Protecting your family's data is our responsibility
We built Anna to handle the most personal parts of your family life. Here's how we protect it.
Secure by design
Security is not a feature we added later. It is how we built Anna from day one. Every piece of your family's data is protected by the same standards used by banks and healthcare providers.
Encrypted everywhere
All credentials are encrypted with AES-256-GCM, the same standard used by banks. Data moving between your devices and Anna is protected with TLS.
Fully isolated
Each household's data is completely separated at the database level. No other family can see yours. No data is shared between accounts, ever.
Always in your control
Disconnect integrations, delete individual items, or wipe your entire account at any time. Your data, your call.
How we work with AI
Anna uses leading foundation models to understand your family's needs and take action on your behalf. We've chosen AI providers with the strongest privacy commitments, and here's what that means for your data.
Zero data retention
The AI providers we use operate under zero-data-retention policies. Your family's information is processed in real time and never stored on their servers.
Not used for training
Your conversations, tasks, and family details are never used to train public AI models. Your data helps Anna help you, and nothing else.
Only what's needed
We send the minimum context required for Anna to be helpful. We don't send your entire history with every request.
Verified by third parties
We don't just ask you to take our word for it. Independent security assessments verify that Anna meets the standards required to handle your most sensitive data.
Google CASA certified
Anna has passed Google's Cloud Application Security Assessment (CASA), an independent third-party audit that covers data handling, authentication, and vulnerability management. Google requires this before any app can access your Gmail or Calendar.
Enterprise-grade policies
Our team built and shipped enterprise software under SOC 2 audit requirements. Those same security policies, access controls, and incident response procedures form the foundation of how we operate Anna today.
What we never do
Sell your data to advertisers or third parties
Use your family's information to train public AI models
Store integration credentials unencrypted
Share your data between households
Access your accounts without your explicit connection
Keep your data after you ask us to delete it
Questions families ask us
Straight answers to what people most want to know before they connect their family's email, calendar, and messages.
Anna reads your email and calendar so it can turn them into tasks, reminders, and briefings. To do that it reads the full message, then keeps mainly the useful details it pulls out, like a due date, a task, or who is involved, along with anything you ask it to remember. The raw email text is held only briefly while it is processed and is then removed automatically. Anna only reads your Gmail and Calendar. It never edits or deletes anything in them, and it only creates or changes a calendar event when you ask it to.
We try to keep as little as we can for as long as it is genuinely useful, and we clean up the rest automatically. Today that means the raw copies of your incoming emails and messages are deleted within about two weeks, and files you send, like photos or PDFs, within about three days. The useful things Anna builds for you, such as your tasks, calendar, saved preferences, and your chat history with Anna, stay while your account is active so the assistant keeps working for you. To be straight with you: these timeframes are how we run things today and how we intend to keep running them. We may adjust the exact windows over time, but always in the same spirit of holding on to what helps you and letting go of the rest.
Deleting your account from Settings removes your data from our database and revokes Anna's access to your connected accounts. We keep only a small record that the deletion happened, plus your past invoices for accounting. Disconnecting a single integration is different: it stops Anna from reading that source going forward and removes the stored connection, but anything Anna already saved for you, like a task or a preference, stays until you remove it or delete your account. If you want everything gone, deleting your account is the clean sweep.
Anna has passed Google's CASA (Cloud Application Security Assessment), an independent third-party audit that Google requires before an app can access your Gmail or Calendar. We are not separately SOC 2 certified as a company yet, though our team has built and run software under SOC 2 requirements and we operate Anna on that same footing. Anna also runs on Google Cloud, whose infrastructure carries its own SOC 2 and ISO 27001 attestations. If a formal SOC 2 report matters for your decision, just ask and we will tell you exactly where we are.
You sign in to Anna with your Google or Apple account, so turning on two-factor authentication with whichever one you use protects your Anna login as well, since it is the same front door. We do not add a separate second factor of our own today, and enabling 2FA on your Google or Apple account is the strongest way to secure access.
Yes, always. Sending email is switched off by default. The first time you ask Anna to send something it asks for a one-time go-ahead, and even after that it shows you the full draft and waits for your reply before anything goes to another person. There is no mode that lets Anna email people on your behalf without showing you first, and you can switch the ability back off whenever you like.
Questions about security?
We're a small team and we take this seriously. If you have questions about how we handle your family's data, we'd genuinely love to hear from you.
Get in touch