Privacy Policy

Last updated: 30 October 2026

Dana is operated by its founder, Azim Tukaev, Dubai, United Arab Emirates ("we", "us"). This policy explains what data the Dana app and services use, why, and how you control it. Contact: azim@danauae.com.

What we collect

Account: your email address and the name you give Dana.
Things you share with Dana: chat and voice messages, photos and documents you send for review, reminders, rules and preferences you ask Dana to remember.
Email and calendar (only if you connect them): with your permission, Dana reads messages and events from your Gmail or Outlook account to find what needs your attention, prepares replies, and creates or changes calendar events at your request. Emails are sent only after you confirm, or under a rule you set.
Contacts (only if you allow it): names and phone numbers, so you can ask Dana to call someone by name.
Location (only if you allow it): where you are, to help with routes and nearby tasks. Location history is kept for 7 days.
Phone calls Dana makes for you: the number called, the transcript and a short summary.
Business messaging (business accounts only, when you connect it): messages between your company and its customers in WhatsApp, Telegram and Instagram, notes your team adds, and bookings Dana makes.
Customer search (only if you turn it on): Dana reads new messages in public Telegram groups and public Reddit communities and shows you posts from people looking for what you offer — the text of the post and the author's public name and username. Found posts are shown to you for 3 days. Dana never messages these people on her own: you decide whether to contact them.
Feedback on answers: when you rate one of Dana's answers or report it, we keep the rating, the reason, your comment and the answer itself — only to review reports and improve Dana.
Technical data: push notification tokens, app version and error logs.

How we use it

Only to provide Dana's features to you: understanding your requests, preparing decisions and reminders, making calls and bookings, replying to your customers within your rules, and keeping a log of every action Dana takes. We do not sell your data and we do not use it for advertising.

How Dana uses third-party AI

Dana is an AI assistant: to understand your requests, voice, photos, documents and emails, and to reply to your customers, she sends the data needed for each task to third-party AI services. Before any of your data is sent, the app asks for your consent on a dedicated screen after you sign in. You can view or withdraw this consent at any time in Profile → Data and privacy → AI and your data. Without consent, Dana's AI features do not work.

Which AI services receive data

Google (Gemini API) — understanding and answering your messages and your customers' messages, summaries, translation and the read-aloud voice.
OpenAI (API) — live voice conversations, speech-to-text and some text tasks.
Anthropic (Claude API) — reading documents and complex text tasks.
Vapi, Twilio and Deepgram — phone calls Dana makes at your request and speech recognition during those calls.

What data types are sent (only what the specific task needs)

Messages and voice requests you send to Dana.
Photos and documents you send for review.
Emails and calendar events — only if you connect your email or calendar.
Customer messages on WhatsApp, Instagram and Telegram — only for business accounts that connect these channels, so Dana can reply within the business's rules.
The conversation during phone calls Dana makes at your request.
Relevant context Dana remembers about you (for example your name and preferences) when it is needed to answer.

Retention and use by AI providers

Data is sent through the providers' business APIs under agreements that do not allow them to use it to train their models.
Providers may keep request data for a limited period for abuse and security monitoring under their API terms (for OpenAI and Anthropic, up to 30 days), then delete it.
Dana itself stores your data in Supabase while your account exists; documents are kept for the period you choose in the app. Deleting your account deletes your data.
We do not sell your data and do not use it for advertising.

Services that process data for us

To work, Dana uses trusted providers that process data on our behalf: Supabase (secure database and storage), Google (Gemini AI models), OpenAI and Anthropic (AI models for voice, transcription and documents), Vapi, Twilio and Deepgram (phone calls and speech recognition), Meta (WhatsApp Business Platform and Instagram), Telegram (Telegram Business and bots), Google and Microsoft (email and calendar, only when you connect them), and Expo (push notifications). They receive only what is needed for the task.

Google user data

Dana's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail and Calendar data is used only to provide the features you see in the app; it is not used for advertising, not sold, and not used to train general AI models. People do not read it, except with your explicit consent, for security purposes or where required by law.

How long we keep data

Account data: while your account exists.
Documents: as long as you choose in the app (immediately after review, a month, a year or always).
Location history: 7 days.
Everything else: until you delete it or delete your account.

Your control

You can disconnect email, calendar, contacts and location at any time, and delete your data in the app under Profile → Data and privacy. See Delete your data. You can also ask us to access, correct or delete your data by writing to azim@danauae.com.

Security

Data is transferred over encrypted connections, access tokens for connected accounts are encrypted, and each user can access only their own data. Dana never stores passwords, one-time codes or card numbers from your messages.

Children

Dana is not intended for children under 18.

Changes

We will update this page when the policy changes and show the date above.