Privacy Policy

nenva is a personal AI for macOS. You ask it things in plain words, and it answers and gets things done for you, working from the information you choose to give it: your tasks, notes, documents and calendar, and, if you connect them, your Gmail and Google Calendar. Everything you put into nenva is stored on your Mac. Connecting a Google account is optional; nenva works fully without one. This policy explains what information the app accesses, where it is stored, and who it is shared with.

Short version: nenva runs on your own Mac. Your Google data, your notes, and everything else you put into the app are stored on devices you control. We do not operate a server that stores your content, and we never sell your data to anyone. AI requests go to nenva cloud unless you choose another model, and it does not log or store them (section 5). Where the app does send something somewhere, section 6 lists every destination and the reason for it.

1. Who we are

nenva is developed and maintained by Anjadhe LLC. You can reach us at hello@anjadhe.ai.

2. Information we access

When you choose to connect a Google account, nenva requests the following OAuth scopes:

gmail.modify, to read your email and, when you act in the app or ask the assistant to, to mark messages read or unread, archive them, move them to Trash, and send an email for you. The app asks before it sends an email or moves one to Trash.
calendar.events, to show your events alongside your tasks and, when you explicitly create or edit an event from the app, to write that change back to your calendar.
calendar.calendarlist.readonly, to list which calendars the account has, so you can choose which ones to show.
userinfo.email, to identify which Google account is connected and display it in the settings screen. This one is requested when you connect Calendar, or Gmail and Calendar together.

nenva also stores the content you create inside the app: notes, tasks and goals, what the assistant remembers about you, your chats, and similar personal data.

If you choose to link a bank, card or brokerage account in Finance, nenva accesses that account through Plaid, a data provider, on your behalf. You sign in on your institution's own page inside Plaid Link; nenva never sees or stores your banking password. What is fetched is the account list with balances, holdings and investment transactions for a brokerage, and transactions for a bank or card, so Finance can show your position and spending. Linking is optional, one institution at a time, and you can unlink at any time.

3. How your information is used

Information accessed through Google APIs is used solely to provide the features you turn on inside the app:

Showing what needs you from your email, each with a link that opens the message in Gmail, and showing your calendar events in the nenva interface.
Running AI analysis over incoming email to find bills, deadlines, appointments, replies and other action items, with short summaries. This runs on the AI model set in the app: nenva cloud on a new install, or a model you choose instead. Section 5 covers each option.
Writing changes back to Gmail and Google Calendar when you take an action in the app or ask the assistant to (mark read or unread, archive, move to Trash, send an email, create or edit an event). Sending an email and moving one to Trash are always confirmed with you first.

nenva does not use your Google user data for advertising, targeting, profiling, or training any AI model. It is not sold, rented, or transferred to third parties, except as strictly necessary to deliver a feature you explicitly invoke (see AI processing below).

4. Where your data is stored

nenva has no server of its own. All data lives on your machine:

App data is saved to a folder on your Mac, inside the standard macOS Application Support area (a folder named nenva).
Google OAuth tokens are stored locally and are used only to talk directly to Google APIs from your Mac.
If you turn on backups, nenva writes encrypted copies of its database to your own iCloud Drive (or a folder you choose). They are encrypted with AES-256-GCM using a key kept on your devices and, if you set one, protected by your passphrase. Nothing in a backup is sent to us, and we cannot read it.
nenva no longer syncs between Macs (retired September 30, 2026). Change files written by earlier versions stay in your iCloud Drive until you delete them.

5. AI processing

nenva’s AI runs on open-weight models. A new install uses nenva cloud, described below. You can instead run a model locally on your Mac through the built-in llama.cpp engine; with a local model, your email content and everything else the assistant sees do not leave your machine.

