Numio | Cirrus Privacy Policy
Effective date: [29th October 2026] · Last updated: [29th October 2026]
The short version
- Numio | Cirrus is a workplace app. Your account is created and managed by your organization, not by you.
- We use your information only to run Numio | Cirrus: to deliver your messages, calls and notes, and to keep your account secure.
- We don't show ads, sell your data, or use analytics or tracking tools.
- Your contacts and location leave your device only when you choose to share them in a chat.
- To see, correct or delete your data, contact your organization's administrator, or write to us at contact@sherpa.social.
1. Who we are
Numio | Cirrus is provided by Svanitya Consultancy Private Limited, Office Sixth Floor-A-603 Sapath Hexa Nr., Guj HighCourt Opp. Kargil Petr, Office Sixth Floor-A-603 Sapath Hexa Nr., Ahmedabad, Gujarat, 380060, India ("we", "us", "our"). This policy explains what information the Numio | Cirrus mobile app and its servers handle, why, and the choices you have.
Numio | Cirrus is offered to organizations such as companies and institutions (each an "Organization"), which create accounts for their members. Your Organization decides who can use Numio | Cirrus, which features are switched on, and how long information is kept. For the workplace information you share in Numio | Cirrus, your Organization is responsible for deciding how it is used, and we process it on the Organization's behalf. Your Organization's own privacy policy may also apply to you.
2. Information we collect
Account information (provided by your Organization)
Your name, username, email address, phone number, the business unit you belong to, and, if your Organization adds them, your department, designation and profile photo. When your account is created, we email your sign-in details to the address your Organization provides; you can change your password in the app at any time. Passwords are stored only in a protected, non-reversible (hashed) form.
Content you create
- Messages, including text, reactions, replies, edits and forwarded messages.
- Files you send or attach: photos, videos, documents, voice notes and sketches.
- Notes, checklists, tables, tags and folders.
- A contact card, only when you choose to share one in a chat.
- A location, only when you choose to share one in a chat.
Call information
For voice and video calls we keep a call history: who took part, when the call started and ended, and how long it lasted. The audio and video of a call travel between participants in real time through our calling provider and are not recorded or stored.
Device and security information
- A device identifier generated by the app, plus your device's name, model, manufacturer, operating system and the app version.
- A push notification token, so we can alert you to new messages and calls.
- Sign-in and security events, such as logins, device approvals and device removals, with the time and the IP address they came from.
What we don't collect
We don't collect your device's contact list, photo library or location in the background. We don't use advertising identifiers, analytics or crash-reporting services, and we don't track you across other apps or websites.
3. Permissions the app asks for
Numio | Cirrus asks for each permission only when you first use a feature that needs it. You can change these at any time in your device settings; the related feature will then stop working.
4. How we use information
- To provide Numio | Cirrus: delivering messages, files and calls, syncing your notes, and showing your chat and call history.
- To keep accounts secure: verifying sign-ins, applying your Organization's device approval and security settings, and investigating misuse.
- To send notifications. Notifications use generic text ("You have received new notification") and never show who wrote to you or what they said.
- To email you your sign-in details when your account is created.
- To support your Organization and respond to its requests.
- To meet legal obligations and enforce our terms.
We do not use your content for advertising, and we do not sell or rent personal information.
5. Who we share information with
- People you communicate with. Messages, files, contacts and locations you send are visible to the members of that chat.
- Your Organization. Your Organization's administrators can manage your account and group memberships, see your profile details, your sign-in and device history and your call history (who called whom, when and for how long), approve or remove your devices, and remove your account and its data. Numio | Cirrus's admin tools do not give administrators access to the content of your messages, notes or files.
- Service providers that help us run Numio | Cirrus, under contracts that limit their use of the data to providing their service:
- Google Firebase Cloud Messaging, to deliver push notifications;
- LiveKit, to carry the audio and video of calls in real time;
- Amazon Web Services (S3), to store the files you send and attach;
- SendGrid, to send account emails such as your sign-in details;
- our cloud hosting provider, to run Numio | Cirrus's servers and database.
- Services you open from the app. When you tap to preview a document, its temporary link is sent to Google's document viewer to display it. When you pick a location, map images are loaded from OpenStreetMap, and when you open a location someone shared, it opens in a maps service. When you open a link someone sent you, the linked website receives your request.
- Legal reasons. If the law requires it, or to protect the rights, property or safety of our users, our Organizations or the public.
6. How we protect information
- Data sent between the app and our servers is encrypted in transit, and the app checks it is talking to our genuine servers (certificate pinning).
- Files the app keeps on your device for viewing are encrypted, and temporary copies are removed when you leave the app.
- Access to stored data on our servers is restricted and protected with encryption and access controls.
- The app is locked with your PIN and can lock automatically when you leave it. Your PIN is stored only on your device, in protected form.
- Screenshots and screen recordings are blocked inside the app.
- An optional emergency PIN erases Numio | Cirrus's data from your device.
No method of storage or transmission is completely secure, but we work to protect your information and to fix any weaknesses we find.
7. How long we keep information
We keep your information for as long as your account is active, or for the period your Organization sets. Messages with a self-destruct timer are deleted when the timer ends. When your Organization removes your account, or stops using Numio | Cirrus and asks us to delete its data, we delete or anonymize the information within [30] days, except where the law requires us to keep it longer. Copies in backups are removed on our regular backup cycle.
8. Your choices and rights
Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and, where it applies, the EU General Data Protection Regulation, you may have the right to:
- see the personal information held about you;
- correct information that is wrong or incomplete;
- ask for your information to be deleted;
- withdraw consent you have given, and raise a complaint with a data protection authority.
Because your Organization manages your account, please send these requests to your Organization's administrator first. You can also contact us; we will work with your Organization to respond.
Deleting your account
Numio | Cirrus accounts are created and removed by your Organization. To delete your account and its data, ask your Organization's administrator, or email contact@sherpa.social from the address on your account and we will pass the request to your Organization.
9. Children
Numio | Cirrus is a workplace app and is not meant for anyone under 18. We do not knowingly collect information from children.
10. Where information is stored
Numio | Cirrus is a workplace app and is not meant for anyone under 18. We do not knowingly collect information from children.
Your information is stored on servers located in india. If information is transferred to another country, we protect it as this policy describes and as the law requires.
11. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, let you or your Organization know through the app or by email.
12. Contact us
For privacy questions or requests:
- Email: contact@sherpa.social
- Post: Svanitya Consultancy Private Limited, Office Sixth Floor-A-603 Sapath Hexa Nr., Guj HighCourt Opp. Kargil Petr, Office Sixth Floor-A-603 Sapath Hexa Nr., Ahmedabad, Gujarat, 380060 , india
Grievance Officer
In line with Indian law, you can contact our Grievance Officer, Nitya Umat, at contact@sherpa.social. We aim to acknowledge complaints within 24 hours and resolve them within 15 days.
.svg)
