Nanagi — Privacy Policy

Effective 7 August 2026 · Applies to the Nanagi iOS app and the Nanagi web app (nassonia.com)

The short version: Nanagi has no ads, no trackers, no analytics SDKs, and nothing is sold to anyone. On iOS you sign in with Apple, and you may hide your email address when you do. The app stores what you create in it — your journeys, routines, schedule, and chats with your guide — on our server so it follows you across devices. You can permanently delete all of it, in the app, at any time.

Who holds your data: Nanagi is operated by Nassonia LLC, a Michigan limited liability company in the United States. We are the controller of the personal data described here, and you can reach us at admin@nassonia.com.

What we collect

• Account (iOS): you sign in with Apple. Apple gives us a stable identifier for you, an email address, and — on your very first sign-in only — your name. If you choose Hide My Email, the address we receive is Apple's private relay address, not your real one. There is no password. You also pick a display name in the app, which can be a pseudonym.
• Account (web): a username you choose (it can be a pseudonym) and a randomly generated account ID. There is no password, email, or phone number.
• Things you create in the app: intentions, journeys and their paths, routines, daily schedule, captured items and the calendar blocks you approve, journal and chat entries with your guide, storyboards and the images you attach to them, a profile photo if you set one, and settings like faction and language.
• Voice calls with your guide ("Otherside") — only if you grant microphone and speech-recognition access. Your speech is transcribed by iOS, which may send the audio to Apple's speech service to do it. We never receive or store any audio. Only the resulting text reaches our server, where it is kept on the transcript of your own call. Your guide's replies are spoken by a voice model running on our own servers.
• Notifications — only if you allow them. We store your device's push token so we can reach you when the app is closed (for example, when a path has finished generating), and a timestamp of when the app was last opened, which we use to avoid interrupting you while you're already using it.
• Subscription: purchases are handled entirely by Apple — we never see your card, billing address, or Apple ID. Apple gives us a signed receipt, and we store what it contains: which product you bought, when it started and expires, whether it renews, and whether it is a sandbox or production purchase. We also count how many times a day you use each paid feature, to enforce fair-use limits.
• Device calendar — only if you grant calendar access. On iOS, the app reads your calendar so it can avoid booking over what's already there, and writes the steps you plan into a separate "Nanagi" calendar on your device. It never changes or deletes your other events. The schedule you build in the app is also saved to our server so it follows you across devices.
• Google Calendar — only if you choose to connect it (on the web). We request read-only access, so we can read your upcoming events (their titles and times) and your Google account email — which is your primary calendar's identifier — to help your schedule fit around what you already have. We store the resulting sign-in tokens encrypted, never write to your Google calendar, and you can disconnect at any time.
• What your guide remembers: so conversations feel continuous, the app can save short facts you tell your guide (for example, a goal or a preference) along with a numeric representation of that text (an "embedding") on our server, and recall what's relevant in later sessions. This is built only from what you share in the app, is tied to your account, and is generated on our own servers.
• What we do not collect: location, contacts, advertising identifiers, browsing history, or any analytics about how you use the app.

How we use it

• To run the service: your data is stored against your account so signing in on another device restores your world.
• To power AI features: when you chat with your guide or generate journeys, the text needed for that request is processed by AI models to produce the response. That's the only thing it's used for.
• To reach you when the app is closed, if you allowed notifications — about something you asked for that has finished, or an occasional nudge to come back. You can turn these off in iOS Settings at any time.
• To know what you've paid for: your receipt decides which features are unlocked, and the usage counts stop automated abuse of the ones that cost us money.
• We do not sell or share your personal information — not for money, and not for cross-context behavioural advertising. We show no ads, build no advertising profiles, and share your data with no one except the service providers listed below. We have never done any of these things.
• We may disclose data if the law requires it — a valid legal request — or where we genuinely need to in order to protect someone's safety or defend our rights. If that ever happens and we're allowed to tell you, we will.

