Privacy policy

Who we are

Niru Code is made by HiroLabz. This policy covers the Niru Code website, web app, desktop app and phone app. Questions about it go to [email protected].

What we collect

We collect only what Niru Code needs to work:

• Account details: your name, email address, profile photo and how you sign in (password, passkeys, authenticator, or GitHub, Google or Apple through WorkOS).
• Organizations, workspaces, projects, members and their roles.
• Runs: the prompts and messages you send, files you attach, and what Claude reports back (transcripts, plans, verification reports). Transcripts and reports are encrypted at rest.
• Docs, designs, diagrams and comments you and your team create.
• Links to GitHub, Linear and ClickUp, and the tokens that let Niru act for you. Tokens are encrypted and never shown to agents.
• Devices signed in to your account, and basic logs (request ids, error names, times). Logs never contain your code, messages or secrets.

Claude and your code

Agents run on your own computer, never on our servers. When you start a run or message Claude from the web or the phone, Niru sends what you wrote and the files you attached to your desktop app, which passes them to Claude, Anthropic's AI model, through the Claude Code account signed in on that computer. Claude also reads the code in the run's repository on your computer.

Anthropic handles that data under the terms of your Claude Code account. The phone app asks for your agreement before it sends anything to Claude, and you can withdraw it in Settings › Claude and your data.

How we use it

We use your data to run Niru Code: to sign you in, show your runs, docs and team activity, send the notifications you choose, and keep the service secure. We don't sell your data, use it for advertising, or track you across other apps and websites.

Who we share it with

We share data only with the services Niru Code is built on, each for its part of the work:

• DigitalOcean hosts the web app, the API and the database.
• WorkOS handles Google and Apple sign-in.
• Resend sends our emails.
• GitHub, Linear and ClickUp receive what you ask Niru to do there (branches, pull requests, comments, ticket updates).
• Anthropic receives run content through your own Claude Code account, as described above.

How long we keep it

We keep your data while your account exists. A run's conversation is removed 30 days after the run ends; its summary and pull request link stay. When you delete your account, we delete it at once, and backups that still hold it are cleared within 30 days.

Deleting your account

Delete your account in the phone app (Settings › Delete account) or on the web at https://niru-code.xiakra.com/account/delete. This deletes your profile, sign-in methods, runs, conversations, attachments, comments, private projects and private docs, and organizations where you are the only member. Shared projects and docs move to another owner of the organization, so your teammates keep them. Branches and pull requests already on GitHub stay in your repositories.

Reports and moderation

You can report a comment, a shared page or a person from the app. Reports go to the organization's owners and admins and to our moderators, who review them within 24 hours and remove content that breaks the Terms of service.

Your rights

You can see and change your data in the app, export it on request, and delete your account at any time. To ask about your data, withdraw consent or make a request under your local privacy law, email [email protected].

Children

Niru Code is a tool for software teams and isn't meant for children under 16.

Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.