How we look after your data.

• We collect what we need to help you with Canadian immigration — nothing more.
• Your documents are encrypted and stored in Canada (AWS Toronto region).
• We never sell your data. Period.
• You can delete your account anytime from Settings, and we honour PIPEDA.
• Newton Immigration (CICC-licensed RCICs) sees the data you choose to share with them.

When you sign up and use Nimmi, we collect:

• Account information. Email, name, phone number, and authentication data from Clerk (our sign-in provider).
• Immigration profile. Answers you give during the wizard — status, expiry dates, education, language test scores, your goals.
• Documents you upload. Passports, permits, transcripts, and other files you place in ImmiBook.
• Eligibility submissions. Answers to checklists for specific services (PGWP, Express Entry, etc.).
• Conversations. Messages you exchange with our AI assistant and any callback requests you make.
• Technical data. Standard log data — IP address, browser, device, timestamps — to keep the app secure.

• To provide the service — eligibility checks, document storage, expiry reminders, AI answers.
• To share with Newton Immigration (and only Newton) if you book a consultation, request a callback, or share a document with them.
• To send you transactional emails — welcome message, document-expiry reminders, account changes.
• To improve Nimmi — anonymized analytics like which services people check most.
• To comply with Canadian law and CICC professional requirements.

We do not use your data for advertising. We do not sell it to third parties. We do not train AI models on your private documents.

All sensitive personal data — your immigration profile, uploaded documents, and chat history — is stored in Canada:

• Documents: AWS S3, ca-central-1 (Montreal) region. Encrypted at rest using AES-256.
• Database: PostgreSQL hosted by Railway in a Canada region.
• Authentication: Clerk (a Delaware company). Stores only your email, name, and login credentials — not your immigration data.
• Email delivery: Resend (a US company). Receives only transactional email content (welcome, expiry reminders).
• AI processing: Anthropic Claude API. When you chat with our AI or we extract data from a document, the content is processed by Claude. Anthropic does not retain it for model training.

When data must leave Canada (Clerk, Resend, Anthropic), we limit what's shared and rely on contractual safeguards (data processing agreements) and these vendors' SOC 2 / GDPR compliance.

• You. All your data, anytime, in the Nimmi app.
• Newton Immigration RCICs. Sees your data only when (a) you book a consultation, (b) you request a callback, (c) you explicitly share a document with them, or (d) you submit an eligibility check (in which case they see whether you qualify and your answers).
• Jungle Labs Inc. (operator). Engineers may see your data for technical support, debugging, and security — only when necessary. We log access internally.
• Subprocessors. Limited to the vendors listed above ("Where your data lives") and only the minimum data needed.
• Law enforcement. Only with a valid court order under Canadian law. We will notify you unless legally prohibited.

Under Canadian privacy law (PIPEDA), you have the right to:

• Access your personal data we hold.
• Correct anything that's wrong.
• Withdraw consent at any time (this may limit our ability to provide service).
• Request deletion of your account and data — available right now from Settings → Delete account.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

Email mowgli@junglelabsworld.com for any privacy request. We respond within 30 days.

We keep your data for as long as your account is active. When you delete your account:

• Your uploaded documents are deleted from S3 within 24 hours.
• Personal identifiers in your account are anonymized immediately.
• We retain anonymized case records for 6 years to comply with CICC professional retention requirements — but they cannot be linked back to you.
• Backup copies cycle out within 30 days.

Nimmi is intended for adults applying for Canadian immigration services. We don't knowingly collect data from anyone under 16. If you believe we have, email us and we'll delete it.

If we change this policy materially, we'll notify you by email and on the app. The "last updated" date at the top will change. Continued use of Nimmi after changes means you accept them.

We try to make this clear. If something isn't, ask:

mowgli@junglelabsworld.com
Jungle Labs Inc.
Surrey, BC, Canada