Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains what personal data Gianna collects, why, how we use it, and the choices you have. Gianna is a Catholic household assistant reached over Telegram and a web app at gianna.chat. By using the Service you agree to the handling of data described here.

We take a data-minimal approach: we collect what we need to run the assistant for your household, and nothing whose only purpose is to profile you.

1. Data we collect

Account data. Your email address and a securely hashed password. We never store your password in plain text.

Household data you give us. During onboarding and ongoing use you may provide: your display name and the names of household members, your timezone, your schedule preferences (e.g. when the morning message is sent), your faith profile (such as which liturgical calendar you follow), parish details, intentions, and the tasks and reminders you ask Gianna to remember.

Messages. The content of your conversations with Gianna, including anything you choose to share in those messages, and the assistant's replies. Gianna's memory feature extracts and stores facts and entities from your messages so it can recall them later. These remembered facts are pooled into a single memory shared across your household, so any member's Gianna may recall something another member told her. This memory never leaves your household; it is not shared with other households.

Telegram identifier. If you use Gianna over Telegram, your chat id, which identifies your household.

Billing data. Subscription and trial status. Card payments are handled by our payment processor (Stripe); we do not store full card numbers.

Usage and analytics. Limited product-event data (for example: signed up, onboarding completed, a chat message was sent, a task was created, a novena was started, trial converted, lapsed, reactivated) to understand how the Service is used and to operate it reliably. Basic technical logs are also generated in the course of running the Service.

2. Sensitive data and faith information

Information about your religious beliefs and practice is, by its nature, a special category of personal data. You provide it to us so that Gianna can serve its purpose as a Catholic household assistant. We process it on the basis of your explicit consent and use it only to deliver the features you have asked for. You can withdraw consent by deleting the relevant data or your account.

3. How we use your data

We use your data to:

• Operate the assistant — capture and recall tasks, send the morning message and weekly review, surface liturgical feasts, and answer your questions.
• Authenticate you and keep your account secure.
• Process your subscription, trial, and payments.
• Understand product usage and improve and maintain the Service.
• Communicate with you about the Service and respond to support requests.
• Send occasional letters about Gianna — new features and seasons of the year — to existing customers, a few times a year at most. You can decline at signup, in your settings, or via the unsubscribe link in any letter; we keep a record of your choice and honour it immediately.

We do not sell your personal data, and we do not use your private messages to train third-party models for purposes unrelated to serving you.

4. Third parties we share data with

We share data only with the service providers needed to run Gianna:

• Large-language-model provider (e.g. Anthropic, OpenAI, or OpenRouter, depending on configuration) — your messages and relevant context are sent so the assistant can generate replies and features. Voice notes, if you send them, are transcribed by a speech-to-text provider (e.g. OpenAI).
• Telegram — to deliver and receive messages if you use that channel.
• Stripe — to process payments.
• Resend — to deliver email we send you (e.g. account emails).
• PostHog — for product analytics (hosted in the EU).
• Google — if you sign in with Google, Google handles that sign-in and we receive your email address; if you connect Google Calendar (BETA), we read the calendar you have consented to share.
• Magisterium AI — when you ask doctrinal questions, to retrieve grounded, cited answers.
• A web-search provider (e.g. Brave, depending on configuration) — when Gianna searches the web on your behalf, your search query is sent to retrieve results. Pages you ask Gianna to read are fetched directly from their hosts.

Each provider processes data under its own terms; we share only what is necessary for that provider's function.

5. Where your data is stored

Gianna's database and application are hosted on a server in the European Union. Some third-party providers listed above may process data in other regions under appropriate safeguards.

6. Retention

We keep your data for as long as your account is active. If your subscription lapses, your data is preserved so you can reactivate. When you delete your account, your conversations, tasks, household details, and remembered facts are deleted immediately, and copies age out of our encrypted backups within 90 days. We retain billing records (held by Stripe) for as long as tax and accounting law requires, and server logs for no more than 30 days.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at the address below. You also have the right to complain to your local data protection authority.

8. Security

We protect your data with measures appropriate to its sensitivity, including hashed passwords (argon2), authenticated access (JWT), transport encryption (TLS), and sender-verified channel identities. No system is perfectly secure, but we work to keep your data safe and to limit what we collect in the first place.

9. Children

Gianna is intended for adults (18+) and is not directed at children; children cannot hold accounts or talk to Gianna. Parents may mention their children in conversation (names, birthdays, school runs) — that information is provided by and under the control of the parent, who can ask us to delete it at any time. We do not knowingly collect data from children directly. If you believe a child has provided us data, contact us and we will delete it.

9a. If something goes wrong

If a security incident affects your personal data, we will tell you without undue delay — what happened, what data was involved, and what we are doing about it — and we will notify the relevant supervisory authority within the timelines the law requires (72 hours under GDPR).

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date and, where appropriate, notify you.

11. Contact

For privacy questions or to exercise your rights, contact support@gianna.chat.