Privacy
How Numa looks after your information
Last updated 13 October 2026. Numa is made by Kwry in South Africa. This explains what we keep, why, and the rights the Protection of Personal Information Act (POPIA) gives you.
What we keep
- Your account: name, email address, password (stored only as a secure hash) and, if you switch them on, authenticator codes.
- What you put in: income, spending, payslips, tax figures, documents you upload and, for a business, its books, customers, suppliers and employees (including their ID and tax numbers and bank details, for payroll).
- Records of activity: sign-ins and changes, so you and your team can see who did what.
We never ask for your SARS eFiling or banking login.
Why we keep it
Only to run Numa for you: work out your tax, prepare returns and payslips, remind you of deadlines, and keep your account secure. We don’t sell your information, show advertising, or use third-party tracking.
Who else handles it
A few operators help us run Numa under written agreements that require them to protect it: our hosting and database providers, and our email provider for reminders, invoices and payslips. Some of them store data outside South Africa (in the European Union); POPIA section 72 allows this where the recipient is bound to protect it to the same standard. People you invite to a business, or send a shared pack and its password to, see what you give them access to.
How it’s protected
Everything is sent over encrypted connections. Each person’s and each business’s records are encrypted with their own key. Access inside a business follows the roles you set. If a breach ever affects your information, we will tell you and the Information Regulator as POPIA requires.
How long we keep it
For as long as your account is open. When you delete your account, your records and documents are deleted. Encrypted backups roll off within 14 days. A business may need to keep its own records for five years under tax law; that is the business’s decision, and its owners can export them before closing.
Your rights
You can see, export, correct and delete your information in Numa at any time (Settings, then Your data). You can object to how it’s used, and you can complain to the Information Regulator (inforegulator.org.za). For anything else, email hello@kwry.co.za.
Children
Numa is for people 18 and older.
Contact
Kwry · hello@kwry.co.za. Information Officer: to be named on registration with the Information Regulator.