Privacy

What annnä holds

Your account: an email address and sign-in credentials. Your board: the commitments you record — events, tasks, the rules you set over them — and the history of what happened to each. This is the working material of your own schedule, and it is held to run your board. Nothing more is collected than what the schedule needs.

People who book with you

Someone booking your time uses a link and a plain form. They never make an account. The link shows open time only — never what fills your day, and never why a slot is closed. What they submit on the form — a name, a contact address, an answer the booking needs — lands on your board, attributed to their own link, visible to you and to them. One person's link never shows them another person's booking.

Connected calendars

You can connect a Google Calendar so existing plans appear beside new ones. The connection is read-only: annnä asks Google for permission to read your calendar (the calendar.readonly scope) and nothing more. It cannot write to your calendar. There is no background sync — your calendar is read only when you ask annnä to bring updates in, and each item arrives as a proposal you confirm or discard. Nothing imports itself.

The connection credential is stored encrypted, used for these reads and nothing else, and revocable from either side at any time — in annnä, or from your Google account's own settings.

annnä's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: your calendar data is read to show you your own schedule, and for nothing else. It is not used for advertising, not sold, not passed to anyone except the hosting that runs the product for you, and not used to train AI models.

Documents

Some bookings need a document — a signed form, an ID page. Documents live in a separate vault, encrypted, apart from the schedule. When a document has served its purpose it is destroyed on a stated clock; what remains is the fact that it was checked — a receipt, not a copy. The most sensitive classes are held under their own keys, and every read of them is logged.

The AI, plainly

annnä uses a language model to understand what you type. The model proposes; it cannot commit anything, contact anyone, or author a number on its own. Text written by anyone who is not you — a booking note, an imported calendar entry — is read in isolation and reaches the model's working context only as a structured summary. Nothing you store is used to train models.

What never happens

• Your data is not sold, and there are no ads.
• Nothing you store trains an AI model.
• Nothing reaches another person without your explicit yes, and every outward act is recorded with who allowed it and when.
• Time that opens up on your board is yours. It is never re-listed behind your back.

Your controls

You can export your whole board — commitments, rules, history — in one piece. You can delete your account: the export is offered first, then everything is erased on a stated schedule, and the erasure produces a written confirmation. Any link you have shared can be revoked, and a revoked link goes dark honestly — no stale view, no leftover data behind it.

The alpha, honestly

annnä is in an invite-only alpha. This policy describes the product as it is built; where a capability described here has not reached you yet, the policy binds it from the day it does. Changes land on this page with a new effective date.

Contact

Questions about this policy or your data: privacy@annna.dev.