Privacy
How Gandra handles your information
Last updated
Who it's for
Gandra is a private assistant for the members of one family. It isn't offered to the public, and it answers only family members' numbers.
What Gandra keeps
For each family member, kept separately from everyone else's:
- your mobile number;
- the texts you send Gandra and its replies;
- conversation threads and their summaries;
- your time zone, once you save one;
- your sign-in sessions for this portal, each lasting 7 days.
Sign-in codes are kept only briefly, and only as digests: one-way fingerprints that can't be turned back into the code. They aren't saved with your messages.
Where it runs
Gandra runs on Cloudflare Workers and Durable Objects in the family's own Cloudflare account. Texts go through Sendblue, over iMessage with SMS as a fallback. To answer you, Gandra sends your text and the content needed to answer it to OpenAI models through Cloudflare AI Gateway, with the Gateway's logs turned off.
Logs
Cloudflare Workers Logs keep phone numbers, message text, replies, and the email and calendar content Gandra reads, for up to 7 days. Each text is handled by a Cloudflare Workflow run, which keeps its inputs and step outputs for 3 days.
Google data, once you connect it
Gandra gets only the access you grant: reading and organizing your Gmail, sending from it only after you approve, reading your calendars and their events, and creating events after you approve. It uses that data only to answer your own requests. It isn't sold, isn't used for ads and isn't used to train models. Your Google client secret and tokens are stored encrypted, and disconnecting revokes Gandra's access at Google.
Gandra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Deleting your data
To have your data deleted, or with any question about it, ask Adi, who runs Gandra for the family.