Protecting your family's data is our responsibility
We built Anna to handle the most personal parts of your family life. Here's how we protect it.
Secure by design
Security is not a feature we added later. It is how we built Anna from day one. Your family's data is encrypted in transit and at rest, and it is never sold.
Encrypted everywhere
All credentials are encrypted with AES-256-GCM. Data moving between your devices and Anna is protected with TLS.
Fully isolated
Each household's data is completely separated at the database level. No other family can see yours. No data is shared between accounts, ever.
Always in your control
Disconnect integrations, delete individual items, or delete your account at any time. Your data, your call.
How we work with AI
Anna uses AI models from several providers to understand your family's needs and take action on your behalf. Here's what that means for your data.
Encrypted on the way
When Anna sends something to an AI model, like an email to read or a reply to draft, it travels over an encrypted connection.
Only what's needed
We send the minimum context required for Anna to be helpful. We don't send your entire history with every request.
Ask us directly
Questions about the AI providers Anna uses and how they handle data? Write to support@hianna.ai and we'll give you a straight answer.
Verified by third parties
We don't just ask you to take our word for it. Anna has passed the independent security assessment Google requires before an app can read your Gmail or Calendar.
Google CASA certified
Anna has passed Google's Cloud Application Security Assessment (CASA), an independent third-party audit that covers data handling, authentication, and vulnerability management. Google requires this before any app can access your Gmail or Calendar.
Enterprise-grade policies
Our team built and shipped enterprise software under SOC 2 audit requirements. Those same security policies, access controls, and incident response procedures form the foundation of how we operate Anna today.
What we never do
Sell your data to advertisers or third parties
Store integration credentials unencrypted
Share your data between households
Access your accounts without your explicit connection
Questions families ask us
Straight answers to what people most want to know before they connect their family's email, calendar, and messages.
Anna reads connected email and calendars to find useful details such as dates, tasks, and people involved. She can change calendar events and perform supported email actions when you ask. For questions about storage and data handling, contact support@hianna.ai.
Anna keeps tasks, preferences, and chat history to help you manage family life. We also keep technical logs to investigate problems and keep Anna secure. They can include account details such as identifiers and, at times, short extracts of what Anna was working on, such as an email subject line. They are deleted automatically 60 days after they are written. For details about retention periods for messages, files, and connected services, contact support@hianna.ai.
Deleting your account in Settings removes your data and revokes access to your connected accounts. A few records outlast deletion, such as technical logs (deleted automatically within 60 days) and a minimal record that your account was deleted, kept as proof we did it. Disconnecting one integration stops future access to that source; it does not delete your Anna account. For questions about a particular item or connection, contact support@hianna.ai.
Anna has passed Google's CASA (Cloud Application Security Assessment), an independent third-party audit that Google requires before an app can access your Gmail or Calendar. We are not separately SOC 2 certified as a company yet, though our team has built and run software under SOC 2 requirements and we operate Anna on that same footing. Anna also runs on Google Cloud, whose infrastructure carries its own SOC 2 and ISO 27001 attestations. If a formal SOC 2 report matters for your decision, just ask and we will tell you exactly where we are.
You sign in to Anna with your Google or Apple account, so turning on two-factor authentication with whichever one you use protects your Anna login as well, since it is the same front door. We do not add a separate second factor of our own today, and enabling 2FA on your Google or Apple account is the strongest way to secure access.
Yes, always. Sending email is switched off by default. The first time you ask Anna to send something it asks for a one-time go-ahead, and even after that it shows you the full draft and waits for your reply before anything goes to another person. There is no mode that lets Anna email people on your behalf without showing you first, and you can switch the ability back off whenever you like.
Questions about security?
We're a small team and we take this seriously. If you have questions about how we handle your family's data, we'd genuinely love to hear from you.
Get in touch