Nayan privacy policy
Last updated: October 9, 2026 (it can receive what other services you connect send it, through inbound hooks)
What it is
Nayan sorts your Gmail inbox: it reads your recent emails, classifies them by urgency and shows you a one-line summary of each one. Only the accounts that the person running the service enables have access.
Which Google data it uses and why
With your permission, Nayan accesses your Gmail with the gmail.modify scope and your basic Google name and email. It asks for them when you sign in. Only if you tap «Connect contacts» in Settings > Connectors, it also reads your Google Contacts with the contacts.readonly scope: the names, emails and phone numbers of your saved contacts, to put each one on its card in People, and it reads them again once a day. It never changes or deletes a contact, and no AI reads them when they come in. It uses them to read the recent emails in your inbox and classify them. It sends an email when you tap «Send» on a reply or pass an email on to someone by email: it waits a few seconds as a draft in your Gmail in case you undo it, and then it goes out with your Gmail signature. A reply goes out in the same thread; an email you pass on goes to the person you chose, with your note, the summary and the original email forwarded with its attachments, which it reads from your Gmail to send them. It changes your inbox when you use its features: it adds the app's own labels (for example nayan/done) when you mark an email as done, pass it on or say it does not interest you, and it moves to Spam the senders you choose and to the Trash the emails you choose (Gmail deletes them from there after 30 days; until then you can bring them back). If you mark a sender as «always spam», it does the same with whatever arrives from them. If you put a sender on «Always to trash», it moves whatever arrives from them to the Trash; and if you turn on «Clear disposable noise», the AI moves to the Trash the noise it is sure is worthless, only from senders you never wrote to and never with an attachment, an amount or anything about access or security. When your own gestures with a sender are clear, it also does by itself what you always do with their emails: it sets them aside and archives them, sends them to Spam, moves them to the Trash, marks them done, files them in a section, and, after telling you a day before, passes them on to the person you always pass them to or unsubscribes you with one click; never with security emails, the people in your People, or emails with an attachment, an amount or anything about access. It lists what it did by itself in Settings > Learning, where you can undo it for 30 days or turn it off. If you sort past months in «Sections and rules», it reads the sender and the subject of the emails from the months you choose and applies to them the label of each section you confirm. The app logs the changes it makes in your Gmail. The Gmail scope does not allow deleting emails permanently. On the home page, if your browser already has a Google session open, Google may offer to sign you in with that account in one tap: for that, the home page loads the Google Identity Services script and Nayan receives your name, email and photo to recognize you. If it is your first time or a permission is missing, Google's usual permission screen follows.
What it stores
For each email it stores the sender, the subject, the date, the classification (urgency, topic, section and the alias it arrived at, if any) and the one-line summary it generates, with its reason. It does not store the body of the emails or their attachments. If an email asks for a reply, it stores the proposed reply it writes (and whatever you change in it) for a limited time; after that it deletes the text and keeps only whether it was sent and whether you edited it. If you sort past months in «Sections and rules», it stores, for each sender of those months, how many emails they sent and a few sample subjects, plus your sections with what you decided about each proposal (accepted, rejected, renamed or removed), to make better proposals next time. It also stores your name, your email and the access permission to your Google account (Gmail), encrypted. It also logs each run (when it happened, how many emails it processed and its cost), what each use of the model costs in your account (tokens and dollars, without the text) and the changes it made in your Gmail. The spoken bulletin (its text and its audio) is kept for a limited time and then deleted. When an email from a verified sender (Gmail's DMARC check) asks for something one of its own links does, such as reviewing your account activity, it keeps that link, encrypted, and the button's short name, to show you the button. When an email offers a one-click unsubscribe (the List-Unsubscribe-Post header), it stores that link, encrypted, for “Unsubscribe”. If you use Ask, it keeps your conversations (your questions, its answers and what it did, with what is needed to undo it) for a limited time, so you can follow up or undo; you can delete them at any time from Ask. If you create inbound hooks, it stores what the services you connect send to them (encrypted) and the one-line card it writes from it, for a limited time; of each hook it keeps its name, your description and only a fingerprint of its address.
How long it keeps your data
What it stores about your emails, both what they said (subject, summary and reason) and what you did with each one (done, dismissed, passed on or replied), is kept for as long as the service needs it and is deleted periodically. A record of what you did (the gesture, the sender and its domain, and the category before and after, never what the email said) is kept while your account exists, so it learns your habits. From that record it keeps, per sender, domain and topic, how often you did each thing, with older gestures weighing less. A topic's short name is kept only while the topic is in use, and deleted once it falls out of use. If you change a reply it proposed before sending it, it keeps what it proposed and what you sent only until it learns from them how you like replies written (length, greeting, sign-off and tone), and never longer than what your emails said; that short style note is kept until you delete it in Settings, Learning. Once a week it also writes, in a few sentences, the preferences your corrections show (for example, "supplier invoices are informative"); they are listed in Settings > Learning, where you can edit or delete them, and are kept while your account exists. One you delete is kept only so it is not written again, and is erased after 180 days. What you decide (your rules, the senders you marked as spam, your sections and the suggestions you accepted or declined) is kept while your account exists. The email itself stays in your Gmail.
Who it is shared with
To classify, the text of each email (sender, subject and an excerpt of the body) is sent to Anthropic's Claude API, which processes it and returns the classification. Once a week, to write the preferences it learned, your corrections of that week (the sender, the subject while it is kept, and where you moved the email), the habits it sees and your criteria, sections and people are sent too, without the body. To propose a reply, the latest messages of the thread are sent too. To sort past months in «Sections and rules», the senders are sent with up to 5 sample subjects each, without the body. For the spoken bulletin, the summaries already classified go back to Claude to write the script, and the script, with a greeting that says your first name, is sent to Cartesia, which turns it into audio in parts the first time you open the app or tap listen. To turn what arrives through an inbound hook into a card, what was received and your description of the hook are sent to Claude too. The service runs on Vercel and the database on Neon. None of this is sold, used for advertising or shared with anyone else.
Limited use of Google data
The use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is not used to train generalized artificial intelligence models.
How to delete your data
You can remove access at any time from the permission settings of your Google account. To ask for the data stored about you to be deleted, write to the contact below.