Nayan privacy policy
Last updated: October 2, 2026 (direct action buttons, one-click unsubscribe and passing an email on by email from the app)
What it is
Nayan sorts your Gmail inbox: it reads your recent emails, classifies them by urgency and shows you a one-line summary of each one. Only the accounts that the person running the service enables have access.
Which Google data it uses and why
With your permission, Nayan accesses your Gmail with the gmail.modify scope, your Google Calendar events with the calendar.events scope, and your basic Google name and email. It asks for all of them once, when you sign in. It uses them to read the emails in your inbox from the last few days and classify them. It sends an email only when you tap «Send» on a reply or pass an email on to someone by email: it stays in your Gmail as a draft for 10 seconds in case you undo it (it then deletes the draft it just created), and after that it goes out with your Gmail signature. A reply goes out in the same thread; an email you pass on goes to the person you chose, with your note, the summary and the original email forwarded with its attachments (up to 20 MB in all), which it reads from your Gmail only to send them. It deletes nothing else. Your inbox changes only when you ask: it adds the app's own labels (for example nayan/done) when you mark an email as done, pass it on or say it does not interest you, and it moves the senders you choose to Spam (and moves them back if you undo it). If you mark a sender as «always spam», it does the same with whatever arrives from them. If you use «Sort my inbox», it reads the sender and the subject (not the body) of the emails from the months you choose and applies to them the label of each section you confirm; it does not archive anything either. Every change is logged and can be undone from the app. Your calendar is not touched yet; scheduling will come later, and also only when you ask for it. The Gmail scope does not allow deleting emails permanently. On the home page, if your browser already has a Google session open, Google may offer to sign you in with that account in one tap: for that, the home page loads the Google Identity Services script and Nayan receives only your name, email and photo to recognize you. If it is your first time or a permission is missing, Google's usual permission screen follows.
What it stores
For each email it stores only the sender, the subject, the date, the classification (urgency, topic, section and the alias it arrived at, if any) and the one-line summary it generates, with its reason. It does not store the body of the emails or their attachments. If an email asks for a reply, it stores the proposed reply it writes (and whatever you change in it) until you send it or for 7 days; after that it deletes the text and keeps only whether it was sent and whether you edited it. If you use «Sort my inbox», it stores, for each sender of those months, how many emails they sent and up to 5 sample subjects, plus your sections with what you decided about each proposal (accepted, rejected, renamed or removed), to make better proposals next time. It also stores your name, your email and the access permission to your Google account (Gmail and Calendar), encrypted. It also logs each run (when it happened, how many emails it processed and its cost), what each use of the model costs in your account (tokens and dollars, without the text) and every change it made in your Gmail (what, when and whether it was undone). The spoken bulletin (its text and its audio) is kept for 30 days and then deleted. When an email from a verified sender (Gmail's DMARC check) asks for something one of its own links does, such as reviewing your account activity, it keeps that link, encrypted, and the button's short name, to show you the button. When an email offers a one-click unsubscribe (the List-Unsubscribe-Post header), it stores that link, encrypted, for “Unsubscribe”; it never sends an email to unsubscribe you.
Who it is shared with
To classify, the text of each email (sender, subject and an excerpt of the body) is sent to Anthropic's Claude API, which processes it and returns the classification. To propose a reply, the latest messages of the thread are sent too. For «Sort my inbox», the senders are sent with up to 5 sample subjects each, without the body. For the spoken bulletin, the summaries already classified go back to Claude to write the script, and the script is sent to Cartesia, which turns it into audio in parts the first time you open the app or tap listen. The service runs on Vercel and the database on Neon. None of this is sold, used for advertising or shared with anyone else.
Limited use of Google data
The use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is not used to train generalized artificial intelligence models.
How to delete your data
You can remove access at any time from the permission settings of your Google account. To delete everything stored about you, write to the contact below and it will be deleted.