MeXun ("MeXun," "we," "us," or "our") is operated by NOKU LLC. This Policy explains how we process personal information when we provide our instant-messaging service. MeXun provides account registration and sign-in, text and media messages, file transfer, friends and groups, voice and video calls, notification alerts, and optional external-platform links in Discover.
For questions about this Policy or our processing of personal information, contact admin@nokuinc.com.
1. Information We Process
1.1 Account and Sign-In Information
To create and protect an account, we process your username, display name, verified email address, securely protected password credentials, account-creation time, account status, and sign-in session information. We use the email address for verification codes during registration, password recovery, and email-address changes, and as a password sign-in identifier. Accounts registered before September 12, 2026 may still retain their previously SMS-verified telephone number and country or region code as historical account data; those details are no longer used for registration, sign-in, password recovery, verification codes, or message and incoming-call reminders.
1.2 Profile, Contacts, and Relationship Information
When you choose to configure or use the relevant features, we process your avatar, profile information, friend requests and friend relationships, group-membership relationships, remarks, block list, account-searchability setting, and message delivery, read, and unread status.
1.3 Communications Content and Call Information
Messages and attachments that support end-to-end encryption are encrypted on the device before transmission and storage. To deliver, synchronize, and securely operate the service, we process encrypted message or attachment data and necessary technical metadata, such as conversation, sender and recipient, time, sequence, delivery, read, recall, and disappearing-message status.
When you make or receive a voice or video call, we process call type, start and end times, connected, unanswered, or connection-failed status, conversation identifier, and the real-time transmission technical data needed to establish and maintain the call. MeXun does not provide platform-side call recording. End-to-end encryption cannot prevent a chat participant from taking screenshots, recording a screen, retelling, forwarding, or retaining content on that participant's device.
1.4 Images, Videos, Voice Messages, and Files
When you choose to send or upload media, an avatar, or a file, we process the applicable file, file name, content type, size, upload status, and thumbnails or derivative files needed for display. Chat attachments are encrypted on the device only in conversations that support end-to-end encryption. Public-profile materials, such as avatars, are not end-to-end encrypted chat content.
1.5 Device, Network, and Security Information
As needed for sign-in, device management, encryption-key management, notification delivery, and abuse prevention, we process device identifiers, device name, operating system or platform, app version, device encryption public key, sign-in and session status, notification token, notification-permission status, network connection status, and necessary security logs. We may process IP addresses or request logs for rate limiting, troubleshooting, abuse prevention, and service security.
1.6 Permissions and Feature Data
MeXun processes the following information only when you use the relevant feature and the operating system grants the required permission:
- Camera: to take photos or videos, or to make video calls;
- Microphone: to send voice messages or make voice or video calls;
- Photo library or local files: to select, send, or save media and files;
- Location: only when an external platform in Discover requests location and you authorize it, to provide that platform's location feature; and
- Notifications: to display alerts for new messages, friend requests, and incoming calls.
Declining a non-essential permission does not prevent you from using features that do not depend on that permission, although the related feature may be unavailable. You may change permissions at any time in your system settings.
1.7 Support and Feedback Information
When you email us, submit a complaint, make a deletion request, or provide other feedback, we process the contact details, account-identifying information, description of the issue, and necessary communications records that you voluntarily provide in order to respond to and process your request. Reports retain the reporting and reported account identifiers, reason, image evidence you deliberately select, explanation, and handling records. Authorized support or administrative personnel may review this submitted evidence to handle the complaint; we do not automatically read, copy, or decrypt other private conversations. Submit only information necessary to address the issue.
2. How We Use Information
We process the information above only to provide account, communications, file, friend, group, call, and notification services; complete email verification and account registration; protect accounts and encryption keys; prevent fraud, abuse, spam, and security incidents; diagnose faults and improve reliability; comply with legal obligations; and handle a data-access, deletion, or support request you make.
We do not sell personal information or use personal information for advertising-related cross-app or cross-site tracking.
3. Information Sharing and Third-Party Services
We share or disclose information only as necessary in the following circumstances:
- Recipients and group members you choose. Information, avatars, messages, attachments, call invitations, and associated status that you send are displayed to the applicable recipients or group members as required by the feature.
- Service providers. We may use an email service provider to deliver email verification codes and account email-change security alerts, providing only the minimum data required for delivery, but not message or incoming-call email reminders. Apple standard APNs, Google Firebase Cloud Messaging (FCM), or MeXun's self-hosted real-time connection and Android system notifications may help deliver notifications according to the capability actually available on the device. MeXun does not use Huawei, HONOR, Xiaomi, OPPO, vivo, or other device-manufacturer push services as a production alert channel. These services process only the minimum technical data needed for delivery, such as a device notification token.
- Infrastructure and real-time communications services. We use servers, object storage, databases, caches, and real-time audio/video infrastructure to process service data.
- External platforms in Discover. After you voluntarily open an external platform, that platform processes information that you provide to it directly under its own rules. MeXun does not provide an external platform with your MeXun sign-in token, chat content, contacts, call information, or notification credentials. If you voluntarily use its photo-selection or location feature, related data is provided only to the extent you authorize.
- Legal and security needs. We may disclose relevant information where required by law or where necessary to protect user safety, investigate abuse, or maintain service security.
We require service providers that process personal information on our behalf to process it only as necessary to provide their services and to apply protections appropriate to their role.
4. Server Locations and Cross-Border Processing
MeXun's core business database and services are deployed in the United States. To improve network access for users in mainland China, mainland-China devices may connect to the same business system through a Hong Kong entry point, and the Hong Kong node may carry real-time audio/video services. Accordingly, information may be transferred to, stored in, or processed in the United States and Hong Kong. We use safeguards including encryption in transit, access controls, separate deployment, and least-privilege measures to protect information.
Where applicable law requires additional notice, consent, or other safeguards before cross-border processing, we will handle the matter as required by applicable law.
5. Retention and Deletion
We retain information for the period necessary to achieve the purposes described in this Policy, maintain accounts and conversations, protect security, or comply with legal obligations. Verification codes are valid for ten minutes and are not stored in plaintext.
After account deletion is completed, we immediately invalidate all signed-in devices and sessions; delete or de-identify directly identifying account information, communication relationships, message content sent by the account, and media-access records; and make media uploaded by the account no longer accessible through the service. To preserve conversation ordering for other participants, prevent fraud, protect service security, or comply with legal obligations, we may retain technical records that do not contain directly identifying information, de-identified records, or legally required retained material for the necessary period. Copies another user has lawfully saved to that user's device or retained outside the service are outside our control.
You may initiate permanent deletion in the app through Me → Delete Account, or visit https://mexun.com/legal/delete-account for an external deletion-request method. See the MeXun Account and Data Deletion Notice for details.
6. Your Choices and Rights
To the extent provided by applicable law, you may request access, correction, deletion, restriction of processing, withdrawal of consent, or a portable copy of data. You may also manage your profile, account-searchability setting, block list, notifications, and system permissions. You may make a request through the app's settings or by emailing admin@nokuinc.com. To protect account security, we may ask you to verify your identity through your verified email address, sign-in status, or another reasonable method.
7. Security Measures
We use safeguards including encryption in transit, password hashing, device and key management, end-to-end encryption capabilities, access controls, least privilege, rate limiting, and security auditing. No network or storage system can guarantee absolute security. Please protect your password, device, and verification codes, and do not disclose sign-in or recovery information to others.
8. Minors
MeXun is not directed to minors who may not independently use online services without a guardian's consent under applicable law. Minors should use the service with a guardian's consent and guidance. If you believe we have processed a minor's personal information without appropriate authorization, contact admin@nokuinc.com and we will address the matter as required by law.
9. Updates to This Policy
We may update this Policy because of feature, legal, or security requirements. For material changes, the app will require you to review and agree before continuing to use the service. The current effective version is published at https://mexun.com/legal/privacy, and historical versions are retained for audit.