Privacy Policy

1. Introduction

Ranya is a productivity app for tasks, calendar, notes and email, with an AI assistant you can type or talk to. This policy explains what information Ranya collects, why, who it is shared with, how long it is kept, and the choices you have. It covers the website at www.ranya.app, the desktop app for Mac and Windows, and the iPhone app.

In this policy, "Ranya", "we" and "us" mean the operator of Ranya, Shekib Aziz, in the United States.

2. Information We Collect

2.1 Your account

• Your email address and password (we store only a secure hash of the password).
• Your name and profile photo, if you add them.
• Your settings, such as time zone, notification preferences, chosen AI model and voice settings.
• Your plan and billing status (for example, Free or Pro, and whether a subscription is active).
• How you found Ranya when you signed up: the referring site, the page you landed on and campaign tags in the link, if any.

2.2 What you create in Ranya

• Boards, lists and tasks, with their dates, reminders, checklists, tags and links.
• Notebooks, folders and notes.
• Goals, habits and their check-ins, focus sessions, and the daily brief written for you.
• Files and images you attach to tasks, notes or chats, and images the assistant creates for you.
• Your conversations with the assistant, including the tools it used and what they returned. A voice call is saved as a written transcript in a chat. The audio itself is not stored.
• Facts the assistant remembers about you from your chats and calls, which you can see, edit and delete.
• The text of what you dictate, kept in your dictation history. Dictation audio is not stored by us.

2.3 Gmail, if you connect it

Connecting Gmail is optional. When you connect it, you grant Ranya these Google permissions: read, compose, send and modify your email (gmail.readonly, gmail.compose, gmail.send, gmail.modify), and see your Google account's email address and basic profile (userinfo.email, userinfo.profile).

• Stored by us: the connected account's email address, name, picture and Google ID; the access and refresh tokens that let Ranya reach your mailbox; and, for the emails you link to a task or note, or that you sort with Ranya's triage, the thread's subject, sender name and sender address, with the action you chose. If you ask the assistant about an email, what it read appears in that chat and is kept with the chat.
• Not stored by us: the full content of your mailbox. Messages are fetched from Gmail when you open them, and drafts are saved in Gmail.

2.4 Open tracking, if you turn it on

Open tracking is off until you turn it on, with the eye beside Send. While it is on, each email you send from Ranya carries a small invisible image, and when the recipient's mail app loads it, Ranya records an open. An open is a hint, not proof: some mail apps load images on their own, and some never load them.

• Stored by us, only for emails sent while open tracking is on: the subject, the recipients (their addresses and the names shown in Ranya), when the email was sent, and for each open its time, its kind (opened, may have opened, or automatic) and which family of mail app loaded it.
• Never stored: the recipient's IP address, location, device or full user agent.
• Opens stop being recorded 90 days after the email was sent.

If you or your recipients are in the EEA or UK: people there may expect to be told when an email they receive is tracked. Turning open tracking on is your choice, and you can turn it off at any time.

2.5 Calendars you add

If you add a calendar by its private feed address (iCal), we store that address and the events from it (title, time, location and description) so they appear in Ranya.

2.6 Usage and diagnostics

• Which days you used Ranya and how many assistant messages you sent per model, which we use for plan limits and to understand how Ranya is used. For each AI request we record the feature, model, size and speed, never its content.
• Error reports and performance measurements, linked to your account, so we can find and fix problems. On the website, a small sample of signed-in sessions may be recorded for the same reason, with all text hidden and all images and media blocked. This recording is never on in the iPhone app.
• If you use Report a problem, your message and, if you choose, a screenshot.
• On the website and the desktop app, anonymous visit statistics through Google Analytics. The iPhone app does not use Google Analytics.

3. How We Use Your Information

• To provide Ranya: show and sync your data, send reminders, and run the features you use.
• To run the AI features you use, as described in section 4.
• To handle your subscription and payments.
• To email you: the emails that let you sign in, and news and offers about Ranya, which you can unsubscribe from.
• To answer you when you contact us.
• To keep Ranya secure, prevent abuse and enforce limits.
• To fix problems and improve Ranya.

We do not sell your personal information, and we do not use it for advertising. The news and offers we email are about Ranya itself, never anyone else's products, and each one has an unsubscribe link.

4. AI Features

To answer you, the assistant sends AI providers what you ask, along with the content it needs: the tasks, notes, events, emails, goals or memories involved, and any files you attach. This happens when you use the assistant, a voice call, dictation or an AI writing tool, and for these features that run for you in the background:

The assistant and voice calls also receive your name, your plan and whether Gmail is connected, so answers fit you.

• Email triage and drafts: for emails you sort with Ranya, the sender, subject, a short snippet and your past choices for that sender, to suggest an action or draft a reply.
• Daily brief: your goals, habits, recent check-ins, remembered facts and how busy your day is, to write the brief.
• Filing: a new task's text and your boards' names, to suggest where it belongs.
• Memory: after each chat reply and at the end of each voice call, what you said and the facts Ranya already remembers about you, to keep anything new worth remembering. You can see, edit and delete these in Settings, under Memory.

