Privacy Policy
Last Updated: July 17, 2026
1. Introduction
Welcome to Nala. This app is operated by Platin Digital. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information.
This policy describes the processing needed to operate Nala. Where consent is required—most notably before content is sent to an external AI provider—the app asks separately and records your choice.
2. Information We Collect
Information You Provide Directly
| Type of Information | Description |
|---|---|
| Account Details | Email address and display name provided through the authentication method you choose |
| Conversation Content | Text messages you send to Nala |
| Voice Recordings | Voice recordings you make, which are transcribed to text |
| Tasks | Tasks you create, including dates, reminders, and notes |
| Memories | Personal information Nala stores for long-term memory |
| Connected Gmail Data (optional) | Email headers, snippets, thread and message content, and—only when you grant draft access—the recipients, subject, and body of drafts you ask Nala to create |
Information Collected Automatically
| Type of Information | Description |
|---|---|
| Usage Data | Frequency of use, interaction times |
| Device Identifiers | Unique identifier for Push notifications |
| Technical Information | Device type, operating system version |
| Website Analytics | Page visits and related technical data collected by Google Analytics when you visit Nala's public website |
3. How We Use Your Information
We use your information only for the following purposes:
- ✅ Providing the Service - Processing your messages, managing tasks, saving memories
- ✅ Improving User Experience - Personalizing Nala's responses
- ✅ Reminders and Pings - Sending reminders and proactive check-ins
- ✅ Security - Protection against misuse
We do not sell your information, use it for targeted advertising, or use your content to train models owned by Nala. External providers process data under their own API terms as described below.
4. Optional Gmail Connection
Connecting Gmail is optional. Nala requests Gmail access only from the Connections screen and only after you choose either read-only access or read-and-draft access.
- Access and use: Nala accesses email only when you make an email-related request. It uses the minimum relevant messages to search, read, summarize, or answer your request.
- Drafts, not sending: With read-and-draft permission, Nala can save a draft you explicitly request. Nala does not send email; you review and send drafts from Gmail.
- Processing and sharing: The relevant email content is transmitted securely through Nala's backend and to the active AI provider solely to complete your request. Google user data is not used for advertising, user profiling, or training generalized AI models.
- Storage: Nala does not store your Google OAuth access token in its database or create a separate copy of your mailbox. Your request and Nala's resulting answer may remain in chat history until you delete them.
- Control: You can disconnect Gmail from Nala's Connections screen at any time. This revokes Nala's Google access. You can also revoke access from your Google Account settings.
Nala's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. AI Processing
Nala asks for your explicit permission before sending content to an external AI provider. If you agree, the selected feature may send your message, image or audio, together with relevant context such as tasks, memories or connected Gmail content needed for your request. You can decline and continue using non-AI features, or withdraw permission in Settings.
| Provider | Usage |
|---|---|
| Google Gemini | Natural language processing and responses |
| Groq (Whisper) | Voice recording transcription |
| xAI (Grok) | Supplementary AI processing |
| Venice AI (DeepSeek V4 Flash) | Free-tier AI response generation |
Nala uses provider APIs under their applicable business/API terms and configures them only to provide the requested feature. Each provider's processing and retention are also governed by its own terms and privacy documentation.
6. Data Storage and Security
Your information is stored on Google Firebase servers (Google Cloud Platform).
Security
We use technical and organizational safeguards appropriate to the service, including:
- Encrypted connections to Firebase and external providers
- Encryption at rest provided by the managed cloud services we use
- Firebase Authentication, per-user access controls, and server-managed billing fields
- App attestation, request limits, restricted service credentials, and content-free operational logs
No system can guarantee absolute security. Please contact us if you believe your account or information has been compromised.
Data Retention
| Data Type | Retention Period |
|---|---|
| Conversation History | Until you delete it |
| Memories | Until you delete them |
| Voice Recordings | Nala does not retain the raw recording in its database after processing; the resulting transcript may be saved. Temporary provider processing is governed by the provider terms described above. |
| Account Data | Until account deletion. Deletion also requests removal of Nala-managed provider-side AI stores; providers may retain limited records where required by their terms or law. |
7. Third-Party Sharing
We share information only with the following providers, solely for providing the service:
| Provider | Purpose |
|---|---|
| Google Firebase | Storage and authentication |
| Google AI and Cloud services | Gemini responses, file search, text-to-speech, and related AI processing |
| Google Analytics (website only) | Understanding use of Nala's public website; not used by Nala for targeted advertising |
| Groq API | Voice transcription |
| xAI Grok API | Supplementary AI processing |
| Venice AI (DeepSeek V4 Flash) | Free-tier AI response generation |
We do not sell your information or share it except with the service providers described above as necessary to provide the features you request.
8. Your Rights
In accordance with privacy laws (including GDPR and CCPA), you have the following rights:
| Right | Description |
|---|---|
| Access | Request a copy of all your information |
| Correction | Correct inaccurate information |
| Deletion | Delete all your information ("right to be forgotten") |
| Portability | Receive your information in a readable format |
| Objection | Object to certain processing of your information |
| Withdraw AI Consent | Turn off external AI processing in app settings at any time |
How to Exercise Your Rights
- Account Deletion: Available in app settings
- Additional Requests: Contact us at: nalaassistant@proton.me
9. Children and Minors
This app is intended for users aged 17 and older.
We do not knowingly collect information from children under 17. If we learn that we have collected information from a user under 17, we will delete this information immediately.
10. Policy Changes
We may update this policy from time to time. In case of material changes:
- We will send a notification in the app
- We will update the "Last Updated" date at the top of this document
If a change materially expands external AI processing, Nala will request a new version of your consent before sending content under the changed scope.
11. Contact Us
For questions regarding this privacy policy or requests related to your information:
Platin Digital
Shahaf Platin
Israel
📧 nalaassistant@proton.me