Privacy Policy

Effective 30 October 2026

Atheena reads the accounts you connect, turns what you need to do into a todo list, and, when you ask it to, uses an AI agent to get those things done. This policy covers what data Atheena accesses, what it does with that data, who it shares it with, and how to have it deleted. In this policy, "we" and "us" means Atheena.

1. What we collect

If you ask for guided onboarding

If you ask for guided onboarding on our home page, we keep the name and email address you give us and when you asked, and we email them to the operators so they can send you a link to download Atheena. We use them only for that and to reply to you. Requests over a year old are deleted each time a new request comes in or we review the list, and we delete yours sooner if you email hello@atheena.app and ask. To limit misuse, we count how many requests come from your network address in an hour. We count them under a scrambled form of the address that is kept only in our server's memory, is never written down, and is lost whenever the server restarts. If you then book a setup call, Calendly handles the booking under its own privacy policy.

Your phone number

You can sign in, and where sign-up by phone is open make an account, by sending a code from WhatsApp or iMessage to Atheena's number. The phone number you send it from is then what identifies your account. We store that number, the messages you send to Atheena's number and Atheena's replies. Meta (for WhatsApp) or Sendblue (for iMessage) carries those messages and so receives your number. The agent is given your number when it works for you, so it can enter it where a booking or a form asks for your phone number; it goes to OpenAI with the rest of what the agent is given. We do not send your number to PostHog. A number stays on your account until you remove it in Settings or ask us to: we never take one off because it has been quiet.

Your Google account

If you sign in with Google we receive your name, email address, profile picture and Google account ID.

Google Workspace data, with your permission

Sign-in asks Google only for permission to read Gmail. The other permissions below are asked for when you connect an account from Settings, or choose "Connect" beside an account that only reads, so the agent can act for you. If you would rather Atheena only read an account, choose "Connect read-only" there instead. You can leave any of them unticked; Atheena then does less, and Settings shows which permissions each connected account holds. Some Google accounts are connected through Composio instead: Google's consent screen then names Composio, asks once for every permission, and there is no read-only choice.

• Gmail (read, draft and send). We read new messages to find todos, and show the thread next to its todo. When you ask the agent to, it can search your mail, and draft and send replies. It cannot delete, archive or relabel your mail. If you allow it for a particular website, it also reads the sign-in codes and links that website emails you, only while it is signing in there for you; the code goes into that website's sign-in page and is not stored. When you sign in to a website yourself through Atheena's sign-in page, what you type goes from your device straight to the browser we rent for the agent and into that website's page; it does not pass through our server. Short details it reads there, including in the mail you send, may be kept in your profile, described under What Atheena knows about you.
• Google Drive, Docs and Sheets. When you ask the agent to work on a todo, it can create Docs and files in your Drive, and read and edit the files it created. Google's permission for this covers only those files: Atheena cannot see, open or change the rest of your Drive. Short details it reads there may be kept in your profile, described under What Atheena knows about you.
• Google Calendar events. The agent can read your events to answer questions, and, when you ask, create events and answer invitations. Atheena also reads the next seven days of your primary calendar in the background to suggest todos. It keeps the suggested todo and the event's id, start time and link, plus, for a few weeks, which events it has already looked at, so they are not judged twice. Once a day it also reads the events up to 60 days ahead, and keeps the ones you organize, the ones on your calendar with no guest entry of your own, and the ones you have answered yes or maybe to (title, place, organizer, link and times) in your profile, described under What Atheena knows about you.

You can connect more than one Google account. Each has its own permissions and can be disconnected on its own.

Other sources you connect

• Outlook and Microsoft 365 mail, calendar and OneDrive. If you connect a mailbox from Settings, Microsoft gives us its email address and your name. Connecting asks for permission to read its mail and its calendar and, in the same step, for what the agent needs to act for you there. You can choose "Connect read-only" instead, which asks only for the reading; the rest is then optional, can be added later for that mailbox from Settings, and covers sending mail, the calendar and OneDrive together. We read new messages in the inbox to find todos, and the agent can read the conversation a todo came from. Unless the mailbox is read-only, the agent can save drafts and send mail from it and look up your saved contacts, when you ask it to. Atheena has no feature that deletes or moves mail there. Connecting also lets us read that mailbox's calendar for the next seven days, to suggest todos such as an invitation to answer; we keep an event's id, start time and link beside the todo, and for a few weeks a note of which events have already been looked at, and read the rest when it is needed. Once a day we also read that calendar's events up to 60 days ahead and keep the ones you organize, the ones on that calendar with no guest entry of your own, and the ones you have answered yes or maybe to in your profile, and short details the agent reads in that mailbox's mail may be kept there too; see What Atheena knows about you. Unless the mailbox is read-only, it can also answer invitations, create events, and change ones you organize (title, time, place, description or guests) there when you ask it to. It can then also find and read your own files there, create new ones, edit a Word document, edit an Excel workbook on a work or school account, and move a file to the recycle bin, when you ask it to. To edit a Word document Atheena downloads it, changes it and uploads it as a new version; it does not keep a copy of your files, and what the agent reads from a file is sent to the AI model as part of that task, as mail is. Atheena has no feature that deletes a file for good or shares one, and none that opens or changes files other people shared with you: a search can list those by name, and nothing opens or changes them. You can connect more than one mailbox, and disconnect each on its own.
• Fathom and Pocket. The API key you paste into Settings, and the action items and meeting titles those services return.
• WhatsApp and iMessage. When you message Atheena's number, sign in with your phone or link a number in Settings, we store that number, the messages and images you send to Atheena's number on that service, and Atheena's replies.
• Sites you sign in to for the agent. If you sign in to a website through Settings → Browser, or the agent's browser signs in for you, we store the login cookies that website sets, encrypted, so the agent stays signed in next time. We never see or store the password you type. You can remove all of them at any time with "Forget all logins". Files the agent downloads for you (an invoice, a ticket) are stored with your other files.
• Payment cards. If you save a payment card, Atheena stores its number, expiry date, security code, the name on it and your billing ZIP, encrypted, and uses them only to pay at a checkout after you approve that payment. The card is typed into a browser run for you by our browser provider, with that session's recording and logging switched off where the provider offers a recording. The card is never shown again after you save it, and is never sent to the AI model. If a card number is typed or attached as text in a chat message anyway, it is replaced before the message is stored or read by the agent. You can delete a saved card at any time in Settings: it is removed from our database at once, and encrypted copies in backups expire within about a month.
• Files you send, and files for a form. Files you send to Atheena's number from your phone (photos, and PDFs whose text can be read) are kept as files you attach on the web are: only you can open them, and they are deleted when you ask us to delete your data. When you ask Atheena to fill in a form, it can attach one of your files, from a message, your mail, the files it created in your Google Drive, or OneDrive, to that site's upload field. It asks you first, naming each file and the site, unless your own message already said which file goes where. A file taken from your mail or your drive for this is not kept by Atheena; it is placed in the browser that fills the form, and removed when that browser closes.

What you create in Atheena

Todos you type, edits and decisions you make, your conversations with the agent, and a record of the actions the agent took in each conversation.

Technical data

• A session cookie that keeps you signed in. We use no advertising or third-party tracking cookies. A browser stays signed in until it has gone 30 days unused. Settings lists the browsers signed in to your account, each with a short label we choose for it (such as "Chrome on Windows") and the phone it was signed in with, and lets you sign any of them out; sending "sign out" to Atheena from your phone signs all of them out.
• When a browser opens the sign-in page we keep a scrambled form of the address it came from, only to limit how many sign-ins can wait at once. It is dropped when the sign-in finishes, and within a day otherwise. We do not keep the address itself, and we do not work out where you are from it.
• If you open a demo link we gave you, we keep the address your request came from and your browser's name, look the address up with IPinfo to learn its network and city, and keep all of it for 90 days; after that only a count of visits for each day stays.
• The address your browser gives us for push notifications, if you turn them on.
• A record of when you open the inbox and Settings pages (page, account, time), which we use to see how Atheena is used. We don't use third-party analytics.

2. How we use it

• To find your todos. An AI model reads each new message or meeting item and decides whether it holds something you need to do. If it does, the model writes a title, a due date and a suggested next step. Newsletters, receipts and sign-in codes are skipped.
• To suggest how to close a todo. When you open a todo, an AI model proposes three ways to handle it.
• To act for you when you ask. The agent runs only when you start it, by typing a request, choosing a suggested action, or replying on WhatsApp or iMessage. It then uses the permissions above, and a web browser, to do what you asked. It is instructed to ask you before any irreversible step it would otherwise have to guess at.
• To tell you about new todos. Through browser push notifications, WhatsApp and iMessage, depending on what you have set up.
• To keep Atheena running and secure. Diagnosing errors, preventing abuse, and meeting legal obligations.