Besides a local model, there are three options. You can switch between them at any time in Settings › AI Assistant:

Your own OpenAI-compatible server, an endpoint you host and control. Requests go directly from your Mac to your server; they are not routed through nenva.
An OpenAI or Anthropic model with your own API key. Requests go directly from your Mac to that provider; they are not routed through nenva, and what you send is governed by your own agreement with that provider.
nenva cloud, the default for new installs: an open-weight model we host at api.nenva.co. This is the one AI option where your content passes through a server we operate, so here is exactly what that server does: it forwards your request to the inference provider running the model under zero-data-retention terms, counts requests and tokens against your install’s free monthly allowance, and does not log or store the text of your prompts or the model’s responses. No account is required; the app uses the same per-install key as its built-in search, and nothing it handles is read by us or used to train any model.

Selecting any of these models applies to every AI feature, not only chat, so while AI email features are on it also sends the sender, subject and body of incoming messages for the app to summarise. A new install uses nenva cloud; any other model is used only when you add it, and nenva never falls back from the model you chose to a different one. nenva does not send your data to any AI service other than the one set in the app, and nothing you provide is used by nenva to train any model.

We do not sell your data. Not to anyone, for any price, under any circumstances. We also do not rent, trade or license it, do not pass it to data brokers, advertisers or analytics companies, do not use it to build a profile of you or to target advertising anywhere, and do not read it ourselves. No business model here depends on your information. The one server of ours your content can pass through is nenva cloud, the AI model a new install starts with, and section 5 states exactly what it does and does not keep.

What follows is every service the app can send anything to, and the reason. Sending happens for one reason only, which is to do the thing you asked the app to do.

Three can receive data obtained through Google APIs, and only as described:

Google, to fulfil your own requests against Gmail and Calendar.
The AI model set in the app, when it is not running on your Mac, as described in section 5: nenva cloud on a new install, or your own server or a provider you added a key for. A model running on your Mac sends nothing anywhere.
Apple iCloud Drive, if you turn on backups, as encrypted backups of the app's database in your own account. A backup contains what the app stores, which can include tasks and reminders created from your mail.

The app also contacts these, none of which are ever sent anything from your mail or calendar:

Search providers receive the words you searched for, so the app can search the web. That is api.nenva.co by default, which counts how many searches an install has run and does not store the words themselves, or Tavily or Brave if you choose one and add your own key.
Yahoo Finance receives ticker symbols and nothing else, so the app can price the holdings you entered. No account, position or transaction is sent.
Plaid, only if you link a bank, card or brokerage account, receives the sign-in you perform on your institution's page and returns your balances, holdings and transactions. nenva's own server (nenva cloud) holds one encrypted access token per linked institution so it can fetch that data for your Mac; the balances, holdings and transactions themselves pass through our server to your Mac and are not stored or logged there. Plaid's handling of your data is described in the Plaid End User Privacy Policy. We do not sell or share this data with anyone else, and we do not use it for anything but showing it to you in the app.
Our analytics endpoint receives event names from a short published list plus a random install number, so we can count which features get used. It is off unless you switch it on and can never carry the contents of anything.
Our feedback endpoint receives what you wrote, an email address if you give one, and the diagnostics shown to you on screen first, so we can answer you. Nothing is sent until you press Send.
Our license endpoint receives the email address you type when you get your free license, and the app version. We keep the address with your license so the same license can be issued to you again, and we use it to reach you with release news and important notices, nothing else. Every email has an unsubscribe link; unsubscribing keeps your license. Licenses claimed before September 30, 2026 were issued for record only, and those addresses are not emailed. Getting a license is optional.
GitHub and Hugging Face receive nothing about you or your data. The app downloads updates, its configuration file, and the local AI engine and models you choose to install.
Google News receives the names of the stocks and funds you hold in Finance, directly or through our news endpoint, so Finance can show their headlines.
CNBC is asked for its public news feeds as they are, and receives nothing about you or your data.