The providers are:

• OpenRouter, which passes each request to the model you chose, from Anthropic, OpenAI, Google, xAI, DeepSeek or Meta, and which provides web search when it is on. Dictation audio is transcribed by Microsoft's model through OpenRouter.
• Groq, for dictation: transcribing audio when needed, and tidying up the text.
• Google Gemini, for voice calls: your voice and the content the assistant looks up during the call.

These providers process your data to produce the answer, under their own terms and privacy policies, including how long they keep it. In the iPhone app, Ranya asks before anything is sent to them, and you can change your answer in Settings. You can also turn off web search for the assistant.

5. Who We Share Information With

We share information only with the services that run Ranya for us:

• Supabase: our database, sign in and file storage.
• Vercel: hosts the website and passes your requests on to our servers.
• Railway: runs our servers.
• OpenRouter, Groq and Google: AI, as described in section 4.
• Google: Gmail, when you connect it, and Google Analytics on the website.
• Google or Apple: sign in, only if you choose Continue with Google or Continue with Apple. The one you pick learns that you are signing in to Ranya and gives us your email address and name.
• Stripe: payments. Stripe receives your email and account ID; your card details go directly to Stripe and never to us.
• Sentry: error reports and performance measurements.
• Loops: email. Loops sends the emails that confirm your address, sign you in and reset your password. It also holds your email address, account ID, plan, sign-up date and the last day you used Ranya, so we can send you product news and offers. If you joined a waitlist with an address that has no Ranya account and were let in, it holds that address only to tell you about what you joined, and we send it nothing else. Unsubscribing from any of these emails stops them all; the emails you need to sign in still arrive.
• Your browser's push service (Apple, Google or Mozilla): the title and text of a reminder, if you turn on notifications.
• Anthropic's Claude, only if you connect Ranya to Claude: Claude can then read and change your Ranya data, including your email, when you ask it to, under Anthropic's terms.
• Discord and YouTube: only if you open the community chat or play a video inside Ranya, under their own policies.

We may also disclose information when the law requires it, to protect Ranya or its users from fraud or abuse, or to a successor if Ranya is sold, in which case you will be told.

6. Google API Services User Data Policy

Ranya's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Gmail data only to provide the email features you use in Ranya.
• We send Gmail data to the AI providers in section 4 only to run the features you use, and never to train AI models.
• We do not use Gmail data for advertising, and we do not sell it.
• No person reads your Gmail data, unless you ask us to for support, it is needed for security, or the law requires it.

7. How We Protect Your Information

• All data travels over encrypted connections (TLS).
• Data is stored encrypted at rest by our database provider.
• Database rules limit every record to the account that owns it, so other users cannot reach your data.
• Attachments are private and opened through short-lived links. Profile photos are public.
• Access by us is limited to what is needed to run, secure and support Ranya.

No method of storage or transmission is perfectly secure, but we work to protect your data.

8. How Long We Keep Information

• Your account and content: until you delete them or delete your account.
• Items you move to the Trash: kept until you restore them, delete them forever, empty the Trash, or delete your account.
• Gmail: when you disconnect, we delete the access tokens straight away. We keep the account's address and name so Ranya can show which account to reconnect, until you delete your account. You can also remove Ranya's access at your Google Account permissions.
• Open tracking: the record of each tracked email and its opens is kept until you delete your account, and is deleted with your account.
• Deleting your account: done immediately from Settings, Profile, Danger zone. It cancels any subscription, deletes your content and files, and removes you from Loops. To finish that removal, we keep your email address for at most 30 days, and use it for nothing else. Records held by the services in section 5 (such as payment records at Stripe, error reports and backups) are deleted on their own schedules.
• If we invite you to Ranya Pro before you have an account, we keep your email address only to send the invitation and let you claim it, and delete it within 60 days.

9. Your Choices and Rights

• See and edit your information in Ranya, and delete items or your whole account at any time.
• Disconnect Gmail or a calendar feed at any time.
• Turn open tracking off at any time with the eye beside Send.
• Turn notifications and, in the iPhone app, AI processing on or off in Settings, and turn the assistant's web search off in the chat.
• Ask the assistant to forget something, or delete remembered facts in Settings.
• Unsubscribe from news and offers with the unsubscribe link in any of those emails.
• Ask us for a copy of your data, or to correct or delete it, using the contact below.

If you are in the EEA, UK or Switzerland: we process your data to provide the service you signed up for (contract), with your consent for connecting Gmail and for AI processing in the iPhone app, and for our legitimate interests in securing and improving Ranya and in emailing account holders news and offers about Ranya, which you can object to at any time with the unsubscribe link. You may access, correct, export or erase your data, object to or restrict processing, withdraw consent, and complain to your data protection authority. Your data is processed in the United States.

If you are in California: you have the right to know, delete and correct your personal information, and not to be discriminated against for using these rights. We do not sell or share your personal information for cross-context advertising.

We answer requests within 30 days.

10. Cookies and Storage on Your Device

Ranya stores what it needs on your device: your sign-in session, unsent drafts, layout and display choices, and a remembered sidebar setting (a cookie). On the website, Google Analytics sets its own cookies to count visits. We do not use advertising cookies.

11. Children

Ranya is not meant for children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

12. Changes to This Policy

We will update this page and its date when this policy changes, and tell you in Ranya when a change is significant.

13. Contact Us

Questions or requests about your privacy: