Privacy notice
What CyberTumi collects, and what it never will.
Draft · Last updated 27 September 2026 · Issued by Nzama Digital Limited, the owner and operator of CyberTumi. This notice describes how CyberTumi software is designed to handle data and will be reviewed by counsel before general release. It is written with the Ghana Data Protection Act, 2012 (Act 843) in mind.
The short version
- We collect the minimum needed to protect your device and account.
- Every piece of data has a stated purpose. Nothing is collected “just in case”.
- Data is encrypted in transit and at rest, and kept only as long as it is useful.
- We never sell your data, and never share identifiable data for advertising.
- You can see what we hold, correct it, export it, or ask us to delete it.
What we collect and why
| Category | What | Why |
|---|---|---|
| Account | Email, name, password (stored only as a hash) | Sign you in and contact you |
| Device | Device ID, model, OS version, app version | Manage your devices and stay compatible |
| File fingerprints | SHA-256 hash, file name, size and path. Never the file itself | Check files against known threats |
| Links | The URL being checked, at the moment you open it | Check for phishing and malware. Full URLs are not kept after the verdict |
| App inventory (Android) | Package names, permissions, signing certificates | Assess app risk |
| Security events | What was detected, category, confidence, action taken, time | Protect you, show alert history, improve detection |
| Device posture | OS update status, screen lock on or off, root or jailbreak status | Your device health score |
| Support | Tickets you open and diagnostic logs you choose to send | Help you when something goes wrong |
What we do not collect
CyberTumi does not collect, read or transmit:
- Your full browsing history
- The contents of your files
- Photos, documents or messages
- Keystrokes
- Your location
- Contacts or address book
- Call or SMS logs
- Biometric data
Where a future feature would need one of these, for example location for a lost-device feature, we will ask you first and you can say no.
How we protect it
- All traffic between your device and CyberTumi uses HTTPS (TLS 1.2 or newer).
- Account data, device data and security events are encrypted at rest.
- Identity data and security analytics are kept separate wherever feasible.
- Access to production data is role-based and logged.
- File reputation checks send only a fingerprint (hash), never the file.
How long we keep it
| Account and device data | While your account is active, then 30 days |
| Detailed security events | 90 days |
| Aggregated, anonymised statistics | 1 year |
| Raw diagnostic telemetry | 30 days |
| Support tickets | 1 year after they are resolved |
| Business admin audit logs | 2 years |
Threat verdicts for file fingerprints and URLs are not personal data and are kept to improve detection for everyone.
Who we share it with
- Threat intelligence partners: anonymised indicators only (file hashes, malicious URLs). Never your identity.
- Cloud hosting provider: stores encrypted data on our behalf under a data processing agreement.
- Payment processor: handles subscription billing. CyberTumi does not store your card details.
- Support platform: holds tickets you open with us, access-controlled to the support team.
We do not sell personal data or security telemetry, and we do not share data for advertising.
Your rights
- Access: see your account data and device list in the app.
- Correction: update your account details at any time.
- Deletion: request deletion from app settings or by email. We complete it within 30 days.
- Portability: export your security event history.
- Objection: opt out of non-essential telemetry in settings.
Business customers
If your device is enrolled by an employer, the business administrator can see the device’s name, status, health score and security alerts. They cannot see your files, messages, browsing history or personal accounts, because CyberTumi does not collect them. Admin actions are logged.
Contact
Questions, access requests or deletion requests: hello@cybertumi.com
Nzama Digital Limited · Cape Coast, Ghana