Privacy Policy
Puyama is a relationship, communication and organisation application provided by CMEX Group Ltd. This Privacy Policy explains what personal data Puyama may process, why it is processed, how it is protected and the choices available to you.
1. Who we are
CMEX Group Ltd is the provider of Puyama. Company number 16289442. Registered office: 2 All Saints Road, Ipswich, Suffolk, United Kingdom, IP1 4DG. Privacy enquiries may be sent to info@cmexgroup.co.uk.
2. Information Puyama may process
- Account and profile information, such as your name, email address, profile image and authentication identifiers.
- Contacts you choose to add or import, including names and contact details you select from your device.
- Relationship and organisation information you create, such as notes, tags, follow-ups, promises, important dates and interaction history.
- Messages, attachments, voice notes and other content you choose to send or store through Puyama.
- Call-related information needed to provide voice or video communication, such as call participants, connection state and technical session data.
- Calendar information you choose to connect or create through Puyama.
- Device and technical information needed for security, notifications, diagnostics and reliable operation of the service.
- AI requests and relevant context you choose to submit when using intelligent assistance features.
3. Device permissions
Puyama may request access to features such as contacts, calendar, notifications, microphone, camera and photos or files. These permissions are requested only when needed for the related feature. You can control device permissions through your operating-system settings.
4. Why we process information
- To create and secure your account.
- To provide messaging, calling, media sharing, reminders, contact management and relationship-management features.
- To provide AI-assisted features you choose to use.
- To prevent abuse, investigate security issues and maintain service reliability.
- To comply with legal obligations and enforce applicable terms.
5. Service providers
Puyama uses specialist service providers to operate parts of the service. Depending on the feature used, these may include Clerk for authentication, Convex for application backend and data services, LiveKit for real-time voice/video communications, Cloudflare R2 for private media storage, OpenAI for AI-assisted features, and Expo/EAS and related platform services for application delivery and notifications. These providers process information only as necessary to provide their services to Puyama and subject to their applicable data-protection terms.
6. AI features
When you use Puyama's AI-assisted features, relevant text or context may be sent to the configured AI service so that it can generate the requested output. Puyama is designed to send only the context needed for the feature being used. Do not submit information to AI features that you do not want processed for that request.
7. Data sharing
CMEX Group Ltd does not sell your personal data. Information may be shared with service providers described above, with other users when you intentionally communicate or share content with them, when required by law, or when necessary to protect users, Puyama or the public from fraud, abuse or security threats.
8. Data retention
We keep personal data for as long as reasonably necessary to provide Puyama, meet legal or security obligations, resolve disputes and enforce agreements. Retention periods can vary by data type. When an account is deleted, data associated with the account is deleted or de-identified where reasonably possible, subject to limited retention required for legal, fraud-prevention, security, backup or dispute-resolution purposes.
9. Security
We use technical and organisational safeguards intended to protect personal information, including access controls, authenticated services and restricted server-side credentials. No online service can guarantee absolute security, so users should also protect their account credentials and devices.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing of your personal data, and to request a copy of information about you. You can also manage many permissions and account settings directly in Puyama.
11. Account deletion
You can request deletion of your Puyama account and associated data using our dedicated account-deletion page. We may need to verify that the request comes from the account owner before completing deletion.
12. Children
Puyama is not intended for children. The public Google Play release is intended for adults, and users should not create an account if they are below the minimum age applicable to the service in their location.
13. International processing
Some service providers may process information in countries other than your own. Where required, we rely on appropriate contractual and legal safeguards for international transfers.
14. Changes to this policy
We may update this Privacy Policy when Puyama's features, providers or legal obligations change. The updated date at the top of this page will show when the policy was last revised.
15. Contact us
For privacy questions or requests, contact info@cmexgroup.co.uk.