Privacy Policy

Last updated: February 2026

The short version: We collect only what we need to make ANA work. We never sell your data, never use it to train AI models, and never share it with advertisers. You own your data, always.

1. What We Collect

When you use ANA, we collect the following information:

  • Google account info — your name, email address, and profile picture, provided via Google OAuth during sign-in.
  • Gmail read access — we read your emails to extract orders, subscriptions, transactions, flight tickets, and other relevant information. We never send emails on your behalf without your explicit action.
  • Google Calendar access — we read your calendar to show upcoming events and create reminders when you ask.
  • WhatsApp messages — messages you send to ANA via the Twilio WhatsApp Sandbox are stored to provide conversation memory and context.
  • Usage data — basic analytics like which features you use, to improve ANA over time.

2. How We Use Your Data

  • To provide ANA's core features: email parsing, calendar management, order tracking, medicine reminders, and proactive notifications.
  • To personalise ANA's responses based on your preferences and conversation history.
  • To send you proactive WhatsApp messages — reminders, morning briefings, spending alerts, and check-ins you've enabled.

We NEVER:

  • Sell your personal data to third parties
  • Use your data to train AI models (including Anthropic's Claude)
  • Share your data with advertisers
  • Read emails you haven't opted into scanning

3. Data Storage & Security

  • All personal data is stored on Supabase (PostgreSQL) with row-level security enabled.
  • Google OAuth tokens are encrypted at rest using AES-256 encryption.
  • All API communication is over HTTPS/TLS 1.3.
  • Our infrastructure is hosted on Vercel with enterprise-grade security.
  • We retain conversation history for as long as your account is active. You can delete it at any time from Settings.

4. Third-Party Services

  • Anthropic (Claude) — processes your messages to generate ANA's responses. Messages are not stored by Anthropic for training purposes. See Anthropic's Privacy Policy.
  • Twilio — delivers WhatsApp messages between you and ANA. Subject to Twilio's Privacy Policy.
  • Google APIs — Gmail and Calendar access. Subject to Google API Services User Data Policy.
  • Deepgram — transcribes voice notes you send to ANA. Audio is processed in real-time and not stored.

5. Your Rights

  • Export all your data anytime from your Dashboard → Settings → Export
  • Delete your account and all associated data by emailing hello@myana.ai with subject “Delete My Data”
  • Revoke ANA's Google access at any time from your Google Account settings
  • Opt out of proactive WhatsApp messages at any time by messaging ANA “stop briefings”
  • Request a copy of all data we hold about you

6. Cookies

  • We use essential cookies only — specifically the NextAuth session cookie required for authentication.
  • No tracking cookies.
  • No analytics cookies.
  • No advertising cookies.

7. Children's Privacy

ANA is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or WhatsApp message at least 30 days before they take effect.

9. Contact

For privacy-related questions or data deletion requests, contact us at:

  • Email: hello@myana.ai
  • For data deletion: email with subject “Delete My Data”