The short version: Jabba has no ads, analytics, or cross-app tracking. It connects directly to the XMPP provider you choose. Nurve’s push gateway receives an Apple push token and an anonymous route—not your messages or XMPP address.
1. Who operates Jabba
Jabba is provided by nurve (“we,” “us,” or “our”) in Australia. Contact us about privacy at support@nurve.co.
2. Information Jabba handles
Account information
You provide an XMPP address and password to sign in. Jabba stores the password in Apple’s Keychain and stores your address, display name, and connection state in its local app container. Your credentials are sent over an encrypted connection to the XMPP server selected by your address. Nurve does not receive your XMPP password.
Messages and social information
Jabba processes message text, contacts, group memberships, presence, reactions, replies, edits, attachments, avatars, and related delivery information to provide messaging. This information is exchanged with your XMPP provider and intended recipients. A local copy of conversation history, contacts, avatars, and downloaded media is stored on your device so the app remains useful while reconnecting or offline.
Photos, camera, and microphone
With your permission, Jabba can access items you select from Photos, take a photo, record a voice note, or save received media to Photos. Selected or recorded content is processed only when you use the related feature and may be uploaded through your XMPP provider’s file service for delivery to recipients.
Diagnostics
Jabba can display connection and capability diagnostics on your device. The app does not automatically send those diagnostics to nurve. If you choose to include diagnostic details in a support email, we use them to answer your request.
3. Your XMPP provider
Your provider is independent from nurve unless explicitly stated otherwise. It may store your account, roster, messages, files, server logs, and other information under its own terms and privacy policy. Jabba cannot control or delete data held by that provider. Ask your provider about its retention, backups, account deletion, and access practices.
4. Push notifications
If push is available, Jabba sends the Apple Push Notification service (APNs) device token and whether the app uses Apple’s development or production environment to the nurve push gateway. The gateway creates an opaque, expiring route which your XMPP server can use to request a content-free wake-up. The gateway does not require your XMPP address or message content.
The gateway stores the token and route information for as long as needed to deliver notifications, until the route expires, is replaced, or Jabba successfully removes it when you sign out. Routine connection metadata such as an IP address and request time may be processed for delivery, security, and reliability. Apple separately processes notification delivery under its own privacy terms.
5. How information is used and shared
Information is used only to connect your account, synchronize and display conversations, transfer media, deliver notifications, maintain security and reliability, and respond when you contact support. We do not sell personal information, show advertising, build advertising profiles, or track you across apps or websites.
Information is shared only with services needed for features you request: your XMPP provider and recipients, your provider’s media upload service, Apple for push delivery and platform functions, and the nurve push gateway for anonymous push routing. We may also disclose information when legally required or necessary to protect users and the service.
6. Retention and deletion
- Signing out deletes your saved password, resumable session, and locally stored push-route secret. Jabba also asks the gateway to remove its route.
- Your locally cached account details, conversations, contacts, and media may remain on the device so they are available if you sign in again. Deleting Jabba from the device removes its local app container in accordance with iOS behavior.
- Signing out or deleting Jabba does not delete your XMPP account or information stored by your provider. Contact the provider for those requests.
- Support emails are retained for as long as reasonably needed to resolve the request, keep support records, and meet legal obligations. You may ask us to delete them.
7. Security and encryption
Jabba requires encrypted network connections to XMPP services, keeps passwords and session secrets in Keychain, and stores app data inside the iOS app group container. No system is completely secure.
Important: Jabba’s current release does not provide end-to-end message encryption. Transport encryption protects data while it travels, but your XMPP provider may be able to access message content. Choose a provider you trust.
8. Your choices
You can deny or later revoke Photos, Camera, Microphone, and Notifications access in iOS Settings; affected features will stop working. Jabba also lets you reduce the detail shown in notification previews. You can sign out to remove credentials and push routing, delete the app to remove local app data, contact your provider about server-side data, or email us about information held by nurve.
9. Children
Jabba is not directed specifically to children under 13, and nurve does not knowingly collect children’s personal information through Jabba. XMPP providers may set their own age requirements.
10. This website
The Jabba website is static and uses no analytics, advertising, or tracking cookies. It stores only your light or dark theme choice in your browser’s local storage. If you email us, your email provider and ours process that correspondence.
11. Changes and contact
We may update this policy as Jabba changes. The effective date above will be revised, and material changes will be communicated where appropriate. Questions, access requests, or deletion requests concerning data held by nurve can be sent to support@nurve.co. For data held by your XMPP provider, contact that provider directly.