Privacy policy

Last updated 17 October 2026

nanou is a private assistant for families. Your family's data is used to help your family, and for nothing else: no ads, no selling data, no training AI models on it.

The short version

• The website keeps only what it needs to run your account: your Google name, email and photo, your plan and billing status, and which connectors are switched on.
• Your messages, files and the data from connected services live in your family's own assistant, a separate container that no other family shares. The website never stores your passwords or account tokens.
• Your assistant is built to run inside your family's own hardware-sealed enclave, on open-weights models that are never trained on your family.
• Anything that sends or changes data (an email, a calendar invite, a WhatsApp message) waits for a family member's approval in Telegram.
• You can see, export or delete your data at any time by writing to us.

Who we are

nanou (“we”) is the data controller for the website and the service. Contact: hello@nanou.ai.

What we collect

On the website (nanou.ai)

• Account: the name, email address and profile photo from Google Sign-In, your role, and when you last signed in.
• Household: your family's name, plan, trial end date, and the invites sent to join it.
• Billing: your Stripe customer and subscription IDs and the subscription status. Card details go straight to Stripe and never reach us.
• Connectors: which services are connected and a short label such as the connected Google address. Never passwords, tokens or keys.
• Invite requests: the name, email and household name you enter in the waitlist form.

In your family's assistant

• The messages, voice notes, photos and files you send it in Telegram, and its replies.
• What it remembers for you (notes, preferences, ongoing projects) and the files it works on.
• Data it reads from the services you connect, only when a task needs it: email, calendar, documents, contacts, WhatsApp chats, bank transactions, crypto balances, tasks.
• The access tokens and keys for those services, sealed inside your family's enclave.

How your family's data is protected

• One enclave per family. Each family runs in its own Intel TDX trust domain, with its own storage, network and user. Memory is encrypted by the CPU, and no other family can reach it.
• Open-weights models. The AI model runs inside your enclave. Open weights, auditable, and never trained on your family.
• Remote attestation. Your enclave proves which code it runs before any key is released to it.
• Keys stay home. Account tokens are sealed inside your enclave. The website never stores them, and there is no shared database of secrets.
• Read-only by default. Connected services are read-only wherever they allow it. The assistant can never move money, and bank and crypto connections are view-only.

nanou is in private preview. Confidential-computing hardware and in-enclave open-weights inference are being rolled out across preview households.

Google user data

You can connect a Google account so the assistant can help with your email, calendar, documents and contacts. This is a separate step after sign-in, and you choose which account to connect. nanou asks for:

• Gmail: read and search your mail, prepare drafts, label and archive messages, and send email you have approved.
• Calendar: read your events and add or change events you ask for.
• Drive: find, read and file documents, and save files the assistant creates for you.
• Contacts: look up people's email addresses and phone numbers (read-only).

We use this data only to do what you or your family ask the assistant to do. In particular:

• We don't use it for advertising, sell it, or use it to build profiles.
• We don't use it to train or improve AI or machine-learning models, ours or anyone else's.
• We pass it to others only to provide the feature you asked for (for example, the parts of an email the AI model needs to summarise it), to comply with the law, or to keep the service secure.
• Nobody reads it unless you ask us to (for example, to fix a problem), it is needed for security or the law, or it has been made anonymous.
• Sending or changing anything in your Google account waits for a family member's approval.

nanou's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your Google tokens are sealed inside your household's enclave. Only your household's assistant can use them. Not even nanou can read them.

You can disconnect at any time from your Google account permissions, or by asking us. The tokens are then deleted from your enclave.

Who processes data for us

Services you connect yourself (WhatsApp, Coinbase, Asana and others) keep processing your data under their own privacy policies. Some providers are based outside the EU. Where they are, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

Telegram can read messages sent to bots, because bot chats aren't end-to-end encrypted. Avoid sending passwords or card numbers in the chat.

Why we may use it (legal bases)

• To provide the service you signed up for (contract): your account, your assistant and your connectors.
• To meet legal obligations: keeping billing and tax records.
• Our legitimate interest in keeping the service secure and answering invite requests.
• Your consent for each service you connect. You can withdraw it by disconnecting.

How long we keep it

• Account and household data: while your account is open. We delete it within 30 days after you close it.
• Your family's enclave, with everything inside it (the assistant, its memory, files and tokens): wiped within 30 days after the household closes. Its encryption keys are destroyed with it, so nothing can be recovered, not even by nanou.
• Invite requests: until we send the invite, or 12 months, whichever comes first.
• Billing records: as long as tax law requires (10 years in France). Stripe keeps its own records.

Cookies

We only use cookies that are needed for the site to work: one that keeps you signed in, and a short-lived one that protects the Google connection step. No analytics, advertising or tracking cookies.

Your rights

You can ask to see, correct, export or delete your data, to restrict or object to how we use it, and to withdraw your consent. Write to hello@nanou.ai. We answer within a month. You can also complain to your local data protection authority. In France that is the CNIL.

Children

Accounts are for adults. Children can be part of a family's Telegram group only if a parent adds them and stays responsible for how they use the assistant.

Changes

If we change this policy, we update the date at the top. For important changes we also let account holders know by email before they apply.

Questions? Write to hello@nanou.ai.