Numa security and permissions

Numa is useful because it can act on your computer. That also means security and permissions matter.

This page explains what access Numa needs, when it uses that access, and where human review still matters.

Why Numa needs permissions

Numa is a desktop AI agent. To complete tasks, it may need to:

See what is on screen
Click buttons
Type into apps
Open files
Move files
Use browser sessions where you are logged in
Record workflows when you ask it to learn a process

Without permissions, Numa becomes a chat window. It can talk, but it cannot do much on your computer.

Screen access

Numa is not always watching your screen.

Screen capture is used when:

You ask Numa to do a task.
You start a workflow recording.
You explicitly ask Numa to look at something.

When Numa is idle, it is not recording your screen or building a timeline of your day.

Mouse and keyboard control

When a task requires clicking or typing, Numa may take control of mouse and keyboard. The product shows a visible working state so you know when this is happening.

You can stop a running task by typing stop.

Files and folders

Numa can interact with files when you direct it to. It does not scan your hard drive automatically on install.

Use good boundaries:

Keep project work in folders.
Tell Numa which paths are allowed.
Tell Numa which paths are blocked.
Ask for previews before destructive changes.
Keep backups for important files.

Accounts, messages, and money

Numa can use apps and browser sessions where you are already logged in, if the task requires it.

Review sensitive actions carefully:

Sending emails
Posting publicly
Purchasing
Changing account settings
Deleting files
Moving money

Numa can assist with these flows, but you remain responsible for the outcome.

Prompt injection

Prompt injection is when a website, PDF, or document contains instructions meant to manipulate an AI agent.

Example: a malicious page might contain hidden text telling an agent to ignore the user and send private files somewhere else.

Numa works to reduce this risk, but no agent should be treated as immune. Review sensitive actions before they happen.

Work computers

If your computer is managed by your employer, ask IT before installing Numa.

Numa requires deep desktop permissions. Your employer's device management tools may detect or block the app. Do not use Numa on work data if your employer's policies do not allow it.

Data and training

Current policy: Numa does not sell your data and does not train AI on your conversations.

For full legal detail, use the privacy policy and usage policy.

The short version

Numa needs desktop permissions because it does desktop work. It is not always watching, and sensitive actions should remain under human review.