granted. You can unlink it at any time, there or in that account's settings.
• On a sports platform. Aura reads your own matches, answers, sizes and squads only when a question needs them, and always as you: it sees exactly what you can see on the platform, and nothing more.
• What is kept. A record of each question you ask is kept under your name: when you asked, the words of your question, what kind of thing you asked for and what Aura did, but never the words of the answer. It is for your organisation's platform administrators only, so they can see how Aura is used. The words of your question are deleted after 90 days. Turning Aura off stops new records; what was already recorded stays until it is deleted.
• Reporting an answer. Where the app offers Report this answer, a report sends your question, the answer and the name of the model that wrote it to the moderators, and is counted in the administrators' usage report.
• Changes need your confirmation. Aura changes nothing on your behalf until you confirm it. Before any change, it shows a card that says exactly what will change. Confirm does it once; Cancel changes nothing.
• Answers can be wrong. Aura's answers are written by a computer. Check anything important before you rely on it.

06Improving Aura

To make Aura better, we keep records of the work Aura does on the servers we run: the request, the steps it took and what its tools returned. They are copied each night to our own computers, kept for 30 days, and used to test and train nTher's own models. They are never sold, never shared outside Spidigo, and never sent to an outside AI company for training. Records from a server an organisation runs itself are not collected.

To opt out, write to support@nther.com from the email address on your account. From then on your requests are left out, and what was already copied is deleted at the next nightly collection.

07The statistics assistant (JFSC)

In JFSC's Cricket › Stats › Ask, a separate statistics assistant answers questions from the league's own records. It is provided by JFSC's league platform, not by Aura.

Your question, and up to five of your earlier questions and answers, go through our servers to JFSC's league platform, run by Gullee, with your sign-in ID. Our servers record that a question was sent, its kind and its length, never its words. The first time you ask, the app tells you: "Your question is sent to the league's stats service." The league's platform handles your question under its own privacy notice.

08Claude, in a few named places

Claude is an AI assistant made by Anthropic. Claude reads messages or requests only in these places:

• Our reports conversation, where @bug and @idea reports are filed. The app tells you before you file one that Claude may read it there.
• A few conversations where an organisation has added a Claude-based assistant. It takes part there as a named member, and can read the conversation, including one that is end-to-end encrypted if its members admitted it.
• Complex tasks, where your organisation's plan includes them. Aura may hand such a task to Claude: the request and the material it needs are then sent to Anthropic.

When Claude reads messages in those places, they are sent to Anthropic's servers, outside ours, with who sent each one and when, so that Claude can answer. Anthropic handles them under its own terms.

09Notifications

To notify you, the app registers a token that Apple (iPhone, iPad and Mac) or Google (Firebase Cloud Messaging, on Android) issues for your device with our server, together with the app's name, your language and your account ID. Our server hands each notification to Apple or Google to deliver.

• For an end-to-end encrypted conversation, the notification carries only encrypted data, which your device decrypts.
• For a conversation that is not end-to-end encrypted, the notification may carry the message's text, which then passes through Apple's or Google's service.

The token is removed when you sign out, remove the profile or delete your account.

10Calls

Calls in most organisations go through a media server run by us or by your organisation; otherwise they go directly between the two devices, or through our call relay when the network needs one. Every call is encrypted in transit. In an end-to-end encrypted conversation the call is encrypted so that the server cannot read it; in other conversations the server that carries it could. Our servers keep the history of calls: who called whom, and when.

• Recording. Where an organisation turns recording on, the person who started a call can record it. Everyone in the call sees "This call is being recorded" and who started it, for as long as it records; anyone who does not want to be recorded can leave. Calls in end-to-end encrypted conversations are never recorded. A recording is kept on the server that carried the call, and in its backups, until the organisation deletes it.
• Guests. Someone without an account can join a call from a link in a web browser, with the name they type, their camera and their microphone.

11Who else receives your data

Service providers handle your data only to provide their service to us. Some of them (Apple, Google, Microsoft, Cloudflare, Amazon, Vultr, Anthropic and the search providers) may process it outside India.

12How long we keep it

• Your account: until you delete it.
• Messages: until their sender deletes them, the conversation's own time limit removes them, or the account is deleted. Messages already delivered to other people stay in their copies.
• Photos, videos and files: they stay on our servers when the message that carried them, or your account, is deleted. You can ask us to erase them (see your rights).
• The words of your questions to Aura: deleted after 90 days.
• Records used to improve Aura: 30 days.
• Meeting recordings and voice-note transcripts: 30 days.
• Call recordings: until the organisation deletes them.
• Files in Cabinet: until they are deleted; a deleted file stays in Cabinet's Bin, where it can be restored, until the Bin is emptied.
• Internet addresses: 28 days of history; the latest address of each signed-in device is kept until that device signs out.
• Notification tokens: until you sign out, remove the profile or delete the account.
• Reports: as long as we need to act on them, or as the law requires.
• Backups of our servers, and of servers we back up for an organisation: at most 360 days, then destroyed. Until then they hold copies of what is described here, including things already deleted from the live servers.
• Records the law requires us to keep: for the period it requires.

13Deleting your account

You can delete your account in the app: Settings › Account and security › Delete account. Delete your account explains what is deleted and what is kept, including for a JFSC account, and how to ask us without the app.

14Your rights

Under the Digital Personal Data Protection Act, 2023 you may:

• ask for a summary of the personal data we hold about you, how we use it, and who we have shared it with;
• ask us to correct, complete, update or erase it;
• withdraw your consent, as easily as you gave it. Withdrawing your consent to Aura (in Settings › Account and security › Aura) stops Aura; withdrawing your consent to nTher as a whole means deleting your account;
• nominate someone to use these rights for you if you die or cannot act;
• complain to our Grievance Officer and, if you are not satisfied with the answer, to the Data Protection Board of India.

Write to support@nther.com or to the Grievance Officer, from the email address or phone number on your account; we may ask you to confirm that the request is yours. We answer within 90 days, and sooner where we can. You can also save a copy of a conversation yourself: in the conversation's details, choose Export this conversation.

You can ask for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India.

15Children

nTher is only for people aged 18 and over. The app asks each person to confirm it before they can send anything, and TheDugout asks it at registration. If we learn that someone under 18 has an account, we delete it. Our child safety standards say how we act against child sexual abuse and exploitation.

16Security

Every connection between the app and our servers is encrypted. Conversations are end-to-end encrypted where your organisation uses them, and only their members can read them. If you turn on Secure Backup, your message keys are stored on our servers encrypted with a recovery key only you hold. If a breach of personal data affects you, we will tell you and the Data Protection Board of India, as the law requires: what happened, what it may mean for you, what we have done and whom to contact.

17This website

nther.com is hosted by Hostinger. These pages use no cookies, run no scripts and contain no trackers. Like any web host, Hostinger records the internet address that asks for a page, and which page.

18Changes to this policy

When we change this policy, we change the date at the top. If a change matters to how your data is used, we tell you in the app before it takes effect.

19Grievance Officer and contact

We acknowledge a complaint within 24 hours and resolve it within 15 days; a request under the Digital Personal Data Protection Act is answered within 90 days at most. For anything else, write to support@nther.com.