Donna Privacy Policy

Effective November 3, 2026

Donna is a private iPhone app. It is not offered to the public. This policy explains how it handles data from Google accounts.

Data Donna accesses

• Google account: the email address of each account signed in.
• Gmail: messages and labels, to read, organize, draft and, after approval, send email.
• Google Drive: read-only access to files.
• Google Calendar: the list of calendars and their events, to read them and to add events that have no other attendees.

How it is used

Donna uses this data only to answer requests made in the app and to carry out actions requested there. Email is sent only after approval in the app. Each data source is off until it is turned on.

Where it is stored

Donna has no server and no database of its own. Google sign-in tokens are kept in the iPhone Keychain. Notes saved in the app are stored on the iPhone and synced through iCloud.

Who it is shared with

• Anthropic: when a request needs it, the relevant text, including email, file or calendar content, is sent to the Claude API to produce a reply.
• Google: if the Google voice is turned on, the text of Donna's spoken replies is sent to Google Cloud Text-to-Speech.
• Apple: notes saved in the app sync through iCloud.

Donna does not sell data, does not use it for advertising, and does not use it to train AI models.

Google API Services

Donna's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

Signing out in Donna's Settings removes the stored Google token from the iPhone. Access can also be revoked at any time at myaccount.google.com/permissions.

Contact

Questions: guinnconnor@gmail.com