Privacy Policy

1. What We Collect

When you use ANA, we collect the following information:

Account information — your name, email address, and profile picture, provided via Google OAuth during sign-in.

Gmail read access — we read your emails to extract orders, subscriptions, transactions, flight tickets, and other relevant information. We never send emails on your behalf without your explicit action.

Google Calendar access — we read your calendar to show upcoming events and create reminders when you ask.

Google Sheets access — we read and write to Google Sheets you've connected for life tracking (journal, fitness, expenses, habits). We never access sheets you haven't explicitly linked.

Telegram messages — messages you send to ANA via Telegram are stored for conversation memory and context.

Voice notes — audio messages you send are transcribed in real-time and the text is stored. The audio itself is not permanently stored.

Usage data — basic analytics like which features you use, to improve ANA over time.

2. How We Use Your Data

To provide ANA's core features: email parsing, calendar management, order tracking, spending insights, medicine reminders, life tracking, and proactive notifications.

To personalise ANA's responses based on your preferences, facts about you, and conversation history.

To send you proactive messages — reminders, morning briefings, spending alerts, and check-ins you've enabled.

We NEVER:

• Sell your personal data to third parties
• Use your data to train AI models (including Anthropic's Claude or Google's Gemini)
• Share your data with advertisers
• Read emails you haven't opted into scanning
• Access Google Sheets, Calendar, or Gmail without your explicit OAuth consent

3. Data Storage & Security

All personal data is stored on Supabase (PostgreSQL) with row-level security enabled.

Google OAuth tokens are encrypted at rest using AES-256-GCM encryption.

All API communication is over HTTPS/TLS.

Our infrastructure is hosted on Vercel with enterprise-grade security.

Data is processed in cloud infrastructure regions determined by our hosting providers (Vercel, Supabase, Anthropic, Google).

We retain conversation history for as long as your account is active. You can delete it at any time from Settings on your dashboard at myana.ai.

4. Third-Party Services

ANA uses the following third-party services to function:

Anthropic (Claude) — processes your messages to generate ANA's responses. Messages are sent to Anthropic's API for inference only and are not stored by Anthropic for model training under their commercial API terms. See Anthropic's Privacy Policy at anthropic.com/privacy.

Google Gemini — used for certain automated tasks like message rewriting and intelligent routing. Subject to Google's API terms. Messages are not used for model training under Google's API data usage policy.

Telegram Bot API — delivers messages between you and ANA on Telegram. Subject to Telegram's Privacy Policy at telegram.org/privacy.

Twilio — used for WhatsApp message delivery (when available). Subject to Twilio's Privacy Policy at twilio.com/legal/privacy.

Google APIs — Gmail, Calendar, and Sheets access. Subject to Google API Services User Data Policy at developers.google.com/terms/api-services-user-data-policy.

Deepgram — transcribes voice notes you send to ANA. Audio is processed in real-time and not permanently stored by Deepgram. See deepgram.com/privacy.

Tavily — provides web search results when you ask ANA to search the internet. Your search queries are sent to Tavily's API. See tavily.com/privacy.

Supabase — database and file storage provider. See supabase.com/privacy.

Vercel — hosting and deployment provider. See vercel.com/legal/privacy-policy.

5. Your Rights

You can exercise the following rights at any time:

Delete your account and all associated data from your dashboard at myana.ai → Settings → Delete Account. This permanently removes all conversations, facts, tracked sheets, reminders, and personal data.

Revoke ANA's Google access at any time from your Google Account settings at myaccount.google.com/permissions.

Opt out of proactive messages at any time by messaging ANA "stop briefings" or "stop reminders" on Telegram.

Request a copy of all data we hold about you by emailing hello@myana.ai with subject "Data Export Request".

Request data deletion by emailing hello@myana.ai with subject "Delete My Data" if you prefer not to use the dashboard.

6. Cookies

We use essential cookies only — specifically the authentication session cookie required for dashboard sign-in.

No tracking cookies. No analytics cookies. No advertising cookies.

We use Google Analytics on the marketing website (myana.ai) for basic page view analytics. This does not track your activity within ANA itself.

7. Children's Privacy

ANA is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@myana.ai and we will delete it.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via Telegram message at least 30 days before they take effect.

9. Contact

For privacy-related questions or data requests:

Email: hello@myana.ai
Website: myana.ai