1. Controller and scope
Controller: Jonathan Amsellem, sole trader (entrepreneur individuel, EI), 124 boulevard de Rochechouart, 75018 Paris, France. Contact: contact@nocha.world. This policy covers the official hosted Outirl service; a self-hosted operator is a separate controller for its deployment.
2. Data processed
Watchirl privately stores the declared birth date, its origin and declaration time; a legacy migration default is not age evidence. The date is excluded from public profiles, payment metadata, logs and experience SDKs. Payment references, currencies, amounts and accepted terms are recorded for billing. Stripe, RevenueCat, Apple and Google receive only the information needed for their payment channel. Project contents remain on the selected Host unless you explicitly invoke an AI feature that submits bounded evidence, prompts, captures, or audio.
- Account and authentication data
- Host, project, session and device metadata
- Purchases, subscriptions and credit movements
- Support messages
- Data submitted to an AI feature you invoke
3. Purposes and legal bases
Processing is limited to delivering, securing, supporting, and improving requested service functions.
- Operate accounts, synchronization and remote access
- Process purchases and keep the shared credit balance
- Secure and support the service
- Run features explicitly requested by the user
- Performance of the service contract
- Legitimate interests in security and reliability
- Legal, accounting and tax obligations
- Consent where required
4. Local and synchronized boundaries
Files, PTYs, tmux, Git, and native operations remain on the execution Host. The control plane synchronizes account, Host, project, session, setting, access, and routing state. Mac peer traffic is end-to-end encrypted; Linux Host traffic uses a TLS relay visible to the control plane.
- SQLite replica on desktop
- macOS Keychain for durable secrets
- IndexedDB for browser replica and non-extractable peer keys
- localStorage/sessionStorage for functional interface state
5. Recipients and providers
Data is disclosed only to operate a requested feature, secure the service, comply with law, or follow your instruction. AI features run through Watchirl, which forwards each request to the AI provider that serves it. Outirl does not sell personal data or create advertising profiles.
- Hetzner Online GmbH: production hosting
- Watchirl: shared identity, credit balance, billing and access to AI providers for Outirl, Nocha and Tripirl
- AI providers selected by Watchirl, only for an AI feature you invoke
- Stripe: web payments; Apple, Google and RevenueCat where in-app purchases are offered
- Email delivery used by Watchirl for account messages
6. International transfers
An infrastructure or AI provider may process data outside the EEA under an adequacy decision, standard contractual clauses, or another valid safeguard. No processing location is announced until it is verified.
7. Retention
Backups and security evidence can remain for a limited additional period when required for restoration, abuse prevention, legal claims, or law.
- Account and synchronized state: while active, then for the limited period required for deletion, security or law
- Purchase and accounting records: for the period the law requires
- Authentication session: up to 30 days of inactivity
- Socket tickets: about 15 seconds; pairing offers: about 2 minutes; signaling messages: about 5 minutes
- Local files and device stores: until removed on that device
8. Rights and contact
You may have rights to access, correct, delete, restrict, object, export, or withdraw consent. See Data Rights or contact contact@nocha.world. You may complain to your competent supervisory authority, including the CNIL in France.