Nygma Privacy Policy

This Privacy Policy explains how Genie9 LTD ("Genie9", "we", "us") handles personal data when you use Nygma on the web (nygma.genie9.com), on Android and on iOS, including Nygma Chat (the "Service"). Genie9 LTD is the data controller.

• • Account details: your name and email address. If you use Sign in with Google or Sign in with Apple, we receive your name and email (or Apple's relay address) from them.
• • Drive names: the names you give your drives are stored readable on our servers, so choose names you are comfortable with.
• • Messages to us: what you send to support, privacy or abuse addresses, including abuse reports.

• • Your encrypted files and the encrypted data that describes them (we cannot read either)
• • File and folder counts, sizes and dates; drive settings such as the encryption type; share-link records (not their passwords)
• • Your plan, subscription and purchase records from Google Play, the App Store or Stripe
• • Security settings such as two-factor authentication, and sign-in and session records
• • Device push tokens used to deliver notifications

• • IP address, browser or device type, operating system, app version and the time of each request, in our server logs and with your sign-in sessions
• • Website analytics through Google Tag Manager and Google Analytics — see the Cookie Policy for what is used, where it is off by default and how to opt out
• • In the mobile apps, usage analytics and crash reports through Google Firebase Analytics and Crashlytics, which you can switch off in the app

Nygma Chat lets you exchange messages, photos, videos, files, voice messages and your location with people you invite. Everything you send is encrypted on your phone and can be decrypted only on the phone of the person you are chatting with. The keys never leave your devices. We cannot read your chats, and neither can anyone who gains access to our servers. We do not scan chats.

• • Your messages, photos, videos, files, voice messages and shared locations, stored encrypted and opened with your Chats PIN
• • The names you and your contacts choose to show each other — Nygma does not check them and does not read your address book
• • If you set a disappearing-message timer, messages are deleted from both phones when it runs out

Our database does not link your account to your chat mailboxes, and we keep no list of who you chat with. Chat requests reach our servers with your IP address, like any request.

• • When a message arrives, our server asks Google Firebase Cloud Messaging (and, for iPhone, Apple's push service) to wake the app. The notification carries no content, sender or chat name — only "New activity".
• • Location is read only when you tap Share location — one reading, while the app is open — and is sent end-to-end encrypted. Nygma never tracks your location in the background.
• • Voice messages are recorded only while you hold the record button.
• • Only the photos, videos and files you choose are encrypted and sent.

Blocking a contact deletes the chat from your phone and closes its mailboxes on our servers; the other person is not told. Report a problem sends a report from inside the app: a reason, an optional note and a reference to the reported chat (an identifier our servers already hold, never your email address); recent messages are included only if you switch that on for the report. Reports are stored on our servers and sent to abuse@genie9.com. A report is the only way we see any chat content, and only the part you send us. We use reports to investigate abuse and enforce our Terms, and we keep them for up to 2 years, or longer where the law requires.

We do not make decisions with legal or similarly significant effects about you by automated means alone.

These providers process data for us under contract:

Google, Apple and Stripe also act as independent controllers for their own services (for example store purchases); their privacy policies apply to that. See Third-Party Services.

• • When you ask us to — for example, a share link gives its recipients what you shared
• • When the law requires it, or to protect the rights, safety or property of Genie9, our users or others (Section 7)
• • To a buyer or successor if Genie9 or Nygma is reorganised, merged or sold

We respond to requests that are valid under the law that applies to us, and we may refuse or narrow requests we consider unlawful or too broad. Unless the law prohibits it, we may tell affected users. See the Transparency Report.

We can provide only what we hold: account details (name, email, dates), drive names, storage and billing records, sign-in and IP records within their retention period, and for chat at most the short-lived delivery data in Section 4.3. We cannot provide the content of files or chats, file names, passwords or keys, because we never have them.

Our servers are in the United States (Amazon Web Services, US East). Our service providers may also process data in other countries.

Transfers from the UK and the EEA rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, or on the UK–US data bridge and the EU–US Data Privacy Framework where a provider is certified.

• • Account data, drive names and encrypted files: while your account exists
• • Files in Trash: deleted automatically after 30 days
• • Chat data on our servers: as set out in Section 4.3
• • Server logs (IP address, device type, time): up to 90 days; IP and device details stored with sign-in sessions, security events and drive activity: while your account (or that drive) exists
• • Billing records: as long as tax law requires (in the UK, 6 years)
• • Abuse reports: up to 2 years, or longer where the law requires
• • Analytics: according to the retention settings of Google Analytics and Firebase

You can delete your account in the app (Settings → Delete account) or at nygma.genie9.com/delete-account. We then delete your account data and encrypted files from our live systems. Copies in our backups are overwritten as the backups roll over, and we keep only what the law requires us to keep (such as billing records). Time Bomb, if you switch it on, deletes your drives and files after the inactivity period you chose; they are then removed from storage by the 30-day Trash clean-up.

Besides end-to-end encryption, we use TLS in transit, encryption at rest for stored files, access controls and logging, and rate limits on sign-in and other sensitive actions. No system is perfectly secure, and we cannot guarantee that unauthorised access will never happen.

If a personal data breach is likely to result in a high risk to you, we will tell you without undue delay, and we will notify the regulator where the law requires.

Depending on where you live, you can ask for access to, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent at any time. Most of this you can do yourself in the app — including downloading your files and deleting your account. Because of end-to-end encryption, we cannot access or export the content of your files or chats for you.

If you live in a US state with a consumer privacy law (such as California), you can ask to know, correct or delete the personal data we hold about you. We do not sell personal data for money. Some public pages of our website use Google advertising and analytics cookies, which California law may treat as "sharing"; the Cookie Policy explains how to opt out. The signed-in Nygma dashboard and share pages send no advertising signals.

Email privacy@genie9.com from the address on your account. We may need to verify your identity. We answer within one month, or longer where the law allows for complex requests. You can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Nygma, including Nygma Chat, is only for people aged 16 and over. We do not knowingly collect personal data from anyone under 16; if we learn we have, we will close the account and delete it. See our Child Safety Standards.

The website and web app use essential cookies and storage to keep you signed in and secure, and Google analytics cookies as described in the Cookie Policy. See the Cookie Policy.

We may update this Policy at any time by publishing a new version here. If a change materially affects how we use your personal data, we will also tell you by email or in the app before it applies.