Privacy Policy

Last updated: September 2026

Nyoma is sold to organisations. When you use Nyoma as an employee, your Company is the data controller and Nyoma acts as a data processor on its instructions. Questions about your data should first go to your employer. For solo (Individual) accounts, you control your own workspace.

1. Who we are

Nyoma ("Nyoma", "we", "us") provides a workforce-management and field-operations platform delivered as a web application and an Android app (tech.nyoma.app). This policy explains what personal data the platform processes and why. Contact: [email protected].

2. Data we collect

Account & profile

Name, work email, phone number, profile photo, job title/designation, department, employee ID, date of birth, employment type, reporting manager, and joining date.

Location data — including background location

For roles configured for field tracking (e.g. Sales Representatives), the app collects precise device location, including in the background while a work shift is active, to record routes, detect stops, verify customer visits and calculate travel. Location is collected only during the tracking window configured by your Company and can be turned off in the app. Your employer can view this location data.

Attendance, tasks & activity

Check-in/out times, tasks, time logs, daily checklists, leave requests and productivity metrics.

Financial & payroll

Salary and payroll details, statutory/tax identifiers, bank account details (where your Company uses payroll), expense claims and receipt photos, and — for administrators — subscription and billing information processed by our payment provider.

Customer & CRM data

Information about your Company's customers and leads that you enter (names, contact details, notes, visit records).

Sales & business-system data

Where your Company uses Sales or authorizes an accounting, ERP or warehouse integration, Nyoma may process product, pricing, inventory, order, delivery, return, invoice-reference, receivables and external-record ID data. Each integration is optional and is configured by an authorized administrator for the specific business data and workflow the Company selects.

Communications

In-app chat messages, notifications, and — only if you explicitly connect a mailbox — email/calendar metadata. Mailbox connection is off by default.

Photos, camera & microphone

Receipt and visit photos you capture; microphone audio for optional voice-to-text dictation.

Device & technical

Device model and OS, app version, push-notification token, IP address, and diagnostic/crash logs. The app does not collect your device's IMEI or other persistent hardware identifiers.

Authentication

If you sign in with Google or Microsoft, we receive your basic profile (name, email) to create or match your account. We do not receive your Google/Microsoft password.

3. How we use data

Operate the service (attendance, tasks, GPS/field ops, CRM, payroll, chat).
Verify field visits and compute routes, distance and expenses.
Send notifications and reminders; provide analytics and reports to your Company's managers.
Optional AI features (summaries, insights) — processed by our AI provider on a need-to-run basis; email content is never stored, only derived summaries.
Billing and fraud prevention, security, debugging and legal compliance.

4. Who we share data with

Your Company — managers and administrators can see your work data, including location, attendance, tasks and expenses.
Service providers (processors) acting on our behalf: cloud hosting and file storage, transactional email, push notifications (Firebase Cloud Messaging), payments, and AI processing for optional AI features.
Authentication providers (Google, Microsoft) if you use them to sign in.
Business systems selected by your Company — accounting, ERP or warehouse providers receive only the data and actions authorized for that configured integration. Provider access is off until separately activated, and is subject to that provider's terms and privacy practices.
Legal — when required by law or to protect rights and safety.

We do not sell your personal data or use it for third-party advertising.

5. Google user data & Limited Use

If you choose to connect your Google account (Settings → Integrations — this is optional and off by default), Nyoma requests access to the Google data below, and uses it only to provide the specific in-app features you activate:

Gmail — read (gmail.readonly): to display your inbox and email threads inside Nyoma and to generate the AI summaries, replies and digests you request. Email content is processed in memory to produce these features and is never stored on our servers; only summaries/metadata you choose to save are retained.
Gmail — send (gmail.send): to send the replies and messages you compose in Nyoma, on your behalf.
Gmail — modify (gmail.modify): to mark a message as read in Gmail when you open it in Nyoma.
Gmail — settings (gmail.settings.basic): to turn your vacation auto-responder on and off when you take leave in Nyoma.
Google Calendar (calendar): to create meeting events and Google Meet links and invite the attendees you choose.
Contacts — read-only (contacts.readonly): to suggest recipients when you compose an email or invite meeting attendees.
Drive (per-file) & Sheets (drive.file, spreadsheets): to create and access only the specific files Nyoma generates on your instruction (e.g. exports) — not your wider Drive.

You can disconnect your Google account at any time from Settings, which revokes Nyoma's access. Google user data is used solely to provide the features above — it is never sold, never used for advertising, and is never used to develop, improve or train generalised AI/ML models. It is not transferred to others except as needed to provide these features, for security, or to comply with the law.

Limited Use. Nyoma's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data retention

We retain personal data for as long as your account is active and as needed to provide the service, then delete or anonymise it within a reasonable period, subject to your Company's instructions and legal retention requirements (e.g. payroll records).

7. Your choices & controls

Location: turn tracking off in the app or revoke the location permission in device settings.
Notifications: manage in device settings.
Access, correction, deletion: Individual accounts can delete their account and data under Settings → Account → Delete account (web) / More → Delete account (mobile), or see app.nyoma.tech/delete-account. Company-managed accounts are removed by your employer's admin (offboarding); you may also email [email protected] from your registered address.

8. Security

Data is encrypted in transit (HTTPS/TLS). We apply access controls, strict tenant isolation and least-privilege practices. See our Security overview for more.

9. International transfers & children

Data may be processed in countries other than yours, with appropriate safeguards where required. Nyoma is a workplace tool and is not directed to children under 16.

10. Changes & contact

We may update this policy; material changes will be notified in-app or by email. Questions: [email protected].