Nygma Privacy Policy

• Account details: your name and email address. If you use Sign in with Google or Sign in with Apple, we receive your name and email (or Apple’s relay address) from them. For Apple we also keep a token, encrypted, used only to disconnect Apple when you delete your account.
• Drive names: the names you give your drives are stored readable on our servers, so choose names you are comfortable with.
• Messages to us: what you send to our support, privacy, legal or abuse addresses, and in-app chat reports.
• Feedback: when you answer “Do you like Nygma?” or use Send feedback — your rating, your words and, only if you switch it on, the app’s diagnostic log. It is linked to your account when you are signed in.
• Problem reports: when you use Report a problem — what you describe and the app’s diagnostic log (app version, device type, recent errors and timings), with names, email addresses, file names and keys removed on your device before it is sent. Each report gets a reference code.

• Your encrypted files and the encrypted data that describes them (we cannot read either)
• File and folder counts, sizes and dates; how items are arranged in folders (not their names); whether an item is in Trash or a favourite; drive settings such as the encryption type, whether a drive has a PIN or recovery phrase, and which drive is a Duress mode decoy
• Activity records, such as when a drive is unlocked and when files are added, moved or deleted, with IP address and device details
• Share-link records: that a link exists, when it expires and how often it was opened (never its password)
• Your plan, subscription and purchase records from Google Play, the App Store or Stripe, including any offer used
• Security settings such as two-factor authentication, and sign-in and session records
• Device push tokens, registered with your account together with the device’s platform, language, country or region and app version
• Your “Offers & news” choice, and which Nygma messages you have seen, opened, tapped or removed in the app
• Records of actions we take on your account, such as a suspension, with the reason and the date

• IP address, browser or device type, operating system, app version and the time of each request, in our server logs and with your sign-in sessions
• The country of your IP address when you sign up, looked up on our own server (section 7.2)
• In the mobile apps, usage analytics and crash reports through Google Firebase Analytics and Crashlytics. Both are on by default and you can switch them off in the app’s Settings.
• On the website and web app, analytics through Google Tag Manager and Google Analytics, as described in section 14

Messages, photos, videos, files, voice messages and locations are encrypted on your phone and can be decrypted only on the phone of the person you are chatting with. The same applies to reactions, edits, “Delete for everyone” requests and “Protect this chat” settings. We cannot read your chats, and we do not scan them.

• Your chats, stored encrypted and opened with your Chats PIN (and, if you chose it, your drive password)
• The names you and your contacts choose to show each other — Nygma does not check them and does not read your address book

Our database does not link your account to your chat mailboxes, and we keep no list of who you chat with. Chat requests reach our servers with your IP address, like any request. The same push token is also registered with your account for Nygma notifications (section 6), so our servers could in principle connect your account to the chat mailboxes that wake that phone. We do not use it that way and keep no record linking the two.

• When a message arrives, our server asks Google Firebase Cloud Messaging (and Apple’s push service for iPhone) to wake the app. The notification carries no content, sender or chat name.
• Location is read only when you tap Share location — one reading, while the app is open. Nygma never tracks your location in the background.
• Voice messages are recorded only while you record. Only the photos, videos and files you choose are sent.

Report a problem in a chat sends us a reason, an optional note and a reference to the chat (an identifier our servers already hold); recent messages are included only if you switch that on. A report is the only way we see any chat content, and only what you send. Reports go to abuse@genie9.com and are kept for up to 2 years, or longer where the law requires.

These companies process data for us under contract. None of them receive your files, file names, thumbnails, passwords, PINs, recovery phrases or chat messages in readable form.

Google, Apple and Stripe also act as independent controllers for their own services (for example store purchases and sign-in), and their privacy policies apply to that. When you upload a video in the web app, your browser may download the open-source FFmpeg library from a public code network (unpkg or jsDelivr), which sees your IP address but not your files. We may add or replace providers; we will update this list when we do.

• When you ask us to — for example, a share link gives its recipients what you shared
• When the law requires it, or to protect the rights, safety or property of Genie9, our users or others — see “Requests from authorities” in the Security & Zero-Knowledge Statement
• To a buyer or successor if Genie9 or Nygma is reorganised, merged or sold

You can ask for access to, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests (including emails about news and offers), and withdraw consent at any time. Most of this you can do yourself — download your files, change your settings, unsubscribe, or delete your account. Because of end-to-end encryption, we cannot access or export the content of your files or chats for you.

If you live in a US state with a consumer privacy law (such as California), you can ask to know, correct or delete the personal data we hold about you, and you will not be treated differently for asking. In the last 12 months we collected identifiers (name, email, IP address, device and push identifiers), commercial information (plan and purchases), internet activity (server logs, app and website analytics) and approximate location (country). We do not sell personal data for money and we do not use sensitive personal data to infer things about you. Some public pages of our website use Google advertising and analytics cookies, which California law may treat as “sharing”; section 14 explains how to opt out. The signed-in web app and share-link pages send no advertising signals.

Wherever you live, you can ask us what we hold about you and ask us to correct or delete it, and we will apply the rights your local law gives you.

Email privacy@genie9.com from the address on your account. We may need to verify your identity. We answer within one month, or longer where the law allows for complex requests. You can complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

We use cookies and browser storage on nygma.genie9.com and on share-link pages. Strictly necessary ones keep you signed in, keep an unlocked drive open, and protect against attacks; they need no consent. Preference ones remember choices such as the app design you prefer. Our cookies never contain your passwords, recovery phrases, keys or file names, and are sent only over HTTPS.

• We use Google Consent Mode. If your device’s time zone or language shows you are in the UK or elsewhere in Europe, analytics and advertising cookies stay off. Elsewhere, analytics cookies are on.
• Inside the signed-in web app and on share-link pages, advertising signals are off. On our other web pages, Google tags may use advertising cookies to measure our own advertising.
• You can block or delete cookies in your browser at any time, or install Google’s opt-out add-on (tools.google.com/dlpage/gaoptout). Blocking strictly necessary cookies stops you signing in on the web.
• Stripe’s checkout and the Google and Apple sign-in pages use their own cookies under their own policies.

The Android and iOS apps do not use browser cookies. They use Firebase Analytics and Crashlytics as described in section 2.3, which you can switch off in Settings.