Law enforcement requests
How we respond when police or a government agency asks for information about someone who uses Nampa.
The short version: we need valid legal process, we push back on requests that go too far, we tell people when we're allowed to, and there's very little to hand over because notes end.
What we have
- Account details: phone number, name, photo, date of birth and when the account was created.
- Invite records: who invited the account and who it invited.
- Delivery records for the last 30 days: who sent a note to whom and when, without any audio.
- Device details: app version, operating system and notification token.
What we don't have
- Notes that have ended. The audio and its key are deleted, and they can't be recovered from backups.
- Transcripts, because nothing is ever transcribed.
- Location history, address books or browsing history.
Notes and keys
A note only exists until it has been heard and replayed once, or for 24 hours if it isn't played. During that time we hold encrypted audio and, separately, its key. We will not build tools to decrypt notes for anyone, and we will not secretly keep notes past their end or switch off deletion for an investigation.
What we need from you
- A request in writing, from an official address, sent to hello@nampa.app.
- Valid legal process from an authority with jurisdiction over Nampa. A subpoena or court order for basic account details, and a search warrant for anything more.
- Requests from outside the country where Nampa is based should come through a mutual legal assistance treaty or another process recognised there.
We read every request, and we push back on requests that are unclear, too broad or not legally valid.
Preservation requests
We can preserve account, invite and delivery records for 90 days while you obtain legal process. A preservation request can't cover note audio, because notes end and our system isn't built to keep them.
Emergencies
If someone's life is in danger or they face serious injury, we may share limited information without legal process. A person reviews every emergency request, and we only share what the emergency needs.
Telling the person
We tell people before we share their information, unless the law forbids it or it's an emergency. If we're told to stay quiet, we'll tell them once that ends.
Transparency
Once a year we'll publish how many requests we received, where they came from and how we responded.
Questions
Write to hello@nampa.app. A person reads every message.