Privacy Policy

In effect since 11 October 2026

Numa is a personal AI assistant. To remember your context and get things done for you, Numa has to keep some of your data. This page explains which data, what it is used for, and what you can do about it.

Data we keep

Account. You sign in with Google. From Google we receive your name, your verified email address and your profile picture.

What you write and send to Numa. The conversation, the pictures you send, and the text of files you attach. The file itself is not stored on the server: your phone turns it into text first, and only that text is kept. The file itself is sent only when you ask for and approve its upload to your own Google Drive, and it is then passed straight on to Drive without being kept.

What Numa keeps for you. Memories (things Numa remembers about you), goals and habits, reminders, to-dos, tasks, skills you taught it, documents Numa wrote, and pictures Numa made.

Settings. Style and nickname, language, time zone, and notification choices.

Usage. Daily usage counts (model tokens, how often a tool was used) to work out your plan’s quota. These records do not contain your conversation.

Data we only use if you switch it on

Everything below is off until you switch it on yourself, and you can switch it off again at any time.

• Phone calendar. The next three days of your agenda are uploaded so Numa can remind you before an event. When you switch access off, that agenda is deleted from the server.

• Contacts. When Numa looks someone up by name, only the matching contacts are sent. Your address book is not uploaded.

• Apple Health. Numa only reads, it never writes. A summary of the last two days (heart rate, HRV, blood oxygen, breathing, sleep, steps, active energy) is uploaded when you open the chat, dropped after 36 hours, and deleted when you switch access off. Numa is not a medical device and gives no diagnosis.

• Google. You connect each service on its own, and Numa asks Google for that service’s permission only:

  • Google Calendar: see, add and move events.
  • Gmail: search and read email. Send Email: send emails you ask for, including replies in the same thread. Numa cannot delete or change email.
  • Google Drive: search and read your files. Docs, Sheets & Slides: create new files and folders, and upload files you ask for.
  • Google Meet: create new meeting links.
  • YouTube: search videos and see your playlists.
  • Google Tasks: see, add and complete tasks.
  • Google Contacts: find the email or number of people you saved.

  Google’s permission is stored encrypted. Email, files, events, tasks and contacts are read from Google when you ask and used to answer at that moment; their content is not copied to Numa’s servers, only the reply Numa writes stays in your conversation. Anything that creates or changes something in your Google account waits for your approval in the app, except actions you have set to run without asking; email always asks first.

• Connectors. The address of a server you added and its token, stored encrypted.

• Microphone. Your speech is turned into text by Apple’s speech recognition on your phone. The audio is not sent to Numa’s servers.

Data from Google

Numa’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:

• Data from your Google account is used only to provide and improve the user-facing features of Numa that you see and use: answering and doing what you ask.
• It is transferred to others only as needed for those features: the content needed to answer is sent to the AI model providers that write Numa’s replies (see “Who else processes your data”), or as required by law, or as part of a merger or acquisition with notice to you.
• It is not used or transferred for advertising, not sold, and not used to train or develop generalized AI or machine learning models.
• No person reads it, unless you give consent for specific messages, it is needed for security purposes (such as investigating abuse), or it is required by law.

What the data is used for

• Answering your messages and doing what you ask.
• Remembering what matters about you in later conversations.
• Sending the reminders and check-ins you allowed.
• Working out plan quotas and keeping the service running and secure.

We do not sell your data and we show no ads.

Who else processes your data

Numa relies on other services to work. Each receives only what its job needs.

• Cloudflare: where Numa’s servers and storage run, including image generation.
• AI model providers: your message, with the context needed to answer it (such as your memories and goals), is sent to a language model provider to produce the answer.
• Speech provider: the text of a reply you ask to have read aloud, when the voice feature is on.
• Tavily: search terms and page addresses, when Numa searches or reads something on the web.
• Google: when you sign in, and when you connect and use Google services.
• Apple: speech recognition and notifications on your phone.

Your controls

All of these are in the app:

• See, correct and delete memories one by one, or forget all of them at once.
• Export all your data as one file.
• Switch off calendar, contacts and Apple Health access, and disconnect Google (the permission is revoked at Google too) and connectors.
• Delete your account. Your conversation, memories and all your data are deleted right away. Only a daily usage summary remains, no longer linked to anyone.

Storage and security

Each user’s data is stored apart from every other user’s. Tokens and keys are stored encrypted. Your data is kept for as long as your account exists. No system is completely secure, so we suggest not writing passwords or card numbers in the conversation.

Children

Numa is not intended for children under 13. Users under 18 need the permission of a parent or guardian.

Changes

When this policy changes, the date above changes with it. We announce important changes in the app.