Privacy

Last updated 31 August 2026

Nara is a WhatsApp assistant operated for a named group of people — an individual, a family, or a small team. Each installation serves only the people its owner has added. There is no public sign-up and no shared pool of users.

Whose data, and who can reach it

Every person connects their own accounts. One person's mail, calendar, files, reminders, notes and memory are never reachable from another person's conversation, in either direction — including the person who administers the installation. Knowledge is shared only when someone explicitly asks for it to be.

Nobody can connect an account on another person's behalf. Each person approves their own, in their own browser, with their own password. No operator or administrator ever handles anyone's credentials.

What she accesses

With each person's explicit consent, and only for that person:

Google — gmail.readonly, gmail.send, calendar.readonly, calendar.events and drive.

Microsoft — Mail.Read, Mail.Send, Calendars.ReadWrite, Files.ReadWrite, User.Read and offline_access.

These allow her to read mail, send mail, read and create calendar events, and read, create and organise files. What she deliberately cannot do matters as much:

She cannot delete anything. No delete tool exists. "Delete this file" moves it to a holding folder. She cannot empty a trash, cancel an event, or bulk-delete mail.
She cannot modify or archive mail. The Gmail scope granted is read-and-send, never gmail.modify, so Google itself enforces this regardless of any bug in her code.
She cannot send anything to another person without approval. Emails, meeting invitations with guests and shared files are shown in full to the person first and go only when they say so.

What she stores

A refresh token per connected account, so consent is not requested repeatedly.
Recent WhatsApp conversation context, so she can follow a conversation. Deleted automatically within hours.
What each person asked her to keep — reminders, notes and remembered facts. Kept until deleted.
Token counts per message, for billing and capacity. Numbers only, never message content.

Storage is Cloudflare Workers KV and Cloudflare D1. Mail, calendar entries and files are not copied into storage; they are read at the moment they are needed. The one exception is stated plainly below.

One thing worth knowing. Reading a Word, Excel or PowerPoint file requires converting it, and the converted copy is saved into that person's own Google Drive, in a folder named for the purpose. It is theirs, in their account, and Nara says where it went each time. Nothing is copied anywhere else.

Who else sees it

Message content, and the content of files a person asks her to read, are sent to Anthropic's API so that a Claude model can generate a reply. When a question needs current information, the search query — not the person's mail or files — is sent to Anthropic's server-side web search.

Nothing is sold, shared with advertisers, or used to train anyone's model. Google and Microsoft user data is never transferred to any third party beyond what is described here.

Revoking access

Any person can withdraw Nara's access to their own account at any time, without involving anyone else:

Google — myaccount.google.com/permissions
Microsoft — myaccount.microsoft.com → Privacy → Apps and services

Either takes effect immediately and permanently ends her ability to read anything from that account. Removing a person from an installation deletes their stored tokens outright.

Contact

hello@asknara.app