Finally, some features exist to reach the wider internet and send wherever you point them: the assistant reads pages and runs searches you ask it to, nenva's own Chrome window loads the sites you send it to (through the nenva browser extension, which has its own short privacy policy and sends nothing anywhere but to the app on your Mac), and any tool servers you connect do what you added them to do. None of these are contacted on their own.

One honest note about that last group. If you ask the assistant to search the web about something in an email, the search it writes can contain text from that email, and that text goes to the search provider. You are directing it rather than the app deciding on its own, but it is the one route by which the contents of your mail can reach a service listed above.

7. Limited Use compliance

nenva’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except to provide or improve user-facing features that are prominent in the app’s UI, do not use it for advertising, do not allow humans to read it, and do not use it for any other purpose.

8. Analytics and telemetry

nenva does not collect product analytics by default. The app contains an optional, opt-in usage-analytics feature that the user can enable from Settings. When enabled, it records only anonymous event counts (for example, “assistant response marked helpful”) tagged with a randomly generated install ID.

Analytics do not include the contents of your notes, tasks, goals, emails, calendar events, or AI prompts and responses. The same Settings switch turns it off again.

Google user data is not included in analytics, consistent with the Google API Services User Data Policy.

This website. nenva.co counts its own visits, with no third-party analytics service and no cookies. Each page you open sends the page address, the name of the site that linked you here (for example news.ycombinator.com, never the full link), the campaign labels the link carried if any, and whether you are on a phone, tablet or computer. When you leave a page it sends how long the page was in front of you and how far down you scrolled, and when you click a link or button it sends the words on it and where it goes, never anything you typed. A page view carries a random number made by the page so these can be joined to it; it is held only in the page's memory and is gone when you close it. Our server adds your country, and uses your IP address and browser details only to count you once per day: they are combined with a random value that is deleted at the end of every day, so no one, including us, can recognise you from one day to the next. Neither your IP address nor your browser details are stored, only the names of your browser and operating system. We keep these events for up to 400 days.

If your browser sends Do Not Track or Global Privacy Control, the site counts nothing at all.

Writing to us from this website. When you send a message from the contact page, the message, the email address you give and the country our server sees are emailed to the nenva team at hello@anjadhe.ai, so we can read it and reply to you. Our server also keeps the message, your address, the subject, the country and the page you wrote from for one year, so that no message is lost if an email fails, and deletes it after that. To stop one sender from flooding our inbox, it keeps with each message a code made from your IP address with the same daily random value, and clears that code after a day. We keep your email in our inbox for as long as we need it to help you. Ask us at hello@anjadhe.ai and we will delete your message from both.

9. Retention and deletion

Because all data is stored locally, deleting it is under your control:

Disconnect a Google account from Settings → Accounts. nenva removes the stored OAuth tokens immediately.
Revoke nenva’s access at any time from your Google Account at myaccount.google.com/permissions.
Unlink a bank, card or brokerage account from Settings → Connectors → Linked institutions, or by asking the assistant. nenva removes the connection at Plaid and deletes the encrypted access token from our server at once; the balances, holdings and transactions already on your Mac stay in the app until you delete them, and Erase all content and settings removes them with everything else.
Uninstall the app and delete the local ~/Library/Application Support/nenva directory to remove all app data.
Delete the .nenva_backup folder in iCloud Drive to remove backups, and, if you used sync between Macs in an earlier version, the .nenva_sync (or .anjadhe_sync) folder to remove its change files.

10. Security

Google OAuth tokens, backups and the Plaid access tokens held on our server are encrypted at rest; the key for the Plaid tokens is kept apart from the database and its backups. Data in transit to Google, iCloud, and any AI server you configure is sent over TLS. No security system is perfect; if you suspect a vulnerability, please contact us at the address below.

11. Changes to this policy

If this policy changes in a material way we will update the effective date at the top of this page and, where appropriate, surface a notice inside the app the next time you open it.

12. Contact

Questions or requests related to this policy can be sent to hello@anjadhe.ai.