We do not sell your data, use it for advertising, or use it to train AI or machine-learning models, whether ours or anyone else's.

3. Google user data

Atheena's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide and improve the features described in this policy, which you can see and control in Atheena.
• We transfer Google data to others only when that is needed to provide those features (for example, sending an email's text to our AI provider to find a todo in it), for security, to comply with the law, or as part of a merger or acquisition with notice to you.
• We never use Google data for advertising, and we never sell it.
• No person reads your Google data unless you have given permission for specific items, it is needed for security or to investigate abuse, the law requires it, or the data has been aggregated and anonymised for internal operations.
• We do not use data obtained through Google Workspace APIs to develop, improve or train generalised or non-personalised AI or machine-learning models, whether ours or anyone else's.

4. Who we share it with

We share data only with service providers that help run Atheena, and only what each one needs:

• OpenAI processes the content Atheena analyses and acts on: email text, meeting items, todos, your messages to the agent, images you send, and what Atheena knows about you. OpenAI's API terms say it does not train its models on API data by default. See OpenAI's privacy policy.
• Google, when Atheena reads or acts in your Google account.
• Microsoft, when Atheena reads an Outlook or Microsoft 365 mailbox you connected.
• Composio connects some Google accounts for Atheena, under Composio's own Google app: you can tell, because Google's consent screen names Composio when you connect. For such an account, Composio keeps the access to its Gmail, its Calendar and the Drive files created or opened through Composio's app. Those include the files Atheena created, and may include files another service that uses Composio created or opened for you. Every request Atheena makes to that account goes through Composio, and so does Google's answer, which includes the text of your mail. Composio keeps those requests and answers in its logs for up to one year. An account connected through Atheena's own Google app does not go through Composio. See Composio's privacy policy.
• IPinfo is told the network address of a browser that opens a demo link we gave out, and answers with the network and city the address belongs to. See IPinfo's privacy policy.
• Meta (WhatsApp Business Platform) carries messages between your WhatsApp number and Atheena's, when you message it, sign in with it or link it. It receives your number and the content of those messages.
• Sendblue carries messages between your phone number and Atheena's iMessage number, when you message it, sign in with it or link it. It receives your number and the content of those messages.
• Resend sends the email we send you when a phone is linked to your account, our alerts to the operators, which can name your email address, and the note to the operators when you ask for guided onboarding, which holds your name and email address. It receives your email address and the text of those emails.
• Fathom and Pocket, which we call with the API key you provided.
• Your browser's push service (such as Google, Apple or Mozilla) delivers push notifications. Notification contents are encrypted so the push service cannot read them.
• Kernel or Browserbase runs the web browser the agent uses. Kernel is used unless you choose Browserbase in Settings → Browser; Kernel's browsers run in the United States and Browserbase's in Singapore. While a browser session is running, the provider holds the pages it visits and the login cookies we load into it for you. When you sign in to a website from Settings → Sites, you enter that site's details on a page Kernel runs; Kernel signs in for you and keeps the signed-in session so it can tell us whether it still works. Atheena does not see what you type there, and we ask Kernel not to keep your password. A session stays open for up to ten minutes after the agent's turn ends, so a follow-up can carry on where it left off, and is then closed. See Kernel's privacy policy and Browserbase's privacy policy.
• PostHog receives error reports and usage counts so we can find and fix problems: that something went wrong and where in our code, how many tokens a request to the AI provider used, and events such as a sign-in, a finished task or a step the assistant's browser took (which website it was on, not the page), each under an internal id. It does not receive your email address, your messages, your todos or the content of your mail, and we do not record your screen. On this website's public pages (not inside the app), PostHog's script counts visits; it sets no cookie and stores nothing in your browser. PostHog stores this in the United States. See PostHog's privacy policy.
• Microsoft Azure hosts Atheena: our servers, database, backups and stored files are in Microsoft's data centres in India.
• Websites and people the agent contacts for you. When you ask the agent to send an email or fill in a form, the recipient gets what the agent sends.

We may also disclose data when the law requires it, or to protect the rights, property or safety of our users, the public or us.

5. Storage and security

Your data is stored in Atheena's database on our server with Microsoft Azure in India, on encrypted disks, and files are kept in private, encrypted Azure storage. Data is sent over encrypted connections (HTTPS). The Google and other account access tokens, and the website logins we keep for the agent's browser, are encrypted, and the keys that protect them are kept separately in Azure Key Vault; tokens and keys are never sent to your browser. The database is backed up every night to private Azure storage. Only the operators can access the servers. To fix problems, the operators can see, on a page only they can open, your todos, the conversations that worked on them, and what Atheena knows about you. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

6. How long we keep it, and deleting it

• We keep your data while your account exists.
• Disconnecting an account in Settings deletes the credentials we stored for it straight away, and Atheena stops reading from it. For an account connected through Composio, it also ends Composio's connection; what Composio already logged is kept under its own policy, for up to one year (see Composio). Todos already created stay in your list until you delete your account, and details Atheena already learned from that account stay in your profile until you ask it to forget them or they age out.
• What Atheena knows about you. Atheena keeps a profile of you so it does not have to ask or search again: the people you deal with (with a person's job title and company when the signature of their mail gives one), your places, where you are staying, your trips, stays, bookings and events, past and coming, your accounts, and your preferences. Some of it you tell Atheena. Some of it Atheena reads in the mail, calendar, Drive files and signed-in sites you have connected, and keeps as short details with a note of where it read them. That includes mail it reads in the background as it arrives, a first read of the last three years of a connected Gmail or Outlook mailbox (the last 12 months for one connected through Composio) (who you write to most, which services write to you, and the mail of theirs that tells it something about your life, such as bookings, orders and appointments; it reads the senders and subjects first and opens only the mail it picks, coming bookings and the last year first and older mail over the following nights), and the events on your calendar for the next 60 days that you organize, that are on your calendar with no guest entry of your own, or that you have answered yes or maybe to. Atheena also reads the text of the mail you send from a connected Gmail or Outlook account, within minutes of sending it: only what you wrote, with the quoted reply and any forwarded message cut off. A message you forward is not read, and neither are drafts or the mail Atheena wrote or drafted for you. What it keeps from your sent mail is marked "you wrote in mail": it never replaces something you told Atheena yourself, and no preference or instruction to Atheena is taken from it. The text is sent to OpenAI to be read, and is not kept. Atheena works out which sites and services you deal with from your mail: one you have written to, one you signed in to through Atheena, one that sent you a receipt or an order, or one that sent you at least three genuine mails over 30 days or more (genuine meaning your mail provider verified the sender's domain). It keeps a list of those sites, with how many such mails each sent and when. Mail from a site you deal with may teach more than a stranger's, and any mail may change a stay, trip, booking or event only when it comes from the hotel, airline or site it is with, from the site that told Atheena of it first, or carries its booking reference; other mail may only add. From the order and receipt mail of a site you already deal with, Atheena keeps the delivery address as one of your places, with how many orders went there, when, and from which sites. Mail about job applications is kept the same way, as counts (how many were acknowledged and how many declined) rather than one detail per application; an interview to schedule or an offer is kept like any other event. When you have not said otherwise, Atheena may use what it read as the default: the address your orders went to most for where an order is delivered, or a detail from your mail for what it pays or who it writes to. The request you approve always shows it first. If your orders keep going to an address other than the home you gave it, Atheena may ask you once whether you have moved. Atheena does not tell you each time it learns something. It is instructed to say where a detail came from the first time it relies on it. About your money, it keeps the bills that are due, renewals, subscriptions and which bank and card you use, and is built to leave out balances, holdings, trades, transfers, payees and account numbers. About your health, it keeps doctors, clinics, appointments and insurance, and is built to leave out any diagnosis or treatment. Until these limits reach every account, which is happening in stages, other money or health details your mail contains may be kept. It is built to leave out passwords, one-time codes, card numbers and security codes. A passport, visa, driving licence, Aadhaar or PAN is kept only as a document of yours that you gave it: one you typed, a file you attached, or one Atheena found in your mail in a conversation where you asked for it ("what's my passport number?"). It is never learned from mail in the background, by the first read or by the nightly review. Its number is stored encrypted, as saved cards are, and wherever it is shown, to you and to the agent, only its last four characters are ("ending 4821"). The full number is opened only when a form needs it, and Atheena asks you each time ("Use your passport number ending 4821 on example.com?"), or once for a plan of steps you approve that names that use; the full number is then sent to OpenAI as part of that step. Deleting the document, or Forget everything, removes the number at once. Anywhere else, Aadhaar, PAN and Indian passport numbers are left out. Other reference numbers that appear in your mail or that you tell it, such as a booking reference, can be kept as part of a booking or a person. What it knows is sent to OpenAI as part of what the agent is given when it works for you. Atheena also keeps a short record of each task it did for you. It also keeps a record of each conversation you have with it (on WhatsApp, iMessage and the web) and of the steps it took (which tool it used, with short details such as a recipient, a search, a button it pressed or the title of a page it opened, and how the step ended; not the text of the mail, files or pages it read), for one year. Atheena may also review, once a night, what was said and done in your conversations since the night before, the mail you received that day (only mail whose sender's domain your mail provider verified, and at most the first 6,000 characters of each), and propose changes to what it keeps: that two names are one person or place, that something is no longer true, a fact you told it that it missed, a standing preference you gave on two different days, a date made exact, or a detail read in that mail. What it reviews is sent to OpenAI to make the proposal. Fixed checks in code decide whether each proposed change may be kept: anything about who you are or what you prefer has to come from words you typed yourself, never from a forwarded message, a suggestion you picked or the text of a mail, and a change to a home or work address, an email address, a phone number or a sign-in is held until you confirm it. The mail itself is not kept. The operators can see each proposed change and whether it passed, on a page only they can open, and can undo a night's changes. Forget everything erases them with the rest, and no later review reads conversations or mail from before you pressed it. Past stays, trips, bookings and events are kept until you delete them, so Atheena can answer "where did I stay in Goa?", except an event learned only from your calendar, which is deleted 14 days after it ends. Nothing is deleted for going unused. Task records are deleted after a year. The rest is kept until you ask Atheena to forget it. Two more things are kept that hold no content: a marker for each thing you asked Atheena to forget, so it is not learned again (a hash, kept a year), and a mark for each mail sender saying whether you have dealt with them before (a hash of the address, kept about 90 days). Settings does not list what it knows: to see it, ask Atheena ("what do you know about my trip?"), and to remove something, tell it ("forget that"). Settings → Memory → Forget everything erases what is stored at once: the profile, the task records, the activity log, the list of sites you deal with, the order and application counts, and the markers for things you asked it to forget. It does not erase the record of your conversations and of the steps taken; to have that deleted, email hello@atheena.app. It does not clear the per-sender marks, which go by themselves after about 90 days. Afterwards Atheena may learn again from new mail, received and sent, your calendar and what you ask it to do, unless you disconnect or pause them in Settings; it does not read your past mail again. All of it is deleted with the rest of your data when you ask us to delete your account.
• Mail preferences. When you tell Atheena you want fewer or more todos from a kind of email, in chat, with "Fewer like this" after rejecting one in the web inbox, or by choosing "Fewer like this" on a new-todo notice, it writes that down as one sentence and tells you what it noted. Atheena keeps up to 20 of these. They are sent to OpenAI with each new email of yours so the decision about that email can follow them. Your message is sent to OpenAI to check that you asked for it, and the title of a todo you rejected is sent when Atheena writes the sentence. You can ask Atheena in chat to list them or to drop one, and they are deleted with the rest of your data when you ask us to delete your account.
• You can also revoke Atheena's Google access at any time from your Google Account permissions page. An account connected through Composio is listed there as Composio. Revoking that ends access for every service that uses Composio for your Google account, while disconnecting in Atheena's Settings ends only Atheena's.
• You can revoke Atheena's Microsoft access from your Microsoft account's app permissions for a personal account, or My Apps for a work or school account.
• To delete your account and everything associated with it (todos, conversations, messages, images, stored credentials), email hello@atheena.app. We will delete it within 30 days unless the law requires us to keep something, and we'll confirm when it is done.

Backups are kept for 30 days, so data you delete is gone from our backups within 30 days. Our service providers keep data under their own policies. For example, OpenAI may retain API inputs for a limited time for abuse monitoring.

7. Your choices and rights

You can pause any source in Settings, disconnect it, or turn notifications off. You can also ask us for a copy of your data, to correct it, or to delete it. Depending on where you live (for example under the GDPR or India's Digital Personal Data Protection Act), you may have further rights, including to object to processing or to complain to a data protection authority. To exercise any of these, email hello@atheena.app.

8. Children

Atheena is not intended for anyone under 18, and we do not knowingly collect data from children.

9. Changes to this policy

If we change this policy we'll update the date at the top. If a change affects how we use data you have already given us, we'll let you know by email or in Atheena before it takes effect.

10. Contact

For questions about this policy or your data, contact us at hello@atheena.app.