Why we're allowed to (legal bases)

If you are in the EU/EEA or the UK, these are the bases we rely on:

• To perform our contract with you — your account, everything you create in the app, the schedule, your guide's replies, and your subscription. These are the app; without them there is nothing to deliver.
• Your consent — the microphone, speech recognition, your device calendar, notifications, and a connected Google Calendar. Each one is an operating system prompt you can decline, and you can withdraw it at any time in iOS Settings or by disconnecting in the app. Declining costs you that one feature, nothing else.
• Our legitimate interests — keeping the service up and stopping automated abuse of the features that cost us money (this is what the daily usage counts are for), and defending legal claims.

Where your data is processed

• Our servers are hosted by Vultr in the United States (New Jersey), behind Cloudflare. All traffic uses HTTPS.
• AI text — your conversations with your guide, and the text used to generate and reshape journeys — is processed by Anthropic's Claude API. Only the text needed for that request is sent; your account identifier is not included, and Anthropic does not train its models on API data.
• Your guide's voice and the guide's memory run on our own servers, using self-hosted models. Speech and embeddings for these are not sent to any third party.
• Apple: sign-in, speech recognition, subscriptions, and notification delivery all involve Apple, under Apple's Privacy Policy.
• Expo operates the push service that forwards our notifications to Apple. It receives your device's push token and the text of the notification.
• Search: if a feature looks something up on the web for you, the search query is sent to DuckDuckGo.
• Google Calendar: if you connect it, the sign-in uses Google's OAuth and we request only read-only calendar access. That connection is also subject to Google's Privacy Policy.

Our servers are in the United States, so if you use Nanagi from the EU/EEA, the UK, or anywhere else, your data is transferred to and stored in the US. Where that transfer needs a legal mechanism, we rely on the European Commission's Standard Contractual Clauses (or the UK equivalent) with the providers above.

Security

• All connections use HTTPS.
• Account IDs are stored hashed on the server.
• Connected-calendar sign-in tokens are encrypted at rest.
• On iOS, your sign-in token is kept in the device Keychain, and the short-lived session token that authorises each request is held in memory only.

Retention and deletion

We keep your data for as long as your account exists. You can delete your account in the app (Profile → Delete Account); this immediately and permanently erases your account and everything tied to it — profile, journeys, routines, schedule, journal, chat and call transcripts, images, the facts your guide remembered, your Apple sign-in link (including the email and name Apple gave us), your push token, your subscription records, and any connected-calendar tokens and calendar data — from our servers. It cannot be undone.

Deleting your Nanagi account does not cancel an Apple subscription. Manage or cancel that in iOS Settings → your name → Subscriptions.

One exception: characters you chose to publish to the shared public catalog remain there after account deletion, attributed to your username (like forum posts that outlive their author). If you want them gone too, unpublish them before deleting your account.

Your rights

You can access and edit everything the app stores about you from within the app itself, and delete all of it as described above — that is the fastest route, and it needs no request to us.

If you are in the EU/EEA, the UK, California, or another place with similar protections, you also have the right to ask us for a copy of your data, to correct it, to have it erased, to receive it in a portable form, to object to or restrict certain processing, and to withdraw a consent you previously gave. We will never treat you worse for exercising any of these. To make a request, email admin@nassonia.com from the address linked to your Apple sign-in, or include your support reference (bottom of Profile) — on the web, your account ID. We answer within 30 days. We ask for enough to be sure it's really your account, and nothing more.

If you think we've handled your data badly, please tell us first — but you also have the right to complain to your local data protection authority (in the EU/EEA, the one where you live or work; in the UK, the ICO).

Children

Nanagi is not for children. You must be at least 13 to use it, and old enough to consent to the processing of your data where you live (16 in parts of the EU/EEA and the UK, unless a parent or guardian consents for you). We do not knowingly collect personal information from anyone under 13. If you are a parent or guardian and believe your child has created an account, email us and we will delete the account and everything in it.

Changes

If this policy changes, the new version will be posted at this address with an updated effective date.

Contact

Nassonia LLC — admin@nassonia.com