Plain English, no legalese. The three that matter: we do not sell your data, we do not train AI on it, and nothing ever acts in your name. This is the precise version, for the record.
When you connect an account you are granting access to the email and calendar data you authorise. Your messages, contacts, threads and events. It is indexed so you can search it. A model reads only what a question needs, or a document you add. Documents you add and things you tell it directly are held the same way: receipted, yours.
Only run your living record: search it, answer your questions with receipts, keep what you add, and show you what a document holds. Never for advertising. Never to train a model that anyone else’s record touches.
Only the handful of companies that make the product run, each under a data agreement, each with only the data they need, and every one of them named here. We do not sell it. Full stop.
Text used for search is stored on our servers, with card numbers, Social Security numbers and labeled bank account numbers masked to the last four digits before anything is stored.
The original messages and documents are encrypted before they are stored, under a key that exists only for your account.
To read a document you add, or to answer a question, the relevant text is sent to the AI that does the reading, today that is Anthropic, through our account, under an agreement that forbids training on it. That is the only place your words go, and we would rather name it than let you assume it away.
If you would rather that never touch our account at all, connect your own model credentials. Your own provider key, or your own cloud region, and every call for your data runs inside your agreement instead of ours. If those credentials ever stop working, your record stops answering. It will never quietly fall back to our account.
You can rule an address, a whole domain, or a subject-line keyword, privileged, confidential, whatever you choose, permanently out of bounds. Excluded mail is never stored, never indexed and never drawn from.
Adding a rule also deletes anything already here that matches it, because a control that only works going forward is not the control you thought you bought. Everything you allow is read, and nothing you do not.
Every touch of your data is recorded. What was read, when, and each time your text went to an AI. Settings shows you that record. It is not a promise that we are open about it; it is the list.
You can connect your own AI to your account: ChatGPT, Claude (the app or Claude Code), or a personal agent. That connection has full access: it can read everything here and change it, including your notes in My Vault. You choose how long it lasts, 30 days, 90 days or a year, and nothing connects until you say yes. Every call it makes is logged, and Settings shows them. You can end it any time, and it stops at once.
What your AI reads through it goes to the company that runs that AI, under that company’s terms. For Claude that is Anthropic, the same as when you ask in the app, under the same agreement that forbids training on it. The steps are on Connect your AI.
Google requires us to spell this out: the use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements.
In plain terms. Your Gmail and Calendar data powers only the features you see here. It is never sold, never used for advertising, never used to train AI models beyond your own record’s personalisation, and no human reads it except with your explicit consent, for security, or where the law requires.
We keep your data while your account is active. Export is self-serve, both formats, straight from Settings, on any plan, any day. The machine-readable copy is in a published format any program can read, without us. Deletion is self-serve too, and you can cut off any connected account straight from Google. Where GDPR or CCPA apply to you, you have their full rights; we carve nothing out.
Deletion here means something stronger than a promise to press delete. Your stored mail is encrypted under a key that exists only for your account. When you delete, we destroy that key and then delete the files. Anything encrypted under it, including any copy that might still sit in a backup, becomes unreadable to us permanently, because the key that opened it no longer exists anywhere. You get a written record of the moment it was destroyed. Within thirty days every record we derived from your mail is deleted as well, and the account ends whole.
Rennik, Inc. (Delaware). The controller of your data where that term applies. team@ilurennik.com
Rennik, Inc. · last updated 6 October 2026