Privacy Policy

1. The short version

Nuriyah does not keep your documents. We read the numbers out of the files you upload, show you exactly what we found so you can check it, and then delete the originals once you have saved your pack.

We do not store your recommendations or continuity plans as files at all. They are built fresh each time from the figures you confirmed. There is nothing sitting on our servers to lose.

We do not sell your data, and we do not use your commercial information to train anyone's AI models.

2. What we collect

If you give us your email address to be told when payments open, we keep it only for that purpose, use it for that one message, and remove it if you ask us at hello@nuriyah.app.

3. A note about other people's information

The documents you upload usually contain information about third parties — suppliers, their staff, their prices. You are responsible for having the right to share that with us. We process it only to produce your comparison, we do not use it for anything else, and we delete the source documents as described above.

4. Why we are allowed to process it

Where GDPR or POPIA applies, our lawful bases are: performance of a contract (running the service you have signed up for), legitimate interests (keeping the service secure and working), legal obligation (tax and accounting records) and consent where we ask for it, such as for marketing email.

5. Who we share it with

We use a small number of providers to run Nuriyah. They process data on our instructions only.

Documents sent for reading are not used to train any provider's models, and are not retained by them beyond the request.

We do not sell your personal information and we do not share it for advertising.

6. Where your data is held

Your data may be processed outside the country you live in. Where it leaves the EEA or South Africa, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep things, and when we delete

• Uploaded documents: deleted once you confirm you have saved your pack.
• Your comparisons and the figures behind them: kept while your account is active. There is no clock running on a live account's own records.
• After you cancel: export your work first — Nuriyah's one-click export gives you everything you own. Thirty days after cancellation everything on the account is deleted. We keep no copy and we cannot restore it.
• Billing records: retained as long as tax law requires, regardless of the above.

8. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to it. You can withdraw consent for marketing at any time. Write to hello@nuriyah.app and we will respond within 30 days.

You do not need to ask us for a copy. Nuriyah has a one-click export that gives you everything you own, and it works whether or not your subscription is current.

If you are unhappy with how we have handled your data you can complain to your data protection regulator — the Information Regulator in South Africa, or your national authority in the EEA or UK.

9. Security

Data is encrypted in transit and at rest. Access is separated per organisation at the database level, so your records are not reachable from another customer's account. Declarations and audit events are append-only and cannot be altered or deleted, by you or by us.

No system is perfectly secure. If a breach affects your data we will tell you and the relevant regulator as the law requires.

10. Cookies

We use only what is needed to keep you signed in and to keep the service secure. We do not use advertising cookies or third-party tracking.

11. Children

Nuriyah is not intended for anyone under 18 and we do not knowingly collect their data.

12. Changes

If we change this policy materially we will tell you by email or in the application before it takes